Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/XTUCmFPRvoFZXKZjoCaqd9ms-lU.roa
File: XTUCmFPRvoFZXKZjoCaqd9ms-lU.roa (raw, json)
Hash identifier: Kd3JRzeU4dWdlegbj9XaGxM/gDqgTPj0pKr9wb1bKgI=
Subject key identifier: 5D:35:02:98:53:D1:BE:81:59:5C:A6:63:A0:26:AA:77:D9:AC:FA:55
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1BDA
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/XTUCmFPRvoFZXKZjoCaqd9ms-lU.roa
Signing time: Fri 13 Jun 2025 05:21:02 +0000
ROA not before: Fri 13 Jun 2025 05:21:02 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7130 (0x1bda)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 13 05:21:02 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=5D35029853D1BE81595CA663A026AA77D9ACFA55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:cd:a8:3f:9b:48:2f:2a:e6:07:8a:fc:31:40:
58:9e:32:6f:1b:d4:e9:c2:e2:a2:ed:f9:19:50:62:
52:55:e1:36:e9:18:c6:6b:8c:46:a3:21:46:93:5a:
1b:e4:be:3e:d4:b5:e4:0e:4e:d9:cb:9f:70:22:31:
70:ae:51:d2:fd:2b:b0:67:b7:97:6e:a3:c0:da:2e:
1e:67:d3:bd:68:dd:fd:04:81:20:72:31:4c:01:d2:
58:50:82:48:ea:f1:10:05:cb:75:40:1b:0f:ee:88:
5c:a9:17:e7:ab:99:95:eb:a4:63:8f:26:79:cf:16:
e2:ef:81:c5:2d:56:a8:2c:b2:ff:7f:b3:e2:95:38:
80:0f:7a:47:c0:47:74:88:20:b1:bc:09:dd:ca:2d:
aa:26:95:b5:c7:a2:67:f7:a1:3f:5f:49:8c:f7:f7:
60:5b:05:ac:43:9a:1c:62:db:52:2b:e5:dd:95:c2:
a2:ea:51:20:30:bf:c2:4c:f6:d6:e1:95:e9:e9:0d:
1b:43:4d:2a:bb:9a:1f:a4:09:68:e9:8d:13:09:d6:
4a:e5:ca:7c:e0:64:6c:17:07:50:e1:e9:02:94:0f:
46:ec:e7:38:df:8d:ab:5c:72:12:e0:8c:2e:af:e2:
f1:a9:93:0b:95:d4:f3:d3:32:6e:c7:9b:a8:78:d8:
ce:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:35:02:98:53:D1:BE:81:59:5C:A6:63:A0:26:AA:77:D9:AC:FA:55
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/XTUCmFPRvoFZXKZjoCaqd9ms-lU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
66:d8:53:7e:d6:a1:f5:4f:cc:53:07:6c:e5:ed:2a:c3:8d:8b:
c9:f2:c3:5e:f9:5a:2d:d3:da:f1:9e:9d:79:64:5e:81:e5:4e:
ab:7a:5f:db:a1:a3:4d:3e:1b:44:39:89:c3:24:bb:9c:4e:69:
de:a0:13:37:b7:a6:21:8d:db:43:a9:11:0d:a9:a1:b5:75:a2:
aa:a1:fc:20:cb:de:8b:18:c4:be:5b:2b:e5:f4:89:57:ef:26:
75:48:41:f9:ee:8e:09:31:e7:08:62:3e:25:1d:64:37:c3:2d:
3b:d7:f4:4a:21:f7:ba:dc:7d:d4:8d:c8:f3:48:01:fd:07:db:
63:9c:dd:d5:6d:56:29:20:9c:f3:dd:ef:50:17:c0:59:94:f1:
df:df:32:58:68:ed:fe:17:08:f7:20:d4:0e:44:31:bc:cc:45:
5f:af:fd:93:29:e1:6b:4a:d1:2a:c8:a6:0f:df:1b:2f:6a:7f:
2c:f6:5c:fa:cf:1a:5c:ee:1a:d0:53:7f:e6:6f:19:51:a5:6b:
56:cb:45:4c:44:2d:27:4c:e1:87:10:3c:6e:43:cf:8e:17:4a:
f1:28:b8:51:ac:a9:21:5e:d9:9c:97:a7:76:12:1a:92:72:68:
1c:cc:15:ec:63:66:03:f9:ea:d5:2c:5b:bc:ba:30:1e:b9:b7:
ab:f4:6e:0c
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICG9owDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy
NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA2MTMw
NTIxMDJaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKDVEMzUwMjk4NTNEMUJF
ODE1OTVDQTY2M0EwMjZBQTc3RDlBQ0ZBNTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDGzag/m0gvKuYHivwxQFieMm8b1OnC4qLt+RlQYlJV4TbpGMZr
jEajIUaTWhvkvj7UteQOTtnLn3AiMXCuUdL9K7Bnt5duo8DaLh5n071o3f0EgSBy
MUwB0lhQgkjq8RAFy3VAGw/uiFypF+ermZXrpGOPJnnPFuLvgcUtVqgssv9/s+KV
OIAPekfAR3SIILG8Cd3KLaomlbXHomf3oT9fSYz392BbBaxDmhxi21Ir5d2VwqLq
USAwv8JM9tbhlenpDRtDTSq7mh+kCWjpjRMJ1krlynzgZGwXB1Dh6QKUD0bs5zjf
jatcchLgjC6v4vGpkwuV1PPTMm7Hm6h42M5NAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUXTUCmFPRvoFZXKZjoCaqd9ms+lUwHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK
ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv
TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni9YVFVDbUZQUnZvRlpYS1pq
b0NhcWQ5bXMtbFUucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
dxAwDQYJKoZIhvcNAQELBQADggEBAGbYU37WofVPzFMHbOXtKsONi8nyw175Wi3T
2vGenXlkXoHlTqt6X9uho00+G0Q5icMku5xOad6gEze3piGN20OpEQ2pobV1oqqh
/CDL3osYxL5bK+X0iVfvJnVIQfnujgkx5whiPiUdZDfDLTvX9Eoh97rcfdSNyPNI
Af0H22Oc3dVtVikgnPPd71AXwFmU8d/fMlho7f4XCPcg1A5EMbzMRV+v/ZMp4WtK
0SrIpg/fGy9qfyz2XPrPGlzuGtBTf+ZvGVGla1bLRUxELSdM4YcQPG5Dz44XSvEo
uFGsqSFe2ZyXp3YSGpJyaBzMFexjZgP56tUsW7y6MB65t6v0bgw=
-----END CERTIFICATE-----
Generated at Sun Jul 20 12:55:34 2025 by rpki-client