Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/kwQfQAsH4IXRkvVeoDQHNMsHVCw.roa
File: kwQfQAsH4IXRkvVeoDQHNMsHVCw.roa (raw, json)
Hash identifier: WsGwk+RH0dMZxzHTnUHZSOy05dPo241kjUcCtdZXaOk=
Subject key identifier: 93:04:1F:40:0B:07:E0:85:D1:92:F5:5E:A0:34:07:34:CB:07:54:2C
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0458
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/kwQfQAsH4IXRkvVeoDQHNMsHVCw.roa
Signing time: Mon 12 May 2025 21:07:57 +0000
ROA not before: Mon 12 May 2025 21:07:57 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1112 (0x458)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 12 21:07:57 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=93041F400B07E085D192F55EA0340734CB07542C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:e1:9f:6f:e7:33:f0:d6:eb:dd:6c:d1:32:bc:
ba:a2:2e:bb:48:44:89:46:df:e0:43:1c:39:40:cd:
87:2b:65:b3:71:37:48:d7:59:06:bc:42:b6:3d:7c:
82:dd:8c:27:64:12:0c:69:9b:1d:e7:71:66:f3:6f:
64:e9:27:f6:5e:14:90:b4:8a:e1:fc:fa:21:82:74:
63:b0:c5:26:91:a5:93:aa:b3:83:6c:62:c8:7b:0d:
3a:54:96:bc:6a:9d:43:68:4b:85:34:cc:a2:6a:8a:
7e:f9:39:a0:ca:cd:b8:9c:f2:c2:70:48:eb:80:85:
7e:f3:5e:4f:3f:46:51:c4:44:ea:6d:7b:d1:2b:37:
f6:ca:11:e8:15:63:7d:0e:7d:4e:c7:0c:90:d2:e3:
1e:24:ba:33:21:37:26:d5:53:a1:ee:99:80:dc:69:
8e:0f:ce:32:71:a7:5e:4e:05:1d:35:22:e4:e0:9d:
79:fc:3e:6d:df:bb:07:75:3a:e2:62:c5:5e:4c:7a:
f0:39:a1:49:80:d9:b1:50:17:03:e4:17:74:d4:58:
4f:34:c6:a2:8f:d2:4c:4a:01:3a:c7:b3:93:3f:b6:
46:20:1d:f1:53:49:d6:19:7a:32:6e:0e:3d:40:58:
44:3e:40:e7:02:97:d1:93:d3:aa:6e:e6:c9:7c:ef:
3f:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:04:1F:40:0B:07:E0:85:D1:92:F5:5E:A0:34:07:34:CB:07:54:2C
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/kwQfQAsH4IXRkvVeoDQHNMsHVCw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
79:0c:62:34:bd:70:98:f1:17:10:36:d8:30:8c:41:6f:b7:d2:
30:de:e0:f9:53:7d:d5:d2:09:b9:71:84:fe:4d:9f:a9:0f:55:
bb:c5:68:b3:91:5b:05:e6:95:6d:fc:a6:e6:d6:08:8c:0a:4b:
8c:af:de:38:55:4d:d3:d7:4f:40:ec:82:58:ad:af:07:00:c8:
71:f0:81:df:ca:77:1f:a7:b5:f8:0a:a9:3b:91:05:20:71:5f:
06:af:bc:83:0c:63:ac:21:00:35:f6:d5:b3:f8:3a:89:dd:9a:
35:56:9d:4e:85:2b:f0:f2:48:6a:4d:51:a7:7a:72:de:14:17:
d0:60:1f:c6:c1:50:e4:75:a8:a4:82:52:bd:95:85:14:81:1b:
e9:ff:1c:08:1a:0b:e6:b8:5c:a3:1c:24:6c:b8:dd:7f:f2:64:
36:b0:20:d5:23:9d:bd:54:9d:9a:e8:a6:68:63:e5:21:f8:57:
f6:6f:28:f3:e9:1a:c5:63:c0:24:cf:5c:54:f7:fa:e0:e5:8e:
02:a8:01:0f:bb:a0:ff:4a:92:58:26:31:93:3c:79:23:66:09:
6a:b9:ae:15:9d:ad:25:23:db:8f:b7:a0:6e:a7:17:12:c0:b3:
58:36:96:4a:ea:39:36:b7:1e:51:e1:c4:41:f1:ee:d8:3b:c4:
e1:df:fe:94
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICBFgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy
NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA1MTIy
MTA3NTdaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKDkzMDQxRjQwMEIwN0Uw
ODVEMTkyRjU1RUEwMzQwNzM0Q0IwNzU0MkMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDt4Z9v5zPw1uvdbNEyvLqiLrtIRIlG3+BDHDlAzYcrZbNxN0jX
WQa8QrY9fILdjCdkEgxpmx3ncWbzb2TpJ/ZeFJC0iuH8+iGCdGOwxSaRpZOqs4Ns
Ysh7DTpUlrxqnUNoS4U0zKJqin75OaDKzbic8sJwSOuAhX7zXk8/RlHEROpte9Er
N/bKEegVY30OfU7HDJDS4x4kujMhNybVU6HumYDcaY4PzjJxp15OBR01IuTgnXn8
Pm3fuwd1OuJixV5MevA5oUmA2bFQFwPkF3TUWE80xqKP0kxKATrHs5M/tkYgHfFT
SdYZejJuDj1AWEQ+QOcCl9GT06pu5sl87z9rAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUkwQfQAsH4IXRkvVeoDQHNMsHVCwwHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK
ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv
TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni9rd1FmUUFzSDRJWFJrdlZl
b0RRSE5Nc0hWQ3cucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
fakwDQYJKoZIhvcNAQELBQADggEBAHkMYjS9cJjxFxA22DCMQW+30jDe4PlTfdXS
CblxhP5Nn6kPVbvFaLORWwXmlW38pubWCIwKS4yv3jhVTdPXT0DsglitrwcAyHHw
gd/Kdx+ntfgKqTuRBSBxXwavvIMMY6whADX21bP4OondmjVWnU6FK/DySGpNUad6
ct4UF9BgH8bBUOR1qKSCUr2VhRSBG+n/HAgaC+a4XKMcJGy43X/yZDawINUjnb1U
nZropmhj5SH4V/ZvKPPpGsVjwCTPXFT3+uDljgKoAQ+7oP9KklgmMZM8eSNmCWq5
rhWdrSUj24+3oG6nFxLAs1g2lkrqOTa3HlHhxEHx7tg7xOHf/pQ=
-----END CERTIFICATE-----
Generated at Sun May 18 04:53:07 2025 by rpki-client