Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/r2OCLns2SCtrtnVhYFDsv4MTlHs.roa
File: r2OCLns2SCtrtnVhYFDsv4MTlHs.roa (raw, json)
Hash identifier: IXpPPrTzYpK94BoHm80ffkBgzTgaQ+r4l4evjdGbnKw=
Subject key identifier: AF:63:82:2E:7B:36:48:2B:6B:B6:75:61:60:50:EC:BF:83:13:94:7B
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0378
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/r2OCLns2SCtrtnVhYFDsv4MTlHs.roa
Signing time: Sun 11 May 2025 17:07:57 +0000
ROA not before: Sun 11 May 2025 17:07:57 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 888 (0x378)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 11 17:07:57 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=AF63822E7B36482B6BB675616050ECBF8313947B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:94:65:2c:4a:b1:39:a6:0e:f6:f4:35:e1:fe:
f0:95:73:6f:ab:7f:7c:0d:36:9b:9d:52:23:17:52:
ef:82:52:9c:1a:ed:30:38:7d:9d:5b:7c:9a:e1:b1:
cc:2f:21:99:4e:fc:0b:15:a8:72:8d:7a:79:8a:7d:
ae:8e:28:fa:6e:50:3e:64:b3:11:7b:17:b1:ea:53:
44:bc:6e:d3:e9:d4:fb:43:c6:af:55:ad:0f:31:9f:
ac:10:7a:c5:fd:2a:2e:2c:81:4f:4a:95:59:22:09:
2b:9c:af:a7:e6:a8:a4:06:b6:54:90:3b:6e:79:2c:
1b:0e:ea:96:80:de:15:56:1e:26:69:e2:12:cd:ce:
e9:e4:dc:b9:58:55:52:90:6d:96:7e:67:f5:42:ba:
ca:af:74:ab:a1:55:e1:0a:ce:7d:2b:5a:f0:03:94:
0f:25:1d:23:c6:d5:5c:eb:04:28:e3:43:04:4b:79:
05:81:d5:55:02:d1:bc:63:39:dc:40:d9:5b:6c:46:
eb:09:08:a8:a3:07:ba:65:c7:68:16:11:75:da:cd:
47:d8:d7:8a:c8:27:3b:21:40:df:61:88:2d:f9:be:
ad:75:a9:db:1d:e5:e3:b2:48:78:a0:98:b6:d6:ed:
58:6c:bd:78:26:d8:e9:69:47:95:65:ec:13:06:5e:
74:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:63:82:2E:7B:36:48:2B:6B:B6:75:61:60:50:EC:BF:83:13:94:7B
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/r2OCLns2SCtrtnVhYFDsv4MTlHs.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
20:e9:f5:d9:1b:16:fb:a2:96:c8:5a:ec:c0:16:24:31:e3:ca:
07:25:98:3b:6c:68:8b:aa:a1:7f:a4:a0:3e:64:80:94:55:fd:
86:81:e9:bf:eb:f7:e1:76:13:ae:52:ba:02:5c:3a:e7:09:2f:
46:c1:bf:7e:9c:e6:e6:1c:fb:0b:52:72:a9:ea:c9:0f:06:4e:
cc:47:90:c6:34:19:2d:28:b9:af:cb:51:cc:bd:5f:0a:a3:71:
fb:ab:ca:18:f0:b4:db:68:04:e1:f3:c9:cd:a9:9d:b0:73:71:
63:bd:1a:7f:d8:46:25:fc:da:2b:bf:ad:fd:5f:0c:72:17:a0:
37:b1:79:74:b7:62:82:e7:10:0e:10:83:76:7e:e7:4a:9a:d7:
d9:de:45:23:ed:0f:9c:38:ae:48:fe:a0:f6:0a:8b:4c:f0:ef:
a1:ee:fd:f3:ab:57:7c:e7:32:2f:9d:1d:3b:81:5c:31:2c:ea:
2b:5e:03:29:b9:ae:90:8e:2c:dd:58:44:d2:ff:59:dd:ce:71:
d1:20:e3:17:e0:9d:79:46:79:aa:a7:eb:83:77:81:f2:69:1a:
b9:2a:5c:fd:e5:8d:42:55:47:68:6c:29:f4:eb:e8:a6:9b:34:
17:98:b4:42:24:1f:2e:80:11:74:87:04:bb:a7:44:b9:e4:03:
5c:26:93:0c
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICA3gwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy
NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA1MTEx
NzA3NTdaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKEFGNjM4MjJFN0IzNjQ4
MkI2QkI2NzU2MTYwNTBFQ0JGODMxMzk0N0IwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDMlGUsSrE5pg729DXh/vCVc2+rf3wNNpudUiMXUu+CUpwa7TA4
fZ1bfJrhscwvIZlO/AsVqHKNenmKfa6OKPpuUD5ksxF7F7HqU0S8btPp1PtDxq9V
rQ8xn6wQesX9Ki4sgU9KlVkiCSucr6fmqKQGtlSQO255LBsO6paA3hVWHiZp4hLN
zunk3LlYVVKQbZZ+Z/VCusqvdKuhVeEKzn0rWvADlA8lHSPG1VzrBCjjQwRLeQWB
1VUC0bxjOdxA2VtsRusJCKijB7plx2gWEXXazUfY14rIJzshQN9hiC35vq11qdsd
5eOySHigmLbW7VhsvXgm2OlpR5Vl7BMGXnQtAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUr2OCLns2SCtrtnVhYFDsv4MTlHswHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK
ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv
TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni9yMk9DTG5zMlNDdHJ0blZo
WUZEc3Y0TVRsSHMucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
fakwDQYJKoZIhvcNAQELBQADggEBACDp9dkbFvuilsha7MAWJDHjygclmDtsaIuq
oX+koD5kgJRV/YaB6b/r9+F2E65SugJcOucJL0bBv36c5uYc+wtScqnqyQ8GTsxH
kMY0GS0oua/LUcy9XwqjcfuryhjwtNtoBOHzyc2pnbBzcWO9Gn/YRiX82iu/rf1f
DHIXoDexeXS3YoLnEA4Qg3Z+50qa19neRSPtD5w4rkj+oPYKi0zw76Hu/fOrV3zn
Mi+dHTuBXDEs6iteAym5rpCOLN1YRNL/Wd3OcdEg4xfgnXlGeaqn64N3gfJpGrkq
XP3ljUJVR2hsKfTr6KabNBeYtEIkHy6AEXSHBLunRLnkA1wmkww=
-----END CERTIFICATE-----
Generated at Sat May 17 19:48:42 2025 by rpki-client