Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/rQ_avWO3b6rcwQ1vOMupEP8u4Yo.roa
File: rQ_avWO3b6rcwQ1vOMupEP8u4Yo.roa (raw, json)
Hash identifier: uYc6KbtkXn5/4NGsXfxqpJUgSfJGscEut9Q6Wsv4jLY=
Subject key identifier: AD:0F:DA:BD:63:B7:6F:AA:DC:C1:0D:6F:38:CB:A9:10:FF:2E:E1:8A
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 06B8
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/rQ_avWO3b6rcwQ1vOMupEP8u4Yo.roa
Signing time: Fri 16 May 2025 01:08:02 +0000
ROA not before: Fri 16 May 2025 01:08:02 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1720 (0x6b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 16 01:08:02 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=AD0FDABD63B76FAADCC10D6F38CBA910FF2EE18A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:b2:41:68:6a:2b:05:59:1e:e8:82:07:5e:ea:
77:b5:3d:92:48:52:72:0f:f4:e4:8f:06:1b:6f:a3:
8c:da:17:55:4d:dd:05:2f:4f:b2:4a:d4:d2:0e:27:
c2:82:37:ed:8f:00:d6:f2:8f:85:61:2f:33:30:ac:
4b:ab:b0:71:be:63:53:6d:42:da:d9:80:69:9d:a2:
44:38:fb:3d:95:9b:2f:61:b2:a3:57:cd:02:31:d7:
6f:fb:06:5a:f8:68:6e:b6:ce:e4:aa:cf:08:51:29:
1d:32:66:e5:31:25:7e:10:fb:50:9a:d0:43:40:45:
cb:d8:2f:84:e9:3d:74:29:ef:d4:52:a5:e2:90:69:
c2:1d:d1:ae:9e:4e:3e:87:69:53:87:f2:e7:17:6a:
ca:49:c6:46:f6:88:50:bf:01:39:31:56:c7:23:0e:
bb:7b:7c:8a:d3:c8:27:3b:06:04:a7:66:b1:19:81:
80:f0:64:ce:61:0c:a0:39:36:1e:ba:79:00:90:b2:
ef:1d:1b:5e:92:37:60:6c:32:f6:54:9d:4f:bc:0b:
d3:6e:59:6c:50:e7:18:95:9f:ac:fe:c0:e2:d9:49:
66:47:cd:21:90:78:a3:a2:78:5d:11:01:61:cd:f7:
a5:1e:0e:2c:33:a7:92:83:df:a6:09:2f:39:b4:d9:
c4:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:0F:DA:BD:63:B7:6F:AA:DC:C1:0D:6F:38:CB:A9:10:FF:2E:E1:8A
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/rQ_avWO3b6rcwQ1vOMupEP8u4Yo.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
6d:d9:1a:03:9a:b2:f7:ab:2e:7d:60:99:b2:cc:f5:79:5c:18:
00:83:40:c5:5b:97:80:39:f7:d8:5f:95:aa:d7:8a:05:ef:a2:
30:17:08:2b:98:ef:62:4e:19:84:6d:de:30:c4:83:15:2a:be:
e1:78:a6:0c:2a:24:db:85:07:34:7c:95:7e:70:9f:ec:a5:0b:
85:3e:55:a4:41:4f:ec:29:e1:3f:90:a6:f0:00:95:8d:8b:b6:
1f:e8:d3:fa:31:7c:eb:9d:5a:13:4a:45:4a:6d:d5:4c:f9:03:
71:b4:2c:56:e8:cb:b1:68:86:e6:09:cf:cf:22:e2:1b:3e:69:
11:22:ea:ac:76:47:86:86:63:fd:f7:19:e8:08:9b:75:51:c0:
16:25:6e:a9:8f:0b:de:e1:ad:8b:e7:ee:1b:73:99:a2:b5:f5:
86:fa:df:34:0e:b0:3d:d9:a4:5f:c8:c0:0f:1b:9b:42:54:7a:
25:e2:0e:2e:45:d7:dd:e1:b1:c1:00:73:c3:11:72:dd:9f:a4:
d9:41:95:cf:43:95:11:24:d1:1f:12:b1:e5:dd:58:73:4d:ed:
42:86:bb:88:19:4d:80:9c:c1:9a:c1:8e:54:fc:0d:50:9f:86:
40:4a:fe:ad:80:bf:b7:8d:81:b6:a5:de:fe:a2:c4:c1:82:e4:
3d:b6:67:ae
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICBrgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy
NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA1MTYw
MTA4MDJaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKEFEMEZEQUJENjNCNzZG
QUFEQ0MxMEQ2RjM4Q0JBOTEwRkYyRUUxOEEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCYskFoaisFWR7oggde6ne1PZJIUnIP9OSPBhtvo4zaF1VN3QUv
T7JK1NIOJ8KCN+2PANbyj4VhLzMwrEursHG+Y1NtQtrZgGmdokQ4+z2Vmy9hsqNX
zQIx12/7Blr4aG62zuSqzwhRKR0yZuUxJX4Q+1Ca0ENARcvYL4TpPXQp79RSpeKQ
acId0a6eTj6HaVOH8ucXaspJxkb2iFC/ATkxVscjDrt7fIrTyCc7BgSnZrEZgYDw
ZM5hDKA5Nh66eQCQsu8dG16SN2BsMvZUnU+8C9NuWWxQ5xiVn6z+wOLZSWZHzSGQ
eKOieF0RAWHN96UeDiwzp5KD36YJLzm02cTzAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUrQ/avWO3b6rcwQ1vOMupEP8u4YowHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK
ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv
TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni9yUV9hdldPM2I2cmN3UTF2
T011cEVQOHU0WW8ucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
fakwDQYJKoZIhvcNAQELBQADggEBAG3ZGgOasverLn1gmbLM9XlcGACDQMVbl4A5
99hflarXigXvojAXCCuY72JOGYRt3jDEgxUqvuF4pgwqJNuFBzR8lX5wn+ylC4U+
VaRBT+wp4T+QpvAAlY2Lth/o0/oxfOudWhNKRUpt1Uz5A3G0LFboy7FohuYJz88i
4hs+aREi6qx2R4aGY/33GegIm3VRwBYlbqmPC97hrYvn7htzmaK19Yb63zQOsD3Z
pF/IwA8bm0JUeiXiDi5F193hscEAc8MRct2fpNlBlc9DlREk0R8SseXdWHNN7UKG
u4gZTYCcwZrBjlT8DVCfhkBK/q2Av7eNgbal3v6ixMGC5D22Z64=
-----END CERTIFICATE-----
Generated at Sun May 18 04:47:46 2025 by rpki-client