Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/aqIf6YEM3nXr4TBsrlJNM_Hs7v4.roa
File: aqIf6YEM3nXr4TBsrlJNM_Hs7v4.roa (raw, json)
Hash identifier: DrW9xfN1y5bHLRuXNhN4054tK3e2jjFIjGAn4oDTf3w=
Subject key identifier: 6A:A2:1F:E9:81:0C:DE:75:EB:E1:30:6C:AE:52:4D:33:F1:EC:EE:FE
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 07A0
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/aqIf6YEM3nXr4TBsrlJNM_Hs7v4.roa
Signing time: Sat 17 May 2025 06:08:08 +0000
ROA not before: Sat 17 May 2025 06:08:08 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1952 (0x7a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 17 06:08:08 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=6AA21FE9810CDE75EBE1306CAE524D33F1ECEEFE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:97:9b:dc:d3:8c:45:d3:c1:5e:c6:86:6a:99:
15:19:0a:5b:a5:6e:18:75:d5:c2:e0:ef:7e:70:8c:
ca:db:43:5e:a9:ea:fc:01:65:bf:76:7e:bc:bc:61:
ad:3c:bd:0e:d8:ad:1d:c5:de:f4:73:77:ce:0e:ae:
3e:da:53:5d:8a:1b:66:ef:5b:41:91:57:75:39:1c:
ff:a6:f4:30:3b:8f:b0:f1:e0:e0:c5:3b:84:0b:ee:
08:db:a3:c0:f8:b1:0a:4f:7c:a0:03:b7:f2:d0:c2:
69:6e:c1:bc:89:35:bb:91:fa:b9:77:7e:ad:6d:f6:
e9:56:ee:51:83:fe:ba:81:88:26:8f:26:42:e9:d5:
d9:d9:6f:8e:1d:87:7e:13:03:5b:6d:1f:a5:36:56:
5d:74:c1:a7:60:04:24:ca:65:b9:4d:c8:f1:1a:d9:
1e:4d:9b:dc:2e:dd:48:e1:39:2f:42:47:38:ce:60:
aa:21:42:3d:1d:40:3a:38:9e:2f:38:5f:ff:99:10:
52:a1:ea:07:a1:69:cc:95:25:27:fd:d9:5b:2e:2e:
6e:0a:32:a7:00:35:65:1e:5c:27:70:75:08:b0:99:
73:18:ed:02:c9:9f:de:03:4c:38:80:87:ec:06:2c:
9b:17:e3:1d:a5:ab:9d:18:53:d8:24:3d:b9:91:aa:
fd:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:A2:1F:E9:81:0C:DE:75:EB:E1:30:6C:AE:52:4D:33:F1:EC:EE:FE
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/aqIf6YEM3nXr4TBsrlJNM_Hs7v4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
28:0c:e2:4d:a4:f1:fd:20:f6:0e:d9:8d:9f:d7:c8:94:ec:12:
fc:9d:fc:6a:e3:ad:0c:4e:f0:41:39:00:a3:5e:84:53:a8:07:
5e:a2:8a:bb:8f:0a:99:83:54:ae:cc:f8:35:81:66:c0:2a:bc:
73:fd:cc:0d:4b:82:0a:61:46:b9:2d:03:4f:7b:af:0d:a3:23:
df:d9:8a:91:4a:04:b4:52:df:09:f5:d7:50:51:ba:f8:09:fb:
7b:d7:31:2f:05:b1:6f:a9:76:55:2a:bb:d4:f0:c6:4e:89:50:
ba:08:07:92:e6:22:b5:80:a6:d0:e3:27:a8:46:a8:cf:75:63:
90:5a:cf:75:72:60:50:62:be:c8:2a:ab:e4:38:cb:c5:25:95:
59:5d:b8:73:e2:4f:e7:0b:96:c7:f3:ab:02:09:8d:23:08:bb:
ab:f7:24:c9:e3:55:cc:87:47:b1:ae:62:5b:62:89:94:f7:0c:
60:e2:11:77:b6:69:13:e6:bd:48:2e:75:fe:a2:6c:57:2b:ca:
31:3b:74:4e:3f:8c:f2:e8:a2:79:72:25:06:38:e6:a4:db:b2:
b6:84:ab:31:2d:5b:bb:d8:63:ab:fe:34:e5:b2:fa:b3:e2:a6:
77:41:41:d6:41:96:46:83:50:9f:3e:25:65:6e:74:5a:0d:d4:
27:18:5d:c5
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICB6AwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy
NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA1MTcw
NjA4MDhaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKDZBQTIxRkU5ODEwQ0RF
NzVFQkUxMzA2Q0FFNTI0RDMzRjFFQ0VFRkUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDWl5vc04xF08FexoZqmRUZClulbhh11cLg735wjMrbQ16p6vwB
Zb92fry8Ya08vQ7YrR3F3vRzd84Orj7aU12KG2bvW0GRV3U5HP+m9DA7j7Dx4ODF
O4QL7gjbo8D4sQpPfKADt/LQwmluwbyJNbuR+rl3fq1t9ulW7lGD/rqBiCaPJkLp
1dnZb44dh34TA1ttH6U2Vl10wadgBCTKZblNyPEa2R5Nm9wu3UjhOS9CRzjOYKoh
Qj0dQDo4ni84X/+ZEFKh6gehacyVJSf92VsuLm4KMqcANWUeXCdwdQiwmXMY7QLJ
n94DTDiAh+wGLJsX4x2lq50YU9gkPbmRqv0bAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUaqIf6YEM3nXr4TBsrlJNM/Hs7v4wHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK
ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv
TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni9hcUlmNllFTTNuWHI0VEJz
cmxKTk1fSHM3djQucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
fakwDQYJKoZIhvcNAQELBQADggEBACgM4k2k8f0g9g7ZjZ/XyJTsEvyd/GrjrQxO
8EE5AKNehFOoB16iiruPCpmDVK7M+DWBZsAqvHP9zA1LggphRrktA097rw2jI9/Z
ipFKBLRS3wn111BRuvgJ+3vXMS8FsW+pdlUqu9Twxk6JULoIB5LmIrWAptDjJ6hG
qM91Y5Baz3VyYFBivsgqq+Q4y8UllVlduHPiT+cLlsfzqwIJjSMIu6v3JMnjVcyH
R7GuYltiiZT3DGDiEXe2aRPmvUgudf6ibFcryjE7dE4/jPLoonlyJQY45qTbsraE
qzEtW7vYY6v+NOWy+rPipndBQdZBlkaDUJ8+JWVudFoN1CcYXcU=
-----END CERTIFICATE-----
Generated at Sun May 18 19:28:54 2025 by rpki-client