Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/SJ4Tki-p9ai17Fb08x0Rat-EmPo.roa
File: SJ4Tki-p9ai17Fb08x0Rat-EmPo.roa (raw, json)
Hash identifier: F5feamAvNKy2SipnWI5iyRWpXnhM1csux+mXkMR3TF0=
Subject key identifier: 48:9E:13:92:2F:A9:F5:A8:B5:EC:56:F4:F3:1D:11:6A:DF:84:98:FA
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 027E
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/SJ4Tki-p9ai17Fb08x0Rat-EmPo.roa
Signing time: Sat 10 May 2025 09:37:51 +0000
ROA not before: Sat 10 May 2025 09:37:51 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 638 (0x27e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 10 09:37:51 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=489E13922FA9F5A8B5EC56F4F31D116ADF8498FA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:5d:7a:b5:ed:4c:44:04:58:fe:23:c7:c5:48:
49:cd:50:cf:6a:8e:f6:a3:14:9f:28:a7:22:48:e8:
58:10:88:e3:d3:06:36:71:b5:ca:7a:e5:e7:f6:88:
aa:7d:b4:7d:3d:c0:3a:9f:c6:c2:04:f0:17:eb:7d:
d4:98:59:97:8b:64:24:f2:05:55:38:15:11:2d:7c:
27:e9:56:ca:10:8b:93:ee:d0:60:e9:e7:67:82:a6:
1b:fb:d9:00:80:4c:e7:2d:d5:fd:5a:c7:9d:cd:c3:
04:c5:3f:d8:ec:d0:0e:44:b0:53:d4:de:05:e8:ac:
c1:c6:60:d8:00:66:1d:39:61:a6:4f:18:71:14:df:
22:c4:51:9f:93:af:bb:a3:32:fd:58:b7:ac:06:7c:
08:97:9f:27:82:66:e7:f9:82:7d:fc:39:0f:d4:42:
87:c5:62:7c:59:ee:6c:e6:c8:ce:e4:a1:05:f1:88:
10:11:f5:1f:0c:48:21:ac:7c:ab:b0:44:ae:ba:74:
00:6f:6b:fe:39:ee:82:c7:76:c1:bb:b5:4d:99:42:
7b:ad:91:a8:fc:da:76:dc:10:c5:12:74:58:d6:9e:
f3:c8:29:33:6c:99:e4:c6:1c:71:f7:7a:c6:9c:01:
3d:1b:94:64:91:91:c5:c6:96:b5:2e:45:96:9f:a7:
e0:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:9E:13:92:2F:A9:F5:A8:B5:EC:56:F4:F3:1D:11:6A:DF:84:98:FA
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/SJ4Tki-p9ai17Fb08x0Rat-EmPo.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
8a:84:a4:8e:e6:4d:62:1a:7e:5e:96:60:94:10:cb:29:f7:99:
f7:a4:a7:54:55:9d:65:53:5f:48:8d:65:eb:de:cc:07:05:56:
42:1e:26:ec:93:2c:00:60:18:e5:e8:6a:12:a1:f5:f8:3d:a8:
09:68:f3:37:6c:e7:f6:a3:ce:1b:41:50:2e:0c:8a:f0:ab:14:
c4:f9:0f:69:ee:8f:15:44:40:b7:be:04:8d:2d:25:69:8f:0a:
b2:f8:70:11:2e:7c:09:a8:8d:50:37:32:19:7d:15:01:b5:4f:
da:4e:89:de:7b:56:55:80:82:dd:7f:81:30:d4:84:da:53:6e:
3a:61:ec:13:88:9d:a1:bd:ca:ba:95:04:03:db:24:90:e2:0f:
2a:bc:fe:61:37:14:70:e7:fd:14:35:8d:18:7d:3e:fd:f8:89:
32:56:32:a4:92:ff:16:d6:ce:b8:1a:c8:c5:9a:e3:84:25:e2:
43:80:ce:0b:54:37:fd:aa:c1:14:7a:04:24:71:42:1d:9a:98:
5c:b3:bf:32:2f:e1:ef:08:2d:3d:51:11:3c:bb:1e:33:de:c1:
6a:7c:ee:aa:30:b2:ae:54:87:8b:99:b0:9c:17:da:c1:6f:74:
67:ea:5a:5c:44:a4:cb:08:db:74:79:72:5c:72:d1:56:a8:58:
27:34:3d:00
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICAn4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy
NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA1MTAw
OTM3NTFaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKDQ4OUUxMzkyMkZBOUY1
QThCNUVDNTZGNEYzMUQxMTZBREY4NDk4RkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDAXXq17UxEBFj+I8fFSEnNUM9qjvajFJ8opyJI6FgQiOPTBjZx
tcp65ef2iKp9tH09wDqfxsIE8BfrfdSYWZeLZCTyBVU4FREtfCfpVsoQi5Pu0GDp
52eCphv72QCATOct1f1ax53NwwTFP9js0A5EsFPU3gXorMHGYNgAZh05YaZPGHEU
3yLEUZ+Tr7ujMv1Yt6wGfAiXnyeCZuf5gn38OQ/UQofFYnxZ7mzmyM7koQXxiBAR
9R8MSCGsfKuwRK66dABva/457oLHdsG7tU2ZQnutkaj82nbcEMUSdFjWnvPIKTNs
meTGHHH3esacAT0blGSRkcXGlrUuRZafp+DTAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUSJ4Tki+p9ai17Fb08x0Rat+EmPowHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK
ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv
TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni9TSjRUa2ktcDlhaTE3RmIw
OHgwUmF0LUVtUG8ucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
dxAwDQYJKoZIhvcNAQELBQADggEBAIqEpI7mTWIafl6WYJQQyyn3mfekp1RVnWVT
X0iNZevezAcFVkIeJuyTLABgGOXoahKh9fg9qAlo8zds5/ajzhtBUC4MivCrFMT5
D2nujxVEQLe+BI0tJWmPCrL4cBEufAmojVA3Mhl9FQG1T9pOid57VlWAgt1/gTDU
hNpTbjph7BOInaG9yrqVBAPbJJDiDyq8/mE3FHDn/RQ1jRh9Pv34iTJWMqSS/xbW
zrgayMWa44Ql4kOAzgtUN/2qwRR6BCRxQh2amFyzvzIv4e8ILT1RETy7HjPewWp8
7qowsq5Uh4uZsJwX2sFvdGfqWlxEpMsI23R5clxy0VaoWCc0PQA=
-----END CERTIFICATE-----
Generated at Sat May 17 20:02:00 2025 by rpki-client