Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/Y-NBweqP9PTA06kIIOuXIwx-JJo.roa
File: Y-NBweqP9PTA06kIIOuXIwx-JJo.roa (raw, json)
Hash identifier: xe37F0heYKmvwYRYz0SMDIEh4Emb57mREvk/QsdgMR4=
Subject key identifier: 63:E3:41:C1:EA:8F:F4:F4:C0:D3:A9:08:20:EB:97:23:0C:7E:24:9A
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 07B4
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/Y-NBweqP9PTA06kIIOuXIwx-JJo.roa
Signing time: Sat 17 May 2025 08:38:11 +0000
ROA not before: Sat 17 May 2025 08:38:11 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1972 (0x7b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 17 08:38:11 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=63E341C1EA8FF4F4C0D3A90820EB97230C7E249A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:61:6e:5a:d4:4a:ef:ed:15:9d:91:d2:dc:30:
ab:fc:de:10:5f:a5:3b:73:47:87:54:ae:58:2f:01:
00:45:f7:fe:cb:01:c8:b9:fb:22:0b:73:b7:5a:65:
b1:f3:a8:6a:d5:bf:19:f7:3d:0b:c8:d2:3f:9d:17:
24:b7:18:e5:ff:c4:7e:6e:b3:0e:ea:43:8b:bd:90:
ed:3c:43:13:7e:aa:b0:20:e3:96:3c:23:c6:6c:b6:
15:b5:b3:59:0e:82:fa:9d:6a:fd:93:5b:d4:80:55:
ac:a7:1a:ef:03:ff:f4:9f:89:65:4d:54:0a:23:c8:
0b:08:3b:2e:c3:bf:4c:a8:33:86:01:dc:0a:48:f7:
0f:88:4c:35:d4:cd:55:3d:aa:d3:0f:2f:cf:8d:f9:
c7:f5:df:bd:25:af:69:68:19:be:29:94:f6:66:e5:
e2:6b:7d:ae:00:47:f2:d9:78:cc:a7:42:b1:fd:a8:
b2:bd:66:e0:28:4b:93:c3:e6:ec:b9:07:47:53:c2:
75:7a:53:ed:89:a6:15:5b:f7:a9:ff:f0:cb:3d:e4:
5b:bc:51:57:ab:1e:41:65:e5:fc:2d:fd:36:30:72:
07:6a:e9:e7:0a:f8:cb:7c:da:ce:91:1a:03:9e:2a:
f2:18:6f:ae:08:92:c5:b0:de:99:9f:ef:0e:9b:c4:
dd:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:E3:41:C1:EA:8F:F4:F4:C0:D3:A9:08:20:EB:97:23:0C:7E:24:9A
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/Y-NBweqP9PTA06kIIOuXIwx-JJo.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
8c:07:75:df:43:02:62:5e:58:a3:93:53:97:ed:b0:1f:1f:80:
a7:f1:4d:ac:1b:39:5d:2e:1a:0f:32:56:03:b5:57:95:49:67:
20:50:f2:8f:d8:ba:fa:37:40:e1:be:5a:92:05:2f:a8:9e:b4:
9f:05:26:c7:47:78:9b:ef:8f:e8:1b:29:9a:eb:ee:45:c7:a8:
2b:b7:6e:40:85:d7:59:b8:d4:22:59:eb:de:c0:48:b3:5b:9a:
2c:7a:64:d7:1c:51:a0:31:b9:3c:ff:bc:6e:4b:ed:2d:a2:d7:
48:eb:26:a9:a0:05:58:4d:08:47:c2:d6:de:d7:5b:6a:ab:8b:
e2:ba:4c:15:37:bd:d9:f6:b9:23:09:d0:40:98:82:02:d1:42:
3a:20:06:7d:9a:c3:7d:61:50:8c:d1:15:a4:b0:64:12:c2:b2:
98:55:5d:79:bd:3e:cc:90:46:9b:aa:d8:2b:15:b1:bb:96:98:
b0:ae:49:88:d0:43:0d:e7:4e:35:7c:d4:37:cf:3d:f3:45:86:
17:2b:ae:37:7b:97:c3:4a:87:63:c6:f0:e8:e8:90:38:21:52:
5c:61:11:fe:d4:8e:88:25:0a:de:fa:45:a7:64:df:79:8f:85:
cd:fc:4f:67:97:0f:b9:f0:07:c9:f1:c9:46:07:9d:97:fb:c8:
d9:b1:30:21
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICB7QwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy
NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA1MTcw
ODM4MTFaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKDYzRTM0MUMxRUE4RkY0
RjRDMEQzQTkwODIwRUI5NzIzMEM3RTI0OUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC9YW5a1Erv7RWdkdLcMKv83hBfpTtzR4dUrlgvAQBF9/7LAci5
+yILc7daZbHzqGrVvxn3PQvI0j+dFyS3GOX/xH5usw7qQ4u9kO08QxN+qrAg45Y8
I8ZsthW1s1kOgvqdav2TW9SAVaynGu8D//SfiWVNVAojyAsIOy7Dv0yoM4YB3ApI
9w+ITDXUzVU9qtMPL8+N+cf1370lr2loGb4plPZm5eJrfa4AR/LZeMynQrH9qLK9
ZuAoS5PD5uy5B0dTwnV6U+2JphVb96n/8Ms95Fu8UVerHkFl5fwt/TYwcgdq6ecK
+Mt82s6RGgOeKvIYb64IksWw3pmf7w6bxN0/AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUY+NBweqP9PTA06kIIOuXIwx+JJowHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK
ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv
TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni9ZLU5Cd2VxUDlQVEEwNmtJ
SU91WEl3eC1KSm8ucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
fakwDQYJKoZIhvcNAQELBQADggEBAIwHdd9DAmJeWKOTU5ftsB8fgKfxTawbOV0u
Gg8yVgO1V5VJZyBQ8o/Yuvo3QOG+WpIFL6ietJ8FJsdHeJvvj+gbKZrr7kXHqCu3
bkCF11m41CJZ697ASLNbmix6ZNccUaAxuTz/vG5L7S2i10jrJqmgBVhNCEfC1t7X
W2qri+K6TBU3vdn2uSMJ0ECYggLRQjogBn2aw31hUIzRFaSwZBLCsphVXXm9PsyQ
Rpuq2CsVsbuWmLCuSYjQQw3nTjV81DfPPfNFhhcrrjd7l8NKh2PG8OjokDghUlxh
Ef7UjoglCt76Radk33mPhc38T2eXD7nwB8nxyUYHnZf7yNmxMCE=
-----END CERTIFICATE-----
Generated at Sun May 18 03:38:26 2025 by rpki-client