Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/SH9jfe07p-rx5qj9awTdh4v7HBA.roa
File: SH9jfe07p-rx5qj9awTdh4v7HBA.roa (raw, json)
Hash identifier: EwS9+nq6GmLbX7kac0vhWshJSdX98ZpKLpIupd/rOAM=
Subject key identifier: 48:7F:63:7D:ED:3B:A7:EA:F1:E6:A8:FD:6B:04:DD:87:8B:FB:1C:10
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 048C
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/SH9jfe07p-rx5qj9awTdh4v7HBA.roa
Signing time: Tue 13 May 2025 03:37:57 +0000
ROA not before: Tue 13 May 2025 03:37:57 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1164 (0x48c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 13 03:37:57 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=487F637DED3BA7EAF1E6A8FD6B04DD878BFB1C10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:17:3e:e2:1c:95:db:d5:47:b6:e3:44:65:56:
0d:73:99:dd:10:44:0f:89:4a:db:44:59:fe:26:c9:
26:54:86:06:25:02:36:22:24:c4:5e:61:c9:db:a0:
05:1e:a0:66:cd:5b:9d:41:7b:b9:28:a2:a2:cb:b7:
fe:07:43:7c:25:e0:ad:45:be:36:e5:b9:ac:6e:fa:
75:60:79:af:f0:5d:44:7d:7d:ce:16:e9:d9:04:4e:
0a:da:b0:b7:95:3f:bc:a3:a0:bb:f1:78:a6:83:15:
53:b9:40:b6:c8:2e:b0:99:a9:88:ea:9b:ed:19:c5:
47:10:49:a1:d5:f1:56:47:ae:08:cb:af:40:98:24:
0e:49:06:4b:31:39:17:11:b7:aa:c6:4a:c3:c6:a2:
ed:55:f7:23:40:da:a4:4a:bf:00:65:df:1f:f2:a6:
2d:e9:86:1b:6b:32:83:ab:1d:46:5e:15:44:27:47:
fa:00:b8:9f:5b:37:c9:cc:9d:29:b0:e2:e8:10:c2:
96:4e:95:76:3b:df:cd:cf:fc:25:f1:19:16:55:fd:
30:6d:e3:31:2c:90:0b:40:ac:ad:85:57:d1:c4:68:
12:9a:b1:45:11:85:1f:50:be:db:7d:4e:a8:ad:b6:
1a:1d:99:a8:0f:69:bf:66:b3:19:7b:cf:58:0a:16:
75:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:7F:63:7D:ED:3B:A7:EA:F1:E6:A8:FD:6B:04:DD:87:8B:FB:1C:10
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/SH9jfe07p-rx5qj9awTdh4v7HBA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
70:f3:b0:84:be:78:37:9c:3d:2d:42:d3:02:39:65:bf:d8:74:
4e:46:28:c8:d2:43:87:b1:e0:ea:8d:90:4d:04:05:3e:b7:d5:
35:91:7c:77:57:3d:9b:8e:27:f7:42:5e:e0:09:3f:e3:a8:aa:
14:74:fa:9b:ae:e6:47:0f:3e:ab:f8:b9:86:db:09:44:72:16:
76:3e:06:a8:a9:87:e6:6e:eb:7e:b9:60:b7:3a:79:fa:63:49:
28:9a:42:bf:ae:00:7d:36:3c:38:fb:a9:3c:67:36:98:a6:c5:
17:82:84:66:2e:ec:09:4a:16:fb:83:15:e1:90:94:36:c8:99:
b9:cf:a5:d4:95:2e:78:2b:f3:33:4b:04:67:0a:60:23:16:09:
b5:eb:6f:32:a8:d7:5f:8d:55:a2:05:6b:ee:52:2a:00:22:ea:
cb:89:44:4d:bd:fe:bd:e4:e7:a5:bc:3a:37:ad:5e:ad:da:ef:
c1:fd:c3:83:ea:32:3b:4e:5d:19:9f:30:79:8f:9f:cb:1d:c7:
d1:73:92:91:35:92:1d:3f:75:9e:a2:bf:02:09:b3:6b:48:73:
20:70:46:5e:3f:a2:d6:6a:f2:84:f3:46:9d:05:af:5d:4b:9e:
a5:3a:b1:a4:d3:c9:89:ae:51:bd:e0:c5:90:95:c1:5f:c5:36:
58:29:c4:61
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICBIwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy
NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA1MTMw
MzM3NTdaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKDQ4N0Y2MzdERUQzQkE3
RUFGMUU2QThGRDZCMDRERDg3OEJGQjFDMTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCuFz7iHJXb1Ue240RlVg1zmd0QRA+JSttEWf4mySZUhgYlAjYi
JMReYcnboAUeoGbNW51Be7kooqLLt/4HQ3wl4K1Fvjbluaxu+nVgea/wXUR9fc4W
6dkETgrasLeVP7yjoLvxeKaDFVO5QLbILrCZqYjqm+0ZxUcQSaHV8VZHrgjLr0CY
JA5JBksxORcRt6rGSsPGou1V9yNA2qRKvwBl3x/ypi3phhtrMoOrHUZeFUQnR/oA
uJ9bN8nMnSmw4ugQwpZOlXY7383P/CXxGRZV/TBt4zEskAtArK2FV9HEaBKasUUR
hR9Qvtt9TqitthodmagPab9msxl7z1gKFnUjAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUSH9jfe07p+rx5qj9awTdh4v7HBAwHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK
ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv
TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni9TSDlqZmUwN3Atcng1cWo5
YXdUZGg0djdIQkEucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
fakwDQYJKoZIhvcNAQELBQADggEBAHDzsIS+eDecPS1C0wI5Zb/YdE5GKMjSQ4ex
4OqNkE0EBT631TWRfHdXPZuOJ/dCXuAJP+OoqhR0+puu5kcPPqv4uYbbCURyFnY+
Bqiph+Zu6365YLc6efpjSSiaQr+uAH02PDj7qTxnNpimxReChGYu7AlKFvuDFeGQ
lDbImbnPpdSVLngr8zNLBGcKYCMWCbXrbzKo11+NVaIFa+5SKgAi6suJRE29/r3k
56W8OjetXq3a78H9w4PqMjtOXRmfMHmPn8sdx9FzkpE1kh0/dZ6ivwIJs2tIcyBw
Rl4/otZq8oTzRp0Fr11LnqU6saTTyYmuUb3gxZCVwV/FNlgpxGE=
-----END CERTIFICATE-----
Generated at Sun May 18 03:07:36 2025 by rpki-client