Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/-1aSOQjHQrLt1R8d3xdZBG4bW1E.roa
File: -1aSOQjHQrLt1R8d3xdZBG4bW1E.roa (raw, json)
Hash identifier: sdMEz/T8gAF+iOGigI9tlnu/3a6ibT6bcd11OjEfnng=
Subject key identifier: FB:56:92:39:08:C7:42:B2:ED:D5:1F:1D:DF:17:59:04:6E:1B:5B:51
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 085C
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/-1aSOQjHQrLt1R8d3xdZBG4bW1E.roa
Signing time: Sun 18 May 2025 05:38:19 +0000
ROA not before: Sun 18 May 2025 05:38:19 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2140 (0x85c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 18 05:38:19 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=FB56923908C742B2EDD51F1DDF1759046E1B5B51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:13:5e:3b:4a:12:6c:a0:78:22:54:03:38:13:
57:d9:f8:c3:a5:42:53:a1:d8:4e:77:c4:d7:81:77:
fd:7f:1d:a2:d1:88:22:7f:d1:b0:c0:8d:e5:94:2a:
bf:32:e4:25:3b:ef:ed:61:76:45:b9:88:fc:a2:37:
54:ae:b1:18:d1:f9:5b:57:d5:74:3a:57:cf:ea:14:
5a:86:da:5c:43:ca:60:da:5f:d3:5f:11:f1:25:f5:
0f:4f:c0:7a:db:03:89:9a:0b:ab:50:bc:52:40:2d:
e3:79:da:53:a1:9b:7b:9d:7e:49:bf:2b:e5:a1:c4:
e6:f8:dd:4e:fc:61:86:c3:25:7c:8c:08:ff:6a:67:
b1:44:e8:8f:6c:68:67:48:ac:0c:de:44:f7:bf:e4:
a2:dd:3d:2b:bf:57:9d:a8:91:dc:42:ed:00:f4:1c:
b2:e1:d4:52:05:72:ec:c7:c3:4e:c0:db:fe:9e:ab:
a2:3f:fc:fc:10:9e:fc:fa:42:4b:04:e2:c3:0a:43:
02:75:de:57:b3:90:2c:7a:a6:b1:17:6a:65:fb:8c:
43:8d:6d:40:d7:35:44:a1:6d:07:f7:09:3f:68:9c:
15:2f:20:2f:1f:48:10:ff:b2:a0:6f:87:b5:bd:98:
8f:25:3a:e4:06:d8:bb:d5:42:37:e9:ab:e2:95:87:
a8:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:56:92:39:08:C7:42:B2:ED:D5:1F:1D:DF:17:59:04:6E:1B:5B:51
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/-1aSOQjHQrLt1R8d3xdZBG4bW1E.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
06:4f:4d:f8:ec:6a:19:a7:0d:4d:cb:3c:00:92:ef:cf:9a:70:
a5:fa:64:af:8a:e4:c2:e0:7f:4b:5f:bf:91:42:1c:b7:06:71:
a3:35:76:d6:4e:1e:c9:c0:a9:f9:0e:68:98:23:95:6b:fe:e8:
9a:7c:cd:c5:1d:8b:f6:df:38:b3:33:71:ff:c5:bf:80:ec:59:
28:06:66:2e:42:86:89:a8:d9:12:2a:64:5e:1b:ad:04:9e:99:
bc:1f:61:b5:dd:03:4c:a8:66:d9:e4:d2:4a:86:ef:52:a8:38:
52:e9:72:0d:41:76:d6:a6:71:4f:d9:87:19:38:3c:b6:72:42:
fd:d5:d1:50:43:53:f9:61:1b:6c:fe:30:7f:4a:90:75:02:d9:
79:e8:c4:95:f4:85:94:f0:ba:89:75:21:ce:7a:6c:ad:cf:fb:
c4:d1:af:ed:ea:83:48:f5:29:79:f6:4b:fe:10:6a:cd:5d:53:
29:da:45:82:4d:a0:dc:57:0a:a9:08:a4:e6:81:8e:5f:a1:de:
82:a7:ad:7f:6c:1a:cb:42:ae:d1:e6:e5:cb:00:a8:ee:7b:ca:
55:b1:73:f9:9e:05:03:86:bb:89:19:9d:23:4f:c7:02:ab:a2:
5d:af:82:77:cb:a7:8e:f2:12:3c:01:4b:0e:a6:e7:00:29:ea:
13:a4:a0:5d
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICCFwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy
NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA1MTgw
NTM4MTlaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKEZCNTY5MjM5MDhDNzQy
QjJFREQ1MUYxRERGMTc1OTA0NkUxQjVCNTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDfE147ShJsoHgiVAM4E1fZ+MOlQlOh2E53xNeBd/1/HaLRiCJ/
0bDAjeWUKr8y5CU77+1hdkW5iPyiN1SusRjR+VtX1XQ6V8/qFFqG2lxDymDaX9Nf
EfEl9Q9PwHrbA4maC6tQvFJALeN52lOhm3udfkm/K+WhxOb43U78YYbDJXyMCP9q
Z7FE6I9saGdIrAzeRPe/5KLdPSu/V52okdxC7QD0HLLh1FIFcuzHw07A2/6eq6I/
/PwQnvz6QksE4sMKQwJ13lezkCx6prEXamX7jEONbUDXNUShbQf3CT9onBUvIC8f
SBD/sqBvh7W9mI8lOuQG2LvVQjfpq+KVh6ivAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQU+1aSOQjHQrLt1R8d3xdZBG4bW1EwHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK
ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv
TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni8tMWFTT1FqSFFyTHQxUjhk
M3hkWkJHNGJXMUUucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
fakwDQYJKoZIhvcNAQELBQADggEBAAZPTfjsahmnDU3LPACS78+acKX6ZK+K5MLg
f0tfv5FCHLcGcaM1dtZOHsnAqfkOaJgjlWv+6Jp8zcUdi/bfOLMzcf/Fv4DsWSgG
Zi5Chomo2RIqZF4brQSembwfYbXdA0yoZtnk0kqG71KoOFLpcg1BdtamcU/Zhxk4
PLZyQv3V0VBDU/lhG2z+MH9KkHUC2XnoxJX0hZTwuol1Ic56bK3P+8TRr+3qg0j1
KXn2S/4Qas1dUynaRYJNoNxXCqkIpOaBjl+h3oKnrX9sGstCrtHm5csAqO57ylWx
c/meBQOGu4kZnSNPxwKrol2vgnfLp47yEjwBSw6m5wAp6hOkoF0=
-----END CERTIFICATE-----
Generated at Wed Jun 4 01:06:41 2025 by rpki-client