Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/cUwWWFAJKcS5YppqZ9bOHv1ZFsQ.roa
File: cUwWWFAJKcS5YppqZ9bOHv1ZFsQ.roa (raw, json)
Hash identifier: VeglMs6fTwhDFDWPM57JCQf6zh1GF7yXgZzJDwzWB8c=
Subject key identifier: 71:4C:16:58:50:09:29:C4:B9:62:9A:6A:67:D6:CE:1E:FD:59:16:C4
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 071C
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/cUwWWFAJKcS5YppqZ9bOHv1ZFsQ.roa
Signing time: Fri 16 May 2025 13:38:05 +0000
ROA not before: Fri 16 May 2025 13:38:05 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1820 (0x71c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 16 13:38:05 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=714C1658500929C4B9629A6A67D6CE1EFD5916C4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:28:45:9b:c9:cc:36:c5:a1:11:ec:44:88:b7:
f8:11:f4:e4:96:82:c6:ab:bb:e2:87:67:5f:fe:e4:
f1:77:ae:b1:c7:fd:a2:03:43:28:25:8e:ff:16:66:
ef:f1:c5:aa:e5:4d:bd:5e:96:b3:bb:24:f1:e9:83:
d5:a8:6c:98:8e:7e:cc:01:c0:54:93:f2:64:d4:70:
f7:f9:7b:54:fd:a3:53:d8:3f:dd:96:be:85:5a:a5:
99:5b:cc:2e:ee:36:3c:43:40:77:c3:0b:c3:0e:f1:
fc:51:16:84:12:dd:42:d5:ad:35:36:c8:6e:c8:00:
1d:7f:4c:10:fa:2d:56:38:43:58:f0:6f:88:cf:60:
25:f4:af:b3:3e:ad:f2:ca:8d:8f:dc:e9:fe:47:69:
02:8a:89:e9:7f:bf:dd:20:dd:e4:84:ec:89:2a:e8:
02:2c:15:cd:b4:18:1b:0e:58:02:dc:63:56:85:1a:
4a:e4:4e:2a:df:1f:02:7b:a9:f4:04:47:d6:b5:1f:
81:85:3a:cc:48:25:e1:a1:dd:1e:9e:91:dc:5d:f3:
3f:5c:ee:86:2f:7b:23:47:d1:8e:6e:3f:a8:af:00:
79:0e:47:e1:51:dd:23:69:61:e9:2e:3c:7f:91:0a:
3c:46:4c:a9:3c:dd:4a:85:24:d6:b7:ce:03:3e:23:
09:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:4C:16:58:50:09:29:C4:B9:62:9A:6A:67:D6:CE:1E:FD:59:16:C4
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/cUwWWFAJKcS5YppqZ9bOHv1ZFsQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
18:8e:ba:18:96:2e:46:43:27:f2:0a:99:be:b6:5b:7c:e8:6a:
17:dc:b3:ee:d5:f7:1b:5b:52:16:db:ec:54:ef:12:8c:ed:ac:
89:ae:d1:25:f0:6f:db:bb:c0:f2:f6:79:3a:69:10:c6:42:bf:
22:9f:cb:1d:e2:d0:06:25:23:e4:0b:84:39:47:bb:57:f3:cc:
19:b8:5c:d5:6f:3e:24:41:32:c4:f8:25:f1:3e:5a:55:9f:d1:
20:6e:82:2d:f8:dc:12:12:9a:cc:9b:b0:a1:8f:d6:79:ce:ca:
62:0b:28:d3:b5:18:1b:a2:1c:f4:42:a8:90:42:37:7a:f6:40:
1c:8f:94:a3:03:0e:75:a9:5b:1b:88:6c:5b:a5:a4:92:d5:86:
e5:d0:ec:fa:7e:ed:90:10:d6:b0:cd:df:2c:13:b1:5c:8a:2f:
b4:5b:c6:0d:13:3e:3e:5c:bd:78:35:4b:e9:67:4c:6e:43:a1:
4f:3a:ed:77:00:c7:de:ec:d1:4f:53:39:70:ef:27:b9:4f:c1:
3c:15:d7:95:fc:ef:81:c5:aa:0f:a9:7b:9e:ef:a9:13:cd:c4:
bc:bd:4a:51:3e:66:29:fa:d8:7c:6d:64:4d:44:e5:4d:12:cd:
34:e4:b0:b0:43:af:8b:3c:88:46:29:c2:16:40:7a:c8:52:b0:
e0:fd:ff:a2
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICBxwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy
NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA1MTYx
MzM4MDVaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKDcxNEMxNjU4NTAwOTI5
QzRCOTYyOUE2QTY3RDZDRTFFRkQ1OTE2QzQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDVKEWbycw2xaER7ESIt/gR9OSWgsaru+KHZ1/+5PF3rrHH/aID
Qygljv8WZu/xxarlTb1elrO7JPHpg9WobJiOfswBwFST8mTUcPf5e1T9o1PYP92W
voVapZlbzC7uNjxDQHfDC8MO8fxRFoQS3ULVrTU2yG7IAB1/TBD6LVY4Q1jwb4jP
YCX0r7M+rfLKjY/c6f5HaQKKiel/v90g3eSE7Ikq6AIsFc20GBsOWALcY1aFGkrk
TirfHwJ7qfQER9a1H4GFOsxIJeGh3R6ekdxd8z9c7oYveyNH0Y5uP6ivAHkOR+FR
3SNpYekuPH+RCjxGTKk83UqFJNa3zgM+Iwm1AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUcUwWWFAJKcS5YppqZ9bOHv1ZFsQwHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK
ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv
TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni9jVXdXV0ZBSktjUzVZcHBx
WjliT0h2MVpGc1Eucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
fakwDQYJKoZIhvcNAQELBQADggEBABiOuhiWLkZDJ/IKmb62W3zoahfcs+7V9xtb
Uhbb7FTvEoztrImu0SXwb9u7wPL2eTppEMZCvyKfyx3i0AYlI+QLhDlHu1fzzBm4
XNVvPiRBMsT4JfE+WlWf0SBugi343BISmsybsKGP1nnOymILKNO1GBuiHPRCqJBC
N3r2QByPlKMDDnWpWxuIbFulpJLVhuXQ7Pp+7ZAQ1rDN3ywTsVyKL7Rbxg0TPj5c
vXg1S+lnTG5DoU867XcAx97s0U9TOXDvJ7lPwTwV15X874HFqg+pe57vqRPNxLy9
SlE+Zin62HxtZE1E5U0SzTTksLBDr4s8iEYpwhZAeshSsOD9/6I=
-----END CERTIFICATE-----
Generated at Sat May 17 23:40:42 2025 by rpki-client