Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/KwwajFZgxnsp-kyQjF-hVrJg8gw.roa
File: KwwajFZgxnsp-kyQjF-hVrJg8gw.roa (raw, json)
Hash identifier: qpxP2MRAmqB41NNzYtPxuHGdrB0/wnV+iCRkSX/6l+o=
Subject key identifier: 2B:0C:1A:8C:56:60:C6:7B:29:FA:4C:90:8C:5F:A1:56:B2:60:F2:0C
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 04B4
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/KwwajFZgxnsp-kyQjF-hVrJg8gw.roa
Signing time: Tue 13 May 2025 08:37:58 +0000
ROA not before: Tue 13 May 2025 08:37:57 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1204 (0x4b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 13 08:37:57 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=2B0C1A8C5660C67B29FA4C908C5FA156B260F20C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:56:b2:37:7b:65:4a:9a:22:59:a9:69:71:85:
30:9b:e7:17:61:c2:7d:bc:0a:4d:3b:37:a1:f2:5f:
6a:36:0c:f5:44:a7:22:10:c5:e8:28:38:f5:11:da:
68:30:f4:fc:cd:7c:94:bf:ef:e4:2d:1f:50:ab:b0:
30:f7:9a:f4:3f:3c:7d:0e:56:f1:2d:be:90:16:ec:
56:2f:ee:41:bb:b3:83:c0:fb:3e:7a:e4:c0:f2:ac:
f4:48:5b:1e:dc:2c:3d:c3:ff:d4:31:2c:ea:df:ef:
65:21:fe:93:f1:2c:c1:84:1f:f4:3b:d4:0e:9e:42:
e7:dc:5c:72:a1:80:50:4d:70:2d:34:56:30:bc:5b:
b4:45:51:96:86:9c:58:b7:dc:74:69:5b:c6:e3:5f:
7b:4c:99:59:9f:cc:64:e3:dd:01:49:c2:5c:87:31:
a1:47:00:ea:07:ad:3b:c0:cb:ef:a5:c5:09:c7:8c:
b6:52:6a:82:7b:d2:70:37:49:e0:f4:8d:8d:3b:5e:
c4:ab:cf:a4:c6:2d:a9:b1:bc:2e:27:dc:6d:a3:c0:
16:fe:b4:d3:41:ad:71:72:1d:87:15:64:a9:e4:f0:
5e:a4:d1:1b:1e:f8:19:74:66:88:22:66:53:5b:0f:
6c:ed:1b:7a:25:ec:5e:7c:0d:16:7e:2c:96:93:c2:
f0:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:0C:1A:8C:56:60:C6:7B:29:FA:4C:90:8C:5F:A1:56:B2:60:F2:0C
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/KwwajFZgxnsp-kyQjF-hVrJg8gw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
1e:aa:47:39:ab:4f:70:b1:05:49:0f:97:88:aa:a5:01:f3:d6:
06:b6:bd:33:da:55:38:75:a5:92:ed:64:f5:f4:db:fa:b2:ea:
87:14:b1:0b:d1:22:b7:5c:76:73:48:3a:f8:2c:fb:b8:ee:fd:
19:59:dc:c8:bc:19:4b:86:71:f1:08:22:f0:7b:5f:69:58:43:
71:d5:c8:e9:8f:1c:93:cc:6a:07:2c:b4:b4:44:9d:f5:8c:50:
ec:bb:99:9b:3b:4f:30:10:a1:a5:5e:6b:43:44:e3:b7:ea:7c:
c3:36:c5:27:c7:38:b0:2c:dd:f8:db:04:ad:dd:2c:7a:b7:32:
34:bb:67:ce:f1:96:71:8d:57:fd:7e:ba:3c:45:a0:36:67:2b:
76:ac:19:42:ae:e1:07:7c:75:ec:d7:65:71:48:81:5d:5b:6c:
b7:16:c4:a4:0b:55:e9:b4:74:c3:72:d9:70:09:94:5b:ee:1c:
cc:ed:ad:bf:fd:c7:c3:63:04:9c:f5:04:7a:20:ca:1b:62:ed:
aa:50:61:69:7e:9d:95:81:e2:c8:58:01:36:df:a2:5c:bc:49:
7a:36:1f:e0:fc:c7:23:e3:81:b9:b6:98:22:c0:a4:21:78:28:
41:a0:f1:f2:70:4b:21:04:1f:44:8e:b4:9a:98:6a:f8:be:80:
d2:3c:18:42
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICBLQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy
NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA1MTMw
ODM3NTdaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKDJCMEMxQThDNTY2MEM2
N0IyOUZBNEM5MDhDNUZBMTU2QjI2MEYyMEMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCzVrI3e2VKmiJZqWlxhTCb5xdhwn28Ck07N6HyX2o2DPVEpyIQ
xegoOPUR2mgw9PzNfJS/7+QtH1CrsDD3mvQ/PH0OVvEtvpAW7FYv7kG7s4PA+z56
5MDyrPRIWx7cLD3D/9QxLOrf72Uh/pPxLMGEH/Q71A6eQufcXHKhgFBNcC00VjC8
W7RFUZaGnFi33HRpW8bjX3tMmVmfzGTj3QFJwlyHMaFHAOoHrTvAy++lxQnHjLZS
aoJ70nA3SeD0jY07XsSrz6TGLamxvC4n3G2jwBb+tNNBrXFyHYcVZKnk8F6k0Rse
+Bl0ZogiZlNbD2ztG3ol7F58DRZ+LJaTwvARAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUKwwajFZgxnsp+kyQjF+hVrJg8gwwHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK
ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv
TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni9Ld3dhakZaZ3huc3Ata3lR
akYtaFZySmc4Z3cucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
fakwDQYJKoZIhvcNAQELBQADggEBAB6qRzmrT3CxBUkPl4iqpQHz1ga2vTPaVTh1
pZLtZPX02/qy6ocUsQvRIrdcdnNIOvgs+7ju/RlZ3Mi8GUuGcfEIIvB7X2lYQ3HV
yOmPHJPMagcstLREnfWMUOy7mZs7TzAQoaVea0NE47fqfMM2xSfHOLAs3fjbBK3d
LHq3MjS7Z87xlnGNV/1+ujxFoDZnK3asGUKu4Qd8dezXZXFIgV1bbLcWxKQLVem0
dMNy2XAJlFvuHMztrb/9x8NjBJz1BHogyhti7apQYWl+nZWB4shYATbfoly8SXo2
H+D8xyPjgbm2mCLApCF4KEGg8fJwSyEEH0SOtJqYavi+gNI8GEI=
-----END CERTIFICATE-----
Generated at Sat May 17 23:16:45 2025 by rpki-client