Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/ZJYkB9CKdKpiC4LWA1ojE-WiUGA.roa
File: ZJYkB9CKdKpiC4LWA1ojE-WiUGA.roa (raw, json)
Hash identifier: KipjUb5w3Z3AxWOgzUQqnUFDu77yU/GzKgY8rlwpRYg=
Subject key identifier: 64:96:24:07:D0:8A:74:AA:62:0B:82:D6:03:5A:23:13:E5:A2:50:60
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 04F4
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/ZJYkB9CKdKpiC4LWA1ojE-WiUGA.roa
Signing time: Tue 13 May 2025 16:38:02 +0000
ROA not before: Tue 13 May 2025 16:38:02 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1268 (0x4f4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 13 16:38:02 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=64962407D08A74AA620B82D6035A2313E5A25060
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:1d:79:e7:9f:b3:4b:3c:21:00:aa:85:ad:39:
4d:da:05:ec:e9:2f:9c:2f:72:da:74:14:e7:23:40:
25:50:98:cc:e3:83:50:58:66:a6:1b:92:89:94:0e:
a0:82:ca:09:94:39:96:02:25:9c:9d:bd:21:b6:86:
2b:49:cd:12:12:e4:4b:87:80:49:c1:57:6b:9c:a4:
42:bb:40:bb:c2:52:ad:f9:c3:5a:8d:30:af:de:d2:
52:c6:5d:cc:65:37:b4:8d:e4:3c:43:d7:1c:70:09:
63:16:d8:e9:23:b1:26:09:0b:5a:10:59:eb:bc:c6:
d5:1a:07:79:7b:b8:7f:62:a1:17:7a:af:19:ba:63:
e6:bf:de:c4:17:19:1b:8a:d0:e1:af:0b:b7:74:d9:
a0:37:db:8e:bd:79:c4:8f:20:69:8a:6e:5a:d6:97:
7c:9b:66:e7:59:73:f2:b4:9d:ea:ee:7e:64:4f:81:
72:36:55:ec:a8:fb:e2:4c:a5:a6:55:41:cb:1e:8b:
62:a4:34:73:fc:8c:b9:80:80:03:e3:48:7a:01:8e:
75:f0:8f:8d:9d:90:a9:b8:9f:8c:30:d0:15:cc:85:
79:1d:2c:b6:80:e7:57:81:a8:05:05:43:ad:56:42:
29:f1:a5:da:a0:fb:46:0e:2d:94:53:7d:db:96:f8:
3e:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:96:24:07:D0:8A:74:AA:62:0B:82:D6:03:5A:23:13:E5:A2:50:60
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/ZJYkB9CKdKpiC4LWA1ojE-WiUGA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
7c:d2:f4:c3:7d:e7:67:7d:bf:2a:8e:8b:3d:f5:54:a2:a1:3a:
89:f3:e4:ae:04:13:ca:54:f9:f0:55:bd:8f:a8:e7:cf:99:96:
cd:c9:f7:f4:b1:6d:2f:8d:ed:4f:db:ba:8a:b1:eb:11:13:d9:
05:a1:46:0b:d4:2c:76:9a:47:5f:2e:d1:d9:6a:26:53:84:53:
0c:e2:2e:1f:c3:c3:5c:0f:f7:86:bc:2a:47:fb:81:20:20:8b:
b2:2f:bf:21:30:4e:15:6c:17:7d:40:14:c6:e4:72:67:2f:de:
60:bc:d6:3b:65:1a:89:07:15:0c:28:d7:59:9b:2f:27:50:ab:
ee:5f:14:79:43:8b:e4:ff:82:b6:17:af:cf:99:2d:9a:4a:6f:
4d:05:31:99:e6:d7:21:53:63:de:f7:9e:10:d7:87:73:9c:27:
80:85:65:4d:74:b4:a1:d7:44:b8:12:8e:54:16:f4:2d:28:5e:
d7:c5:f5:f9:57:23:ca:23:98:42:91:81:5f:ba:97:ce:e0:c3:
b8:a9:48:1f:2e:21:70:3b:92:b8:c8:b6:28:13:87:d5:d0:fe:
49:d1:8e:f1:0e:b3:33:51:5a:90:59:73:00:e0:ed:c8:88:21:
f5:b6:90:ca:b4:58:d7:03:d0:90:e6:1b:8d:bd:01:f5:bb:d1:
3f:3b:4a:74
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICBPQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy
NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA1MTMx
NjM4MDJaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKDY0OTYyNDA3RDA4QTc0
QUE2MjBCODJENjAzNUEyMzEzRTVBMjUwNjAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCgHXnnn7NLPCEAqoWtOU3aBezpL5wvctp0FOcjQCVQmMzjg1BY
ZqYbkomUDqCCygmUOZYCJZydvSG2hitJzRIS5EuHgEnBV2ucpEK7QLvCUq35w1qN
MK/e0lLGXcxlN7SN5DxD1xxwCWMW2OkjsSYJC1oQWeu8xtUaB3l7uH9ioRd6rxm6
Y+a/3sQXGRuK0OGvC7d02aA32469ecSPIGmKblrWl3ybZudZc/K0nerufmRPgXI2
Veyo++JMpaZVQcsei2KkNHP8jLmAgAPjSHoBjnXwj42dkKm4n4ww0BXMhXkdLLaA
51eBqAUFQ61WQinxpdqg+0YOLZRTfduW+D7hAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUZJYkB9CKdKpiC4LWA1ojE+WiUGAwHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK
ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv
TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni9aSllrQjlDS2RLcGlDNExX
QTFvakUtV2lVR0Eucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
fakwDQYJKoZIhvcNAQELBQADggEBAHzS9MN952d9vyqOiz31VKKhOonz5K4EE8pU
+fBVvY+o58+Zls3J9/SxbS+N7U/buoqx6xET2QWhRgvULHaaR18u0dlqJlOEUwzi
Lh/Dw1wP94a8Kkf7gSAgi7IvvyEwThVsF31AFMbkcmcv3mC81jtlGokHFQwo11mb
LydQq+5fFHlDi+T/grYXr8+ZLZpKb00FMZnm1yFTY973nhDXh3OcJ4CFZU10tKHX
RLgSjlQW9C0oXtfF9flXI8ojmEKRgV+6l87gw7ipSB8uIXA7krjItigTh9XQ/knR
jvEOszNRWpBZcwDg7ciIIfW2kMq0WNcD0JDmG429AfW70T87SnQ=
-----END CERTIFICATE-----
Generated at Sat May 17 21:23:36 2025 by rpki-client