Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/6Zs6M9Rv8gZONFwARXca4aK0l-g.roa
File: 6Zs6M9Rv8gZONFwARXca4aK0l-g.roa (raw, json)
Hash identifier: aE6pPBZkLBwALr6cGtPTNU5GwUsuwZM5wCQjaGQg/7M=
Subject key identifier: E9:9B:3A:33:D4:6F:F2:06:4E:34:5C:00:45:77:1A:E1:A2:B4:97:E8
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0B34
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/6Zs6M9Rv8gZONFwARXca4aK0l-g.roa
Signing time: Thu 22 May 2025 00:38:33 +0000
ROA not before: Thu 22 May 2025 00:38:33 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2868 (0xb34)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 22 00:38:33 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=E99B3A33D46FF2064E345C0045771AE1A2B497E8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:c2:7f:11:1d:a6:47:64:2f:23:7a:81:21:8d:
37:68:38:b7:bd:dc:01:2f:f6:39:00:b1:d2:c2:a9:
b1:bb:9c:f2:7a:53:dd:70:0f:c3:72:ca:03:1a:90:
95:c0:6f:63:a1:c4:f4:98:88:87:57:bc:48:f7:f7:
cd:0f:02:67:34:56:8f:61:1b:57:71:c8:8c:e1:0b:
46:c8:6b:37:64:05:55:09:61:e3:df:a0:95:67:7b:
c3:10:21:48:98:fe:1a:96:7e:bf:09:f8:9c:6c:07:
e7:93:3f:2f:38:c3:33:53:5d:76:c2:6f:65:e7:16:
68:40:c7:4a:d0:80:91:57:ad:cb:3b:7d:38:be:7f:
2a:eb:b1:53:d2:01:cc:0b:8f:b0:21:83:cf:5d:b2:
56:14:ce:cf:2e:80:75:29:93:56:55:49:f8:c9:74:
f7:14:31:25:3d:c6:e3:cc:e7:9a:ff:41:99:17:94:
d9:59:13:04:54:fa:17:4c:f4:09:27:23:c7:a7:b4:
0a:3c:b0:74:21:5c:2e:53:98:62:85:bb:3e:98:51:
20:4d:c5:07:e4:f5:d5:b7:a0:22:e9:ed:0b:4a:4d:
94:e5:7f:c3:9e:5f:aa:f6:fe:07:d6:5b:7b:d6:26:
de:fd:7e:b0:a4:13:b4:54:84:00:5b:59:03:8a:94:
b6:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:9B:3A:33:D4:6F:F2:06:4E:34:5C:00:45:77:1A:E1:A2:B4:97:E8
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/6Zs6M9Rv8gZONFwARXca4aK0l-g.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
71:fb:7e:16:43:e8:bd:bb:40:98:49:2d:87:f4:d2:10:b2:6e:
9f:26:5a:5b:4e:38:8a:cd:88:68:87:b8:8f:9a:c5:dd:59:b2:
4e:4d:29:5d:75:55:63:a0:fd:e9:ec:14:81:d9:34:89:68:e1:
94:f4:92:f5:c4:f6:37:96:84:66:60:ee:c4:47:61:e8:72:f8:
1c:ae:e0:ca:26:a8:b3:29:63:14:bc:58:a3:3c:d0:66:a3:4d:
d0:ad:83:11:bb:1f:ba:24:90:c4:9c:3d:a8:5d:63:3c:b0:f3:
5b:55:96:60:25:f0:29:58:41:9b:88:eb:32:63:29:de:2a:3b:
d6:b5:a4:95:9a:5d:19:02:62:62:3c:13:c0:ce:61:91:89:13:
7d:34:00:b7:a8:fc:fa:dd:a2:d7:26:5a:6d:b5:69:72:92:33:
4a:d5:50:0e:74:90:5b:4a:b6:91:19:9d:70:0e:72:48:bd:c3:
79:42:53:40:9d:fe:a2:b2:03:c4:22:39:d3:f3:34:0f:0b:4c:
f7:7d:08:22:87:c7:3c:6b:31:33:8b:13:7f:71:36:ad:c3:50:
cc:37:15:31:f7:5a:aa:47:32:88:3b:45:a7:5a:9a:60:a4:8b:
50:87:d8:d5:b0:76:96:c5:b9:f0:e5:8f:eb:b9:fd:e1:dc:9f:
8a:40:c2:7e
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICCzQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy
NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA1MjIw
MDM4MzNaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKEU5OUIzQTMzRDQ2RkYy
MDY0RTM0NUMwMDQ1NzcxQUUxQTJCNDk3RTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDUwn8RHaZHZC8jeoEhjTdoOLe93AEv9jkAsdLCqbG7nPJ6U91w
D8NyygMakJXAb2OhxPSYiIdXvEj3980PAmc0Vo9hG1dxyIzhC0bIazdkBVUJYePf
oJVne8MQIUiY/hqWfr8J+JxsB+eTPy84wzNTXXbCb2XnFmhAx0rQgJFXrcs7fTi+
fyrrsVPSAcwLj7Ahg89dslYUzs8ugHUpk1ZVSfjJdPcUMSU9xuPM55r/QZkXlNlZ
EwRU+hdM9AknI8entAo8sHQhXC5TmGKFuz6YUSBNxQfk9dW3oCLp7QtKTZTlf8Oe
X6r2/gfWW3vWJt79frCkE7RUhABbWQOKlLbzAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQU6Zs6M9Rv8gZONFwARXca4aK0l+gwHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK
ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv
TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni82WnM2TTlSdjhnWk9ORndB
UlhjYTRhSzBsLWcucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
fakwDQYJKoZIhvcNAQELBQADggEBAHH7fhZD6L27QJhJLYf00hCybp8mWltOOIrN
iGiHuI+axd1Zsk5NKV11VWOg/ensFIHZNIlo4ZT0kvXE9jeWhGZg7sRHYehy+Byu
4MomqLMpYxS8WKM80GajTdCtgxG7H7okkMScPahdYzyw81tVlmAl8ClYQZuI6zJj
Kd4qO9a1pJWaXRkCYmI8E8DOYZGJE300ALeo/PrdotcmWm21aXKSM0rVUA50kFtK
tpEZnXAOcki9w3lCU0Cd/qKyA8QiOdPzNA8LTPd9CCKHxzxrMTOLE39xNq3DUMw3
FTH3WqpHMog7RadammCki1CH2NWwdpbFufDlj+u5/eHcn4pAwn4=
-----END CERTIFICATE-----
Generated at Wed Jun 4 01:23:20 2025 by rpki-client