Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/vTuTaFKSlweMm2QQsJ_e-ac4VHQ.roa
File: vTuTaFKSlweMm2QQsJ_e-ac4VHQ.roa (raw, json)
Hash identifier: /JZ01hSK1G3ZPRxR94YqpfVzl5h1WxnYbiH6O/9jmSA=
Subject key identifier: BD:3B:93:68:52:92:97:07:8C:9B:64:10:B0:9F:DE:F9:A7:38:54:74
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0144
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/vTuTaFKSlweMm2QQsJ_e-ac4VHQ.roa
Signing time: Thu 08 May 2025 18:37:44 +0000
ROA not before: Thu 08 May 2025 18:37:44 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 324 (0x144)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 8 18:37:44 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=BD3B9368529297078C9B6410B09FDEF9A7385474
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:62:67:0b:e2:c2:28:76:06:86:1a:5e:50:10:
68:67:9f:a0:16:b9:64:c5:cd:cb:93:f6:32:50:ef:
a0:5d:89:29:99:3a:6c:fa:0c:fb:d6:68:ad:62:01:
62:ba:67:f5:89:83:1e:a3:d9:79:3f:e6:84:80:af:
cb:32:77:a1:5c:ae:99:95:46:c0:c7:bc:cd:54:d1:
9d:4b:ec:3f:20:8c:f5:6a:ef:79:8f:cf:d1:54:57:
4b:d0:a4:d6:38:33:77:20:a3:44:41:2b:51:45:af:
93:86:00:62:d6:bf:83:20:cc:d3:c9:97:07:bf:9f:
ae:c4:67:ae:84:6e:bc:e7:51:05:9d:ad:7e:a1:4b:
d3:81:bc:f5:3f:cc:bb:c8:05:38:b3:5a:72:01:e0:
bd:ff:0d:06:10:7d:af:8c:73:37:b7:45:e7:3c:f5:
7b:85:bd:43:9b:68:03:b6:ea:c7:a1:4f:8f:b6:21:
de:8e:a3:d0:9f:29:5e:8c:e9:1f:f7:2d:91:6d:2c:
f3:43:4d:8b:b5:03:66:d2:47:30:cf:31:03:27:45:
c3:34:6d:19:02:b6:46:3f:ad:17:41:12:99:40:c2:
ee:38:9d:4e:b1:2f:1b:2c:a4:08:90:bb:f8:0d:a6:
bc:46:c0:2e:66:b8:18:56:bd:1c:39:72:33:d4:ab:
4f:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:3B:93:68:52:92:97:07:8C:9B:64:10:B0:9F:DE:F9:A7:38:54:74
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/vTuTaFKSlweMm2QQsJ_e-ac4VHQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
a8:1d:28:1e:ed:74:4b:b0:f6:16:df:e8:e4:16:a8:4c:fd:ac:
14:3e:3d:4c:68:d9:c1:be:54:4f:91:70:e8:9b:59:16:6d:6b:
f0:37:f5:6c:51:ba:3e:c8:78:82:44:35:d5:32:34:2f:1a:d4:
6c:99:e4:ef:a0:e0:b3:24:b9:c4:e6:76:b5:18:17:be:d7:e5:
11:1f:9d:3b:76:1c:23:78:dc:8e:9a:2a:c7:c7:4c:96:38:ac:
f2:68:12:1f:fc:43:a5:28:a8:7c:9d:1c:ff:c7:27:8e:e0:47:
e8:75:e2:64:8e:65:a0:02:22:2d:76:d6:b1:1d:e4:95:b8:5c:
a1:7b:58:b2:4c:ac:9b:05:af:00:6e:a6:13:71:99:d3:7c:80:
64:19:ae:37:47:8d:2d:59:aa:38:e7:e3:08:34:44:4c:e5:0a:
f2:bc:95:ff:67:3b:38:eb:92:d9:2e:c7:c7:2e:04:e9:cc:f9:
1c:60:03:4d:a0:9f:0b:cf:0b:45:d2:3a:16:66:de:1a:8a:ab:
87:ea:e4:9f:8d:a6:cc:88:d0:d7:2f:f2:4e:25:2f:33:ed:4f:
dd:33:19:2a:a4:e5:1a:43:a8:09:fa:b1:15:54:18:00:be:47:
5f:0b:a1:14:10:b2:8d:97:0a:04:01:bc:08:91:3e:4b:fd:55:
db:d9:19:a9
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICAUQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy
NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA1MDgx
ODM3NDRaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKEJEM0I5MzY4NTI5Mjk3
MDc4QzlCNjQxMEIwOUZERUY5QTczODU0NzQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDaYmcL4sIodgaGGl5QEGhnn6AWuWTFzcuT9jJQ76BdiSmZOmz6
DPvWaK1iAWK6Z/WJgx6j2Xk/5oSAr8syd6FcrpmVRsDHvM1U0Z1L7D8gjPVq73mP
z9FUV0vQpNY4M3cgo0RBK1FFr5OGAGLWv4MgzNPJlwe/n67EZ66EbrznUQWdrX6h
S9OBvPU/zLvIBTizWnIB4L3/DQYQfa+Mcze3Rec89XuFvUObaAO26sehT4+2Id6O
o9CfKV6M6R/3LZFtLPNDTYu1A2bSRzDPMQMnRcM0bRkCtkY/rRdBEplAwu44nU6x
LxsspAiQu/gNprxGwC5muBhWvRw5cjPUq0//AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUvTuTaFKSlweMm2QQsJ/e+ac4VHQwHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK
ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv
TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni92VHVUYUZLU2x3ZU1tMlFR
c0pfZS1hYzRWSFEucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
fakwDQYJKoZIhvcNAQELBQADggEBAKgdKB7tdEuw9hbf6OQWqEz9rBQ+PUxo2cG+
VE+RcOibWRZta/A39WxRuj7IeIJENdUyNC8a1GyZ5O+g4LMkucTmdrUYF77X5REf
nTt2HCN43I6aKsfHTJY4rPJoEh/8Q6UoqHydHP/HJ47gR+h14mSOZaACIi121rEd
5JW4XKF7WLJMrJsFrwBuphNxmdN8gGQZrjdHjS1Zqjjn4wg0REzlCvK8lf9nOzjr
ktkux8cuBOnM+RxgA02gnwvPC0XSOhZm3hqKq4fq5J+NpsyI0Ncv8k4lLzPtT90z
GSqk5RpDqAn6sRVUGAC+R18LoRQQso2XCgQBvAiRPkv9VdvZGak=
-----END CERTIFICATE-----
Generated at Sat May 17 19:50:23 2025 by rpki-client