Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/A2W1s8wbrVpSKB-zu-jnE-1FxPg.roa
File: A2W1s8wbrVpSKB-zu-jnE-1FxPg.roa (raw, json)
Hash identifier: Ar6WhujUxwohS/pOWdwmqBEu4YqVjMFzAyuWPjMSP8I=
Subject key identifier: 03:65:B5:B3:CC:1B:AD:5A:52:28:1F:B3:BB:E8:E7:13:ED:45:C4:F8
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 09B0
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/A2W1s8wbrVpSKB-zu-jnE-1FxPg.roa
Signing time: Tue 20 May 2025 00:08:13 +0000
ROA not before: Tue 20 May 2025 00:08:13 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2480 (0x9b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 20 00:08:13 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=0365B5B3CC1BAD5A52281FB3BBE8E713ED45C4F8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ef:86:dd:26:29:bb:15:c4:1f:90:48:03:99:
97:33:93:ce:8c:a9:27:3b:35:fa:53:d2:8b:da:49:
e1:11:a0:d3:ea:3d:fe:ac:dc:21:66:d8:54:34:2f:
a2:dc:6e:97:97:1b:68:d7:e2:5c:7d:bf:f8:5c:1f:
92:f7:5c:47:d9:90:03:b5:93:15:64:10:32:fc:7c:
93:f7:ee:42:d4:96:19:ec:99:dd:cf:10:b5:f3:f8:
5f:4b:41:f1:6c:3e:1d:74:c2:e1:87:80:82:51:e0:
d1:00:08:d7:85:e3:d8:bf:69:b6:57:88:32:55:19:
97:42:52:f0:16:85:7d:0c:aa:b8:e8:2c:bd:14:7e:
ea:9e:ad:8b:6b:98:26:14:05:5e:3e:a5:d2:ae:2f:
fd:41:f8:90:6c:ac:08:e2:fa:13:b9:0c:ee:31:e9:
9f:5e:54:5d:c4:17:96:ce:c4:d6:85:95:f6:98:93:
3e:48:56:eb:59:25:19:ed:8b:e1:b8:2a:3e:1c:8f:
d5:4f:e6:fd:0e:be:c9:4e:52:68:6c:42:db:9c:3f:
b0:fc:6a:c4:6d:ab:14:3f:57:cf:8a:5d:2d:d7:91:
4e:12:ec:c9:a9:fa:d6:73:67:59:cc:4a:99:b1:75:
b2:85:9a:f5:51:76:87:0e:46:25:ad:df:b7:03:e4:
f1:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:65:B5:B3:CC:1B:AD:5A:52:28:1F:B3:BB:E8:E7:13:ED:45:C4:F8
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/A2W1s8wbrVpSKB-zu-jnE-1FxPg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
11:dd:19:8f:21:7d:fc:c0:94:7b:10:e2:bf:9c:30:b8:d6:2f:
50:f0:ef:80:f1:09:dd:6e:ed:46:41:af:8a:22:a8:8f:1c:b4:
c1:17:41:85:15:b5:22:fb:b7:db:64:2a:f5:94:95:ed:7b:c3:
a1:ca:96:c6:f8:61:05:18:2c:14:fb:86:e3:06:2a:39:f8:f4:
03:21:2e:7a:27:56:95:34:5e:04:f5:69:23:58:c5:a9:96:fe:
44:f0:4a:ed:b3:16:95:86:a1:92:dd:f8:a1:c8:02:dd:56:0f:
88:b4:78:22:26:74:bf:e3:73:be:14:e0:9d:a4:3d:31:d8:66:
fe:4e:6d:fa:1c:f9:08:3a:2c:f5:25:75:c7:ff:96:3a:ff:f7:
b6:04:bf:59:be:f8:a6:0c:d4:99:05:f8:ab:13:5e:91:9a:6d:
f8:30:96:97:31:45:1d:e8:da:52:e0:5b:b7:44:ed:71:18:53:
06:c8:39:93:f4:15:04:5d:f5:51:50:c8:82:d7:cb:21:29:19:
2e:21:fc:78:fc:79:fa:ad:ab:e7:2c:f5:f6:5f:f7:55:dc:75:
62:6e:27:ce:65:3d:d5:3f:bc:8e:c5:43:0a:8f:3c:d6:40:36:
65:1b:5a:8f:f3:97:8b:00:06:64:b6:a7:3b:81:4c:b5:c7:6b:
f2:bf:b0:df
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICCbAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy
NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA1MjAw
MDA4MTNaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKDAzNjVCNUIzQ0MxQkFE
NUE1MjI4MUZCM0JCRThFNzEzRUQ0NUM0RjgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC174bdJim7FcQfkEgDmZczk86MqSc7NfpT0ovaSeERoNPqPf6s
3CFm2FQ0L6LcbpeXG2jX4lx9v/hcH5L3XEfZkAO1kxVkEDL8fJP37kLUlhnsmd3P
ELXz+F9LQfFsPh10wuGHgIJR4NEACNeF49i/abZXiDJVGZdCUvAWhX0MqrjoLL0U
fuqerYtrmCYUBV4+pdKuL/1B+JBsrAji+hO5DO4x6Z9eVF3EF5bOxNaFlfaYkz5I
VutZJRnti+G4Kj4cj9VP5v0OvslOUmhsQtucP7D8asRtqxQ/V8+KXS3XkU4S7Mmp
+tZzZ1nMSpmxdbKFmvVRdocORiWt37cD5PFhAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUA2W1s8wbrVpSKB+zu+jnE+1FxPgwHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK
ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv
TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni9BMlcxczh3YnJWcFNLQi16
dS1qbkUtMUZ4UGcucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
fakwDQYJKoZIhvcNAQELBQADggEBABHdGY8hffzAlHsQ4r+cMLjWL1Dw74DxCd1u
7UZBr4oiqI8ctMEXQYUVtSL7t9tkKvWUle17w6HKlsb4YQUYLBT7huMGKjn49AMh
LnonVpU0XgT1aSNYxamW/kTwSu2zFpWGoZLd+KHIAt1WD4i0eCImdL/jc74U4J2k
PTHYZv5Obfoc+Qg6LPUldcf/ljr/97YEv1m++KYM1JkF+KsTXpGabfgwlpcxRR3o
2lLgW7dE7XEYUwbIOZP0FQRd9VFQyILXyyEpGS4h/Hj8efqtq+cs9fZf91XcdWJu
J85lPdU/vI7FQwqPPNZANmUbWo/zl4sABmS2pzuBTLXHa/K/sN8=
-----END CERTIFICATE-----
Generated at Wed Jun 4 00:55:54 2025 by rpki-client