Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/2UdBEhlHww7UVl8pbswS_H8v-Y0.roa
File: 2UdBEhlHww7UVl8pbswS_H8v-Y0.roa (raw, json)
Hash identifier: YRaUGaGHOX9jj4WgRHLRsnx1kytqKg1lLZgMGkP55TM=
Subject key identifier: D9:47:41:12:19:47:C3:0E:D4:56:5F:29:6E:CC:12:FC:7F:2F:F9:8D
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1E10
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/2UdBEhlHww7UVl8pbswS_H8v-Y0.roa
Signing time: Mon 16 Jun 2025 04:25:47 +0000
ROA not before: Mon 16 Jun 2025 04:25:47 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7696 (0x1e10)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 16 04:25:47 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=D94741121947C30ED4565F296ECC12FC7F2FF98D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:16:f4:41:f1:60:8e:02:97:fb:d1:b8:c6:a9:
cc:37:62:c4:66:d9:db:51:f3:0a:ef:f2:5b:7c:36:
0b:68:36:99:52:95:fc:a6:48:01:16:af:14:8b:c5:
5e:de:5f:b6:64:5f:f0:fa:1d:f8:a3:5b:d2:db:36:
be:4a:49:72:2a:94:50:30:61:e6:34:cb:81:d4:f9:
90:c8:fd:98:4d:03:b0:b7:a5:6d:4c:04:7b:87:5c:
43:90:fb:c3:87:ff:88:8f:ed:91:f9:ea:94:49:7d:
26:88:f1:96:15:4f:df:a6:8a:03:5a:41:7f:13:06:
5e:0a:ef:ba:0c:2b:0e:cc:bc:c6:7f:96:50:58:65:
2e:8c:af:52:0d:e8:ea:cc:14:3f:87:56:47:08:0e:
2c:ce:5c:73:13:17:b7:96:99:02:3b:98:e4:2f:14:
88:a9:ec:80:c1:ae:e1:a3:d3:97:84:24:30:6a:88:
3f:2e:db:d9:fc:1a:d7:1f:02:8a:d3:61:1f:12:43:
76:18:36:4f:f3:31:6a:d2:29:0d:87:73:8c:8e:08:
a4:9f:e9:73:98:f0:e2:61:d0:c0:e2:41:b0:37:38:
20:cf:55:24:0e:8c:db:b9:52:32:83:25:7a:d1:f1:
16:4e:ce:a1:75:10:7f:7d:df:85:39:60:09:2a:bf:
2f:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:47:41:12:19:47:C3:0E:D4:56:5F:29:6E:CC:12:FC:7F:2F:F9:8D
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/2UdBEhlHww7UVl8pbswS_H8v-Y0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
42:72:5c:eb:a9:06:f4:c0:7a:b5:d7:22:ec:b6:b1:54:45:d5:
5b:99:8f:75:d1:f8:44:ea:cb:aa:5e:d4:1e:c1:8a:92:0f:8d:
bb:6d:6f:e9:dd:38:b5:2e:70:8a:93:d4:99:dd:e0:d1:c4:54:
06:c5:b3:b8:71:3a:ac:d3:2f:83:d3:c6:6d:40:dc:9d:f6:33:
a2:82:34:3d:7d:68:f2:78:3a:63:a0:d5:66:43:ee:e7:10:d6:
e3:b2:c7:f1:c8:de:7b:0d:a5:92:92:91:4a:3e:77:7e:34:4d:
f1:c0:49:60:86:9f:25:a1:60:4f:62:f8:1f:ca:bc:2a:5e:5f:
09:21:c6:78:66:1f:47:db:ec:dd:08:39:fc:06:e2:c8:52:1d:
cb:97:92:0a:c4:26:5e:75:d9:50:02:ca:c3:9e:7e:c4:40:8a:
ed:d2:a2:89:6b:35:84:3d:e6:36:cd:b5:42:f5:5c:21:ec:3c:
ca:f4:6e:1e:bc:f2:0e:de:1b:cd:b2:2a:d4:f1:d9:1c:3a:61:
e6:9a:cd:02:ca:f3:47:34:3a:44:36:b2:20:61:69:f2:51:81:
46:f9:f3:39:aa:11:72:34:ef:94:29:5c:43:e8:f0:e7:cf:00:
54:f5:60:25:f9:f7:dc:3e:f7:d9:e6:56:98:e6:93:03:2c:14:
db:cb:45:d1
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICHhAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy
NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA2MTYw
NDI1NDdaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKEQ5NDc0MTEyMTk0N0Mz
MEVENDU2NUYyOTZFQ0MxMkZDN0YyRkY5OEQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCpFvRB8WCOApf70bjGqcw3YsRm2dtR8wrv8lt8NgtoNplSlfym
SAEWrxSLxV7eX7ZkX/D6HfijW9LbNr5KSXIqlFAwYeY0y4HU+ZDI/ZhNA7C3pW1M
BHuHXEOQ+8OH/4iP7ZH56pRJfSaI8ZYVT9+migNaQX8TBl4K77oMKw7MvMZ/llBY
ZS6Mr1IN6OrMFD+HVkcIDizOXHMTF7eWmQI7mOQvFIip7IDBruGj05eEJDBqiD8u
29n8GtcfAorTYR8SQ3YYNk/zMWrSKQ2Hc4yOCKSf6XOY8OJh0MDiQbA3OCDPVSQO
jNu5UjKDJXrR8RZOzqF1EH9934U5YAkqvy/tAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQU2UdBEhlHww7UVl8pbswS/H8v+Y0wHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK
ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv
TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni8yVWRCRWhsSHd3N1VWbDhw
YnN3U19IOHYtWTAucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
fakwDQYJKoZIhvcNAQELBQADggEBAEJyXOupBvTAerXXIuy2sVRF1VuZj3XR+ETq
y6pe1B7BipIPjbttb+ndOLUucIqT1Jnd4NHEVAbFs7hxOqzTL4PTxm1A3J32M6KC
ND19aPJ4OmOg1WZD7ucQ1uOyx/HI3nsNpZKSkUo+d340TfHASWCGnyWhYE9i+B/K
vCpeXwkhxnhmH0fb7N0IOfwG4shSHcuXkgrEJl512VACysOefsRAiu3SoolrNYQ9
5jbNtUL1XCHsPMr0bh688g7eG82yKtTx2Rw6YeaazQLK80c0OkQ2siBhafJRgUb5
8zmqEXI075QpXEPo8OfPAFT1YCX599w+99nmVpjmkwMsFNvLRdE=
-----END CERTIFICATE-----
Generated at Mon Jul 21 08:28:20 2025 by rpki-client