Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/dlABbVdHHQdtZJhl2n29tYY-18E.roa
File: dlABbVdHHQdtZJhl2n29tYY-18E.roa (raw, json)
Hash identifier: 5K0bYSdzCGhxlXiScrMYp769rS3VlyaB5ifcjWkT3z4=
Subject key identifier: 76:50:01:6D:57:47:1D:07:6D:64:98:65:DA:7D:BD:B5:86:3E:D7:C1
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 2116
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/dlABbVdHHQdtZJhl2n29tYY-18E.roa
Signing time: Fri 20 Jun 2025 16:11:42 +0000
ROA not before: Fri 20 Jun 2025 16:11:42 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8470 (0x2116)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 20 16:11:42 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=7650016D57471D076D649865DA7DBDB5863ED7C1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:0e:9a:b6:67:7f:9a:04:0d:84:17:54:13:cd:
bd:0f:5b:f2:6c:ee:9e:fc:d1:f2:7e:63:71:cc:c2:
24:a4:61:a9:a2:8c:aa:a8:83:e4:b0:70:c6:44:98:
e0:4f:2f:f7:e4:6d:5d:2f:72:03:8d:f2:15:96:a4:
8a:2e:ab:3c:a6:3a:27:45:bc:b2:51:74:3c:08:2c:
93:6f:96:e9:cf:1f:49:12:1c:27:55:f7:df:61:f7:
e3:c4:9b:de:4b:65:e5:b0:40:ae:8b:69:7e:f2:3e:
47:07:db:ef:72:f8:5e:26:dd:1d:f4:dd:54:21:b7:
5f:b2:fd:6b:45:ea:5b:0f:88:16:dd:71:3f:0a:ad:
8d:9a:83:2e:9f:c2:ac:b5:b5:a2:f7:76:f4:83:6c:
11:78:de:8d:fa:3c:89:7b:4a:cc:4b:3b:03:a9:4b:
2b:79:d3:7a:d1:9e:a5:14:30:4a:f1:36:48:e2:d9:
b8:72:29:68:dc:eb:93:85:4b:ec:98:10:08:6d:e9:
7a:93:4f:92:9f:0c:1d:31:42:29:fd:6d:3b:c8:60:
9a:3e:fe:a8:06:c0:85:ea:f9:21:f3:61:7e:0b:d2:
4d:8b:2b:ea:69:10:ab:2e:7a:9b:09:ea:77:03:f3:
f2:ae:20:03:fd:55:4d:c4:f4:fb:70:85:2d:40:e3:
59:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:50:01:6D:57:47:1D:07:6D:64:98:65:DA:7D:BD:B5:86:3E:D7:C1
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/dlABbVdHHQdtZJhl2n29tYY-18E.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
48:6b:c5:df:b1:a3:ff:40:b5:3d:15:f8:24:f0:a8:32:9f:35:
74:3b:22:62:9a:1b:82:d2:50:4f:89:5e:26:90:d2:f1:ab:80:
7a:81:ea:0b:50:01:be:b8:eb:ec:e5:98:35:88:2a:a7:7b:71:
56:ec:5b:2f:b0:44:da:32:be:a7:9f:9b:3e:d8:5a:4c:5a:2d:
99:25:9d:76:f2:24:da:8c:ff:5f:07:d2:87:fb:ca:82:45:6f:
87:89:0b:b3:e2:33:8b:c0:c6:f4:0c:fd:5d:0b:d1:8d:ca:d7:
9c:dc:55:83:32:5e:a4:42:23:73:73:f4:a9:66:43:2e:3f:b0:
b2:ba:61:93:93:e0:7d:52:8d:d7:13:e0:bb:a3:ec:7b:3b:7a:
a7:a0:82:e0:8b:7c:08:2d:e8:92:cc:2f:b5:8b:cc:d4:d6:5a:
6d:ec:ed:ee:cf:82:95:b9:47:c3:dc:5a:5c:f3:ac:03:8f:c7:
29:8a:fe:d3:f0:c5:6e:3d:8d:27:1c:d3:ec:3b:52:13:4b:99:
02:db:73:42:21:3c:8d:7e:a0:91:65:f9:21:1d:1d:85:f3:9a:
2c:a5:60:29:f7:b7:d9:d3:04:fa:fb:54:a7:55:80:9e:ac:a7:
27:3e:9b:3b:48:b5:43:ad:08:b6:d7:34:05:e1:48:00:7b:92:
fa:28:e6:d6
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICIRYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy
NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA2MjAx
NjExNDJaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKDc2NTAwMTZENTc0NzFE
MDc2RDY0OTg2NURBN0RCREI1ODYzRUQ3QzEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCZDpq2Z3+aBA2EF1QTzb0PW/Js7p780fJ+Y3HMwiSkYamijKqo
g+SwcMZEmOBPL/fkbV0vcgON8hWWpIouqzymOidFvLJRdDwILJNvlunPH0kSHCdV
999h9+PEm95LZeWwQK6LaX7yPkcH2+9y+F4m3R303VQht1+y/WtF6lsPiBbdcT8K
rY2agy6fwqy1taL3dvSDbBF43o36PIl7SsxLOwOpSyt503rRnqUUMErxNkji2bhy
KWjc65OFS+yYEAht6XqTT5KfDB0xQin9bTvIYJo+/qgGwIXq+SHzYX4L0k2LK+pp
EKsuepsJ6ncD8/KuIAP9VU3E9PtwhS1A41nfAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUdlABbVdHHQdtZJhl2n29tYY+18EwHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK
ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv
TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni9kbEFCYlZkSEhRZHRaSmhs
Mm4yOXRZWS0xOEUucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
dxAwDQYJKoZIhvcNAQELBQADggEBAEhrxd+xo/9AtT0V+CTwqDKfNXQ7ImKaG4LS
UE+JXiaQ0vGrgHqB6gtQAb646+zlmDWIKqd7cVbsWy+wRNoyvqefmz7YWkxaLZkl
nXbyJNqM/18H0of7yoJFb4eJC7PiM4vAxvQM/V0L0Y3K15zcVYMyXqRCI3Nz9Klm
Qy4/sLK6YZOT4H1SjdcT4Luj7Hs7eqegguCLfAgt6JLML7WLzNTWWm3s7e7PgpW5
R8PcWlzzrAOPxymK/tPwxW49jScc0+w7UhNLmQLbc0IhPI1+oJFl+SEdHYXzmiyl
YCn3t9nTBPr7VKdVgJ6spyc+mztItUOtCLbXNAXhSAB7kvoo5tY=
-----END CERTIFICATE-----
Generated at Sun Jul 20 12:46:42 2025 by rpki-client