Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/M73b2rWcKzUItFmFO59tul7eNAA.roa
File: M73b2rWcKzUItFmFO59tul7eNAA.roa (raw, json)
Hash identifier: Kjxt9c1W9ahj/LKc9+6NzffdooTXoV3zg0we6Npj9nY=
Subject key identifier: 33:BD:DB:DA:B5:9C:2B:35:08:B4:59:85:3B:9F:6D:BA:5E:DE:34:00
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0334
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/M73b2rWcKzUItFmFO59tul7eNAA.roa
Signing time: Sun 11 May 2025 08:37:50 +0000
ROA not before: Sun 11 May 2025 08:37:50 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 820 (0x334)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 11 08:37:50 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=33BDDBDAB59C2B3508B459853B9F6DBA5EDE3400
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:88:cf:4b:58:c9:16:5c:9a:10:18:88:32:49:
8b:24:da:ea:8f:83:25:4e:a7:be:56:9d:42:2f:d5:
a9:eb:d6:34:fa:c5:1e:d4:35:cd:6d:98:4a:18:e6:
8c:b1:1e:fa:ba:31:27:1a:bb:c4:20:1d:5f:0e:df:
19:19:11:5c:78:2c:3d:c6:be:10:76:3d:3c:a0:96:
f8:ac:ae:71:bd:67:4d:63:23:ec:b4:a2:63:90:19:
4d:4b:2a:c9:da:41:9b:81:6b:d7:d6:fd:6e:06:0f:
e2:52:43:46:63:43:5b:a8:63:35:21:93:f1:e1:d4:
ff:57:f5:39:e2:eb:c5:b6:39:28:3d:13:da:79:f8:
af:5c:20:34:d8:86:89:8a:4b:bc:3f:84:09:c1:a4:
ef:a0:da:3a:78:25:f1:71:e6:cf:41:0e:41:47:ae:
d8:75:2a:53:32:6c:04:2a:94:29:0f:5e:d3:03:d8:
c9:eb:28:e1:d6:e5:7a:4d:22:4a:ec:0b:8f:20:a0:
a1:f1:90:78:0f:08:ec:f5:f7:d6:06:af:53:b1:79:
77:3b:55:49:79:94:b9:02:91:08:c4:2f:b6:a9:44:
a9:d0:4c:a1:9f:cb:4a:30:75:56:c6:b7:af:da:d6:
68:1c:30:4e:26:ba:ee:65:97:ad:c6:63:e2:ab:71:
ca:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:BD:DB:DA:B5:9C:2B:35:08:B4:59:85:3B:9F:6D:BA:5E:DE:34:00
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/M73b2rWcKzUItFmFO59tul7eNAA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
32:16:1a:20:7c:19:c4:06:b7:9d:c7:3c:46:72:a5:6a:35:5b:
1f:a6:c4:93:7e:c0:e4:9c:8b:9e:1f:fb:d7:e5:c4:5f:a2:3d:
2c:17:7e:ad:6f:8d:36:1b:68:d7:a3:5c:db:68:cd:41:08:90:
fd:72:68:6a:f5:d4:f5:95:f4:30:ef:34:95:b8:c1:51:52:fb:
b5:34:ad:d8:4e:ab:ea:cc:dc:12:b1:89:0a:af:1c:8f:d4:07:
94:0b:a7:a9:f7:21:b1:07:c0:f8:e5:05:90:cc:0a:c7:bb:af:
29:18:a5:42:05:00:e0:cf:a0:b4:d5:84:0b:f4:30:31:eb:9a:
ea:1c:a6:17:c6:57:38:a2:c0:59:6d:a2:7a:9c:b1:50:9a:ec:
6d:c5:15:3b:41:44:fd:b0:70:06:e8:dc:9a:8c:35:85:d1:97:
da:77:c1:15:5f:42:d8:15:83:85:53:90:5c:14:52:35:11:eb:
71:4a:f2:98:cf:7e:8f:9d:eb:03:84:eb:e6:82:cd:59:f0:7c:
9b:57:96:0d:1b:1c:0a:29:dc:e0:1f:95:a5:55:97:6c:a2:31:
82:48:fb:87:88:c8:09:03:26:aa:d1:94:90:69:05:f7:84:fd:
10:f8:81:4f:8f:22:a7:92:ac:11:45:41:f3:1f:87:6a:08:88:
bc:81:36:06
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICAzQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy
NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA1MTEw
ODM3NTBaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKDMzQkREQkRBQjU5QzJC
MzUwOEI0NTk4NTNCOUY2REJBNUVERTM0MDAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC1iM9LWMkWXJoQGIgySYsk2uqPgyVOp75WnUIv1anr1jT6xR7U
Nc1tmEoY5oyxHvq6MScau8QgHV8O3xkZEVx4LD3GvhB2PTyglvisrnG9Z01jI+y0
omOQGU1LKsnaQZuBa9fW/W4GD+JSQ0ZjQ1uoYzUhk/Hh1P9X9Tni68W2OSg9E9p5
+K9cIDTYhomKS7w/hAnBpO+g2jp4JfFx5s9BDkFHrth1KlMybAQqlCkPXtMD2Mnr
KOHW5XpNIkrsC48goKHxkHgPCOz199YGr1OxeXc7VUl5lLkCkQjEL7apRKnQTKGf
y0owdVbGt6/a1mgcME4muu5ll63GY+KrccoBAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUM73b2rWcKzUItFmFO59tul7eNAAwHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK
ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv
TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni9NNzNiMnJXY0t6VUl0Rm1G
TzU5dHVsN2VOQUEucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
fakwDQYJKoZIhvcNAQELBQADggEBADIWGiB8GcQGt53HPEZypWo1Wx+mxJN+wOSc
i54f+9flxF+iPSwXfq1vjTYbaNejXNtozUEIkP1yaGr11PWV9DDvNJW4wVFS+7U0
rdhOq+rM3BKxiQqvHI/UB5QLp6n3IbEHwPjlBZDMCse7rykYpUIFAODPoLTVhAv0
MDHrmuocphfGVziiwFltonqcsVCa7G3FFTtBRP2wcAbo3JqMNYXRl9p3wRVfQtgV
g4VTkFwUUjUR63FK8pjPfo+d6wOE6+aCzVnwfJtXlg0bHAop3OAflaVVl2yiMYJI
+4eIyAkDJqrRlJBpBfeE/RD4gU+PIqeSrBFFQfMfh2oIiLyBNgY=
-----END CERTIFICATE-----
Generated at Sun May 18 07:37:26 2025 by rpki-client