Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/I2UjZvSnoW9MMUoX3lBEaNWGnxo.roa
File: I2UjZvSnoW9MMUoX3lBEaNWGnxo.roa (raw, json)
Hash identifier: E76pStW0EKIG1LYsG+rJK2lpA9NS8RzXBnauHzTLIp0=
Subject key identifier: 23:65:23:66:F4:A7:A1:6F:4C:31:4A:17:DE:50:44:68:D5:86:9F:1A
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 031C
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/I2UjZvSnoW9MMUoX3lBEaNWGnxo.roa
Signing time: Sun 11 May 2025 05:38:23 +0000
ROA not before: Sun 11 May 2025 05:38:23 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 796 (0x31c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 11 05:38:23 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=23652366F4A7A16F4C314A17DE504468D5869F1A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:bf:82:1a:56:25:b9:0b:bb:ff:f0:0e:f8:3e:
dc:ca:bc:f8:8c:36:86:e8:a7:b5:bf:42:6d:8b:a5:
27:67:eb:78:21:f6:db:ca:40:0d:77:39:38:ef:6d:
de:2b:13:18:27:f3:7c:e7:fa:c6:98:f1:f0:af:42:
21:c4:08:d0:36:b3:54:73:cd:68:7a:1c:2b:47:40:
f2:e6:7a:32:c8:de:86:8e:31:db:01:a4:bd:b4:d5:
e2:5b:82:18:37:ac:b9:68:d0:83:4a:f4:bb:f8:64:
92:aa:e0:f4:72:44:f0:4b:3f:e9:44:cf:75:46:8e:
00:a9:84:93:96:63:8d:6f:fa:23:3b:7c:85:2f:8a:
b6:90:5b:76:c9:10:15:04:1c:9a:a4:6e:84:3e:29:
1c:27:e2:2f:6c:f4:41:f1:06:90:e6:53:11:93:38:
57:9d:b7:f9:5c:f7:39:57:44:f5:01:a0:6d:45:fd:
c2:a6:20:36:61:06:b2:3d:da:68:3b:ad:bc:f1:ad:
48:7e:cd:3d:61:0a:18:b6:24:96:77:0a:8d:91:f9:
2d:cd:1f:32:41:f6:00:63:39:84:b2:00:69:74:89:
73:09:07:6f:40:3b:7e:01:a3:b6:03:12:3b:2c:69:
e0:1f:fd:48:98:e4:a1:d6:04:cc:33:bf:c1:5c:8d:
ab:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:65:23:66:F4:A7:A1:6F:4C:31:4A:17:DE:50:44:68:D5:86:9F:1A
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/I2UjZvSnoW9MMUoX3lBEaNWGnxo.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
ad:db:b1:59:f2:12:98:1d:eb:38:fc:f9:af:71:76:5d:07:0e:
85:70:8b:51:ea:7b:d9:d1:1c:2b:16:3f:5a:f3:e0:b8:17:4c:
f6:46:d2:b0:c2:42:3f:6b:ea:e3:75:39:eb:02:66:22:6d:33:
b6:3c:c4:ab:7f:f9:6d:e1:80:c0:42:fe:7d:16:93:41:2e:fc:
e8:7b:1b:25:46:98:93:53:72:54:1a:b6:fd:8a:09:c6:fd:90:
46:f7:d1:b1:86:63:ef:bb:01:fc:f8:c1:49:23:54:21:de:6c:
6f:f9:d6:dd:fb:21:2c:4d:c2:37:36:04:6c:c2:26:65:1c:88:
99:20:c8:c6:1d:be:30:fe:9d:00:01:f7:28:31:f6:e3:cf:dd:
ec:d8:c3:05:fc:d8:02:3f:17:5b:c5:c9:03:54:66:b0:cf:3a:
9e:c2:7b:2c:7b:3a:05:5a:ce:49:a2:4c:3b:aa:8a:83:d9:78:
e1:9b:2c:57:d4:23:ff:1f:fb:4b:41:dd:49:da:51:d8:c8:89:
22:d9:69:c0:78:7a:a8:68:7d:af:9a:a3:13:e0:1f:16:50:c2:
46:7d:04:8e:fd:25:61:2f:8f:80:ac:e9:ee:f2:4d:38:9f:44:
0e:36:3c:b7:56:93:f0:5c:4a:2a:40:a7:19:9f:65:bf:6c:72:
ba:12:7e:14
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICAxwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy
NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA1MTEw
NTM4MjNaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKDIzNjUyMzY2RjRBN0Ex
NkY0QzMxNEExN0RFNTA0NDY4RDU4NjlGMUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDkv4IaViW5C7v/8A74PtzKvPiMNobop7W/Qm2LpSdn63gh9tvK
QA13OTjvbd4rExgn83zn+saY8fCvQiHECNA2s1RzzWh6HCtHQPLmejLI3oaOMdsB
pL201eJbghg3rLlo0INK9Lv4ZJKq4PRyRPBLP+lEz3VGjgCphJOWY41v+iM7fIUv
iraQW3bJEBUEHJqkboQ+KRwn4i9s9EHxBpDmUxGTOFedt/lc9zlXRPUBoG1F/cKm
IDZhBrI92mg7rbzxrUh+zT1hChi2JJZ3Co2R+S3NHzJB9gBjOYSyAGl0iXMJB29A
O34Bo7YDEjssaeAf/UiY5KHWBMwzv8FcjauXAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUI2UjZvSnoW9MMUoX3lBEaNWGnxowHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK
ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv
TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni9JMlVqWnZTbm9XOU1NVW9Y
M2xCRWFOV0dueG8ucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
fakwDQYJKoZIhvcNAQELBQADggEBAK3bsVnyEpgd6zj8+a9xdl0HDoVwi1Hqe9nR
HCsWP1rz4LgXTPZG0rDCQj9r6uN1OesCZiJtM7Y8xKt/+W3hgMBC/n0Wk0Eu/Oh7
GyVGmJNTclQatv2KCcb9kEb30bGGY++7Afz4wUkjVCHebG/51t37ISxNwjc2BGzC
JmUciJkgyMYdvjD+nQAB9ygx9uPP3ezYwwX82AI/F1vFyQNUZrDPOp7Ceyx7OgVa
zkmiTDuqioPZeOGbLFfUI/8f+0tB3UnaUdjIiSLZacB4eqhofa+aoxPgHxZQwkZ9
BI79JWEvj4Cs6e7yTTifRA42PLdWk/BcSipApxmfZb9scroSfhQ=
-----END CERTIFICATE-----
Generated at Sat May 17 19:41:20 2025 by rpki-client