Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/2AiADHEWCri8o6yHmoPi2jgoiPs.roa
File: 2AiADHEWCri8o6yHmoPi2jgoiPs.roa (raw, json)
Hash identifier: Yj2jM2pJN6dF8IKyDySGhIIHzJN6/1XXsEogBBSiF00=
Subject key identifier: D8:08:80:0C:71:16:0A:B8:BC:A3:AC:87:9A:83:E2:DA:38:28:88:FB
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 07D8
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/2AiADHEWCri8o6yHmoPi2jgoiPs.roa
Signing time: Sat 17 May 2025 13:08:23 +0000
ROA not before: Sat 17 May 2025 13:08:23 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2008 (0x7d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 17 13:08:23 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=D808800C71160AB8BCA3AC879A83E2DA382888FB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:04:ed:e9:df:86:90:3c:5b:75:dc:4d:20:21:
86:b4:9c:1d:51:fc:81:b9:bc:43:4c:24:43:b3:fc:
58:54:8d:04:93:ec:a1:ee:78:66:1a:eb:7d:f4:04:
9b:79:f0:e2:7b:77:ba:39:d4:6a:a5:55:d4:19:af:
d5:78:be:8a:2e:db:6d:4d:d5:b7:56:73:9e:62:03:
75:29:9a:5b:f4:25:39:77:be:ef:6d:7f:dc:ba:80:
69:0f:7f:34:ca:51:30:46:9a:b3:81:b2:69:04:46:
ea:05:df:e9:d6:8b:97:f5:65:e4:99:ff:3d:48:ac:
23:81:8b:8e:c5:87:89:42:f2:8a:57:d7:8f:90:ce:
fa:d5:ae:ac:14:5b:21:eb:d1:b3:fb:f7:ba:d7:c2:
6b:83:a1:8e:00:d6:82:c7:43:ec:af:34:37:af:f1:
f3:52:6a:a3:02:71:26:dc:e2:d7:7f:41:92:fe:ee:
1d:99:99:cd:ed:e9:07:20:40:0e:cd:97:16:b9:68:
4f:f0:ca:a8:8a:a8:f5:4f:cb:0f:ae:e0:d0:b7:73:
00:31:33:2d:27:d0:17:f3:44:05:f7:f3:13:0f:04:
57:a2:3b:a2:38:24:0f:d6:10:b0:d6:e2:ee:f2:fc:
c4:44:b8:a6:82:3a:91:88:4c:3d:fb:68:2e:fb:ea:
b1:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:08:80:0C:71:16:0A:B8:BC:A3:AC:87:9A:83:E2:DA:38:28:88:FB
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/2AiADHEWCri8o6yHmoPi2jgoiPs.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
1a:e6:ec:5d:68:8d:fb:64:27:c7:37:24:68:d0:26:27:fc:ac:
30:54:b1:80:73:99:8d:3d:36:3c:5d:89:cc:f2:bf:c0:5c:36:
8d:b2:38:49:03:30:1a:33:d1:9a:5e:9d:60:b0:45:99:49:01:
2b:70:4f:89:e4:d6:97:70:47:d1:48:5a:00:9a:d4:84:96:05:
2e:5c:a0:b0:24:5b:9e:32:ff:f1:56:32:69:57:61:8d:1c:79:
47:26:6d:10:20:59:d9:93:70:32:56:8d:ac:00:8b:a8:02:75:
cb:e0:fd:4b:4a:22:21:4e:0b:ee:fe:73:15:20:e4:dc:73:7d:
51:f8:55:fa:c0:9a:4b:d2:41:bc:ac:2e:ee:d8:24:26:9d:d1:
10:58:00:82:34:cd:3b:5e:3f:f4:24:53:b1:e2:1c:7b:75:d4:
a4:22:f3:27:38:1b:aa:2d:0c:00:ed:10:08:d1:16:7c:71:9a:
5c:ed:7b:89:ac:21:48:e3:22:58:4d:88:c4:12:9b:0d:5e:ab:
17:a1:a1:ba:12:af:ee:c6:65:11:36:6f:69:61:9d:cf:55:c1:
6c:44:be:ae:3f:b4:35:e7:86:99:2e:f5:70:0f:ce:fb:a6:e6:
3f:35:39:fe:bf:55:55:9e:85:05:5e:5b:69:24:04:b4:56:26:
97:50:56:aa
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICB9gwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy
NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA1MTcx
MzA4MjNaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKEQ4MDg4MDBDNzExNjBB
QjhCQ0EzQUM4NzlBODNFMkRBMzgyODg4RkIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC+BO3p34aQPFt13E0gIYa0nB1R/IG5vENMJEOz/FhUjQST7KHu
eGYa6330BJt58OJ7d7o51GqlVdQZr9V4voou221N1bdWc55iA3Upmlv0JTl3vu9t
f9y6gGkPfzTKUTBGmrOBsmkERuoF3+nWi5f1ZeSZ/z1IrCOBi47Fh4lC8opX14+Q
zvrVrqwUWyHr0bP797rXwmuDoY4A1oLHQ+yvNDev8fNSaqMCcSbc4td/QZL+7h2Z
mc3t6QcgQA7Nlxa5aE/wyqiKqPVPyw+u4NC3cwAxMy0n0BfzRAX38xMPBFeiO6I4
JA/WELDW4u7y/MREuKaCOpGITD37aC776rHZAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQU2AiADHEWCri8o6yHmoPi2jgoiPswHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK
ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv
TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni8yQWlBREhFV0NyaThvNnlI
bW9QaTJqZ29pUHMucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
fakwDQYJKoZIhvcNAQELBQADggEBABrm7F1ojftkJ8c3JGjQJif8rDBUsYBzmY09
Njxdiczyv8BcNo2yOEkDMBoz0ZpenWCwRZlJAStwT4nk1pdwR9FIWgCa1ISWBS5c
oLAkW54y//FWMmlXYY0ceUcmbRAgWdmTcDJWjawAi6gCdcvg/UtKIiFOC+7+cxUg
5NxzfVH4VfrAmkvSQbysLu7YJCad0RBYAII0zTteP/QkU7HiHHt11KQi8yc4G6ot
DADtEAjRFnxxmlzte4msIUjjIlhNiMQSmw1eqxehoboSr+7GZRE2b2lhnc9VwWxE
vq4/tDXnhpku9XAPzvum5j81Of6/VVWehQVeW2kkBLRWJpdQVqo=
-----END CERTIFICATE-----
Generated at Sun May 18 04:52:11 2025 by rpki-client