Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/7tsA_Wuqizj1N3m_Ue9LA54QhOU.roa
File: 7tsA_Wuqizj1N3m_Ue9LA54QhOU.roa (raw, json)
Hash identifier: +Vn5UDzYt6tN1ikjZY1sAcU/gOTm2OrdrZnXXFA9bSo=
Subject key identifier: EE:DB:00:FD:6B:AA:8B:38:F5:37:79:BF:51:EF:4B:03:9E:10:84:E5
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 2328
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/7tsA_Wuqizj1N3m_Ue9LA54QhOU.roa
Signing time: Mon 23 Jun 2025 10:41:53 +0000
ROA not before: Mon 23 Jun 2025 10:41:53 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9000 (0x2328)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 23 10:41:53 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=EEDB00FD6BAA8B38F53779BF51EF4B039E1084E5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:62:d1:8b:ab:c1:ed:9a:38:82:db:a4:75:85:
a4:38:e3:ae:dd:dc:f0:6b:a6:32:ce:c8:4c:e6:aa:
d4:13:86:a9:e7:66:15:f3:64:a0:0a:d5:28:d7:38:
09:44:88:bf:4c:03:92:53:d7:63:9d:3c:e4:38:09:
09:22:bb:40:e6:10:e4:40:cc:9c:12:2c:9a:16:d1:
92:4b:35:1c:c7:e3:01:82:f3:83:ed:40:37:fa:1d:
68:b7:31:46:97:f7:e4:50:6a:dc:0e:d5:e5:63:08:
33:f2:27:f3:93:22:7b:fc:a3:4e:53:23:8f:b8:7e:
78:71:3d:b6:52:12:6f:5b:65:2a:ff:3f:2e:6e:f7:
3f:5f:e2:ff:50:f7:44:63:a8:75:a6:f0:0c:4e:f8:
7d:c1:b9:0d:13:9a:be:44:18:9f:00:9b:1b:9a:60:
c7:2f:d9:04:a5:63:bf:3a:ba:97:aa:08:72:c2:b6:
26:f2:e3:a6:4a:0a:80:d2:fc:69:93:68:fb:2b:a0:
2a:0e:98:ad:7e:d7:4d:32:d5:9a:71:0c:05:34:7c:
ce:0d:aa:9b:3f:54:75:6d:bc:4d:69:14:32:b8:d5:
c1:c9:57:56:e0:0f:7c:80:ef:90:fb:eb:63:4b:69:
7b:91:1a:bc:8e:44:d5:87:2b:83:7d:29:7f:e6:66:
18:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:DB:00:FD:6B:AA:8B:38:F5:37:79:BF:51:EF:4B:03:9E:10:84:E5
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/7tsA_Wuqizj1N3m_Ue9LA54QhOU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
45:b3:65:21:16:ba:48:4f:68:4e:e3:bd:68:b9:60:af:9a:d6:
c9:ca:6e:7f:8e:cc:a2:fc:30:fd:8e:b8:7d:d8:e8:db:f4:64:
0e:fd:c9:9e:86:c0:90:f4:e2:fd:78:30:90:1b:8a:61:41:45:
0a:16:5c:d9:15:50:38:d2:5f:fb:07:79:4a:ea:8a:73:3a:a2:
c7:8a:12:62:93:c4:7a:67:56:ab:09:2c:fd:6e:1e:b8:df:dc:
cb:cb:dd:fc:c6:53:ed:38:16:90:a0:d7:82:77:7f:38:e5:c9:
5c:7c:f0:62:97:92:3a:a0:58:ce:7a:07:29:59:97:3b:6a:75:
c1:d5:eb:4f:e8:8f:9e:3a:70:b9:a3:7b:21:8c:91:64:f5:d2:
e1:0e:48:7e:33:7d:b3:aa:33:92:d8:fa:a3:6e:8f:09:25:22:
8d:21:fe:12:8b:e2:36:1d:c5:6a:67:ad:c9:4a:93:98:cb:a8:
30:f7:4f:ea:8e:10:97:b8:53:cf:11:9f:ca:5d:86:85:aa:bb:
92:e9:c7:93:be:ce:aa:ca:e9:73:4f:a2:4e:61:51:62:ca:43:
ff:04:fa:78:aa:2f:31:a3:ae:4b:71:2c:b7:eb:62:31:3c:43:
bd:59:39:e2:a6:bc:df:62:58:af:3b:4d:22:94:76:67:e8:55:
b9:08:c4:1a
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICIygwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy
NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA2MjMx
MDQxNTNaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKEVFREIwMEZENkJBQThC
MzhGNTM3NzlCRjUxRUY0QjAzOUUxMDg0RTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDPYtGLq8HtmjiC26R1haQ4467d3PBrpjLOyEzmqtQThqnnZhXz
ZKAK1SjXOAlEiL9MA5JT12OdPOQ4CQkiu0DmEORAzJwSLJoW0ZJLNRzH4wGC84Pt
QDf6HWi3MUaX9+RQatwO1eVjCDPyJ/OTInv8o05TI4+4fnhxPbZSEm9bZSr/Py5u
9z9f4v9Q90RjqHWm8AxO+H3BuQ0Tmr5EGJ8AmxuaYMcv2QSlY786upeqCHLCtiby
46ZKCoDS/GmTaPsroCoOmK1+100y1ZpxDAU0fM4Nqps/VHVtvE1pFDK41cHJV1bg
D3yA75D762NLaXuRGryORNWHK4N9KX/mZhhnAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQU7tsA/Wuqizj1N3m/Ue9LA54QhOUwHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK
ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv
TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni83dHNBX1d1cWl6ajFOM21f
VWU5TEE1NFFoT1Uucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
fakwDQYJKoZIhvcNAQELBQADggEBAEWzZSEWukhPaE7jvWi5YK+a1snKbn+OzKL8
MP2OuH3Y6Nv0ZA79yZ6GwJD04v14MJAbimFBRQoWXNkVUDjSX/sHeUrqinM6oseK
EmKTxHpnVqsJLP1uHrjf3MvL3fzGU+04FpCg14J3fzjlyVx88GKXkjqgWM56BylZ
lztqdcHV60/oj546cLmjeyGMkWT10uEOSH4zfbOqM5LY+qNujwklIo0h/hKL4jYd
xWpnrclKk5jLqDD3T+qOEJe4U88Rn8pdhoWqu5Lpx5O+zqrK6XNPok5hUWLKQ/8E
+niqLzGjrktxLLfrYjE8Q71ZOeKmvN9iWK87TSKUdmfoVbkIxBo=
-----END CERTIFICATE-----
Generated at Sun Jul 20 23:18:22 2025 by rpki-client