Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/IYJ06oZRvbj3Eg1dNh4qwiUl5-I.roa
File: IYJ06oZRvbj3Eg1dNh4qwiUl5-I.roa (raw, json)
Hash identifier: bvOYRiIOusq1vezMtPLVuQ5sQ7JbGNVzni7ozF2oJVM=
Subject key identifier: 21:82:74:EA:86:51:BD:B8:F7:12:0D:5D:36:1E:2A:C2:25:25:E7:E2
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0E94
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/IYJ06oZRvbj3Eg1dNh4qwiUl5-I.roa
Signing time: Mon 26 May 2025 12:38:42 +0000
ROA not before: Mon 26 May 2025 12:38:42 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3732 (0xe94)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 26 12:38:42 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=218274EA8651BDB8F7120D5D361E2AC22525E7E2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:d7:eb:84:8e:bd:0c:41:1b:ed:9c:34:36:15:
f0:60:55:bd:40:2f:b7:61:2e:e1:25:92:ed:b9:87:
66:ca:09:15:63:e8:4a:80:43:aa:e2:f4:60:7c:f1:
84:77:ca:8e:9c:98:3c:a3:34:a2:34:6f:be:df:11:
e4:80:06:be:b0:77:84:f3:15:d6:48:c1:d1:f7:cd:
ec:3f:66:10:af:88:9b:90:1a:53:b8:56:31:c6:43:
e6:1b:e6:f5:ff:0d:97:a0:bb:55:49:44:eb:64:21:
ba:92:25:72:58:68:97:70:73:cc:d0:71:6e:57:af:
17:1e:3d:f1:60:7f:fb:d0:fd:3f:79:c8:89:2e:58:
27:a0:d0:f9:79:8a:75:ae:75:97:67:94:de:87:f9:
58:30:39:eb:ea:5f:b2:3f:f9:1c:63:d8:11:fd:c4:
9e:20:c0:8b:08:ec:97:4e:c9:d6:4c:83:e1:46:70:
35:2b:c1:df:2d:56:e2:1e:37:9b:3c:c6:ca:7e:45:
aa:79:92:a5:e7:fc:6d:73:69:a0:92:59:be:59:96:
13:67:e9:e9:f3:53:61:5d:80:84:f6:af:3b:76:10:
0c:a7:75:7e:39:14:40:2c:f2:6a:54:22:9b:85:3b:
96:24:5f:ff:ec:36:05:01:3b:99:ab:d1:d3:23:20:
2f:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:82:74:EA:86:51:BD:B8:F7:12:0D:5D:36:1E:2A:C2:25:25:E7:E2
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/IYJ06oZRvbj3Eg1dNh4qwiUl5-I.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
78:61:f6:fe:8a:75:b6:38:9a:6b:8a:d8:a5:ef:b7:40:f1:6d:
b7:1d:de:9a:28:c4:18:b1:f9:58:4f:e0:9f:eb:9c:4d:f6:c7:
4f:91:fa:a9:b4:0c:10:4d:67:4d:f3:d0:10:e9:a0:7d:ee:0d:
8f:39:a1:a5:79:5a:1a:5d:91:11:2f:a5:bc:f8:92:03:4d:0c:
21:67:0c:09:f1:37:9e:a2:a5:23:9c:fb:6a:1f:18:ce:69:1a:
8b:78:fe:c0:ac:dc:01:bc:20:90:8c:93:f9:86:30:2e:aa:79:
33:19:d8:6a:21:90:e1:de:24:e1:56:16:c9:ac:03:83:85:0b:
ab:60:6a:1e:a1:a4:b1:79:ce:99:f6:36:69:47:33:b2:13:b7:
bf:be:96:cc:87:1a:d5:f7:00:03:d3:45:bd:a1:b0:a8:7a:8a:
8a:43:c0:71:96:ac:19:ad:4f:42:d1:cb:1f:33:c6:5e:43:88:
af:8d:9d:84:5d:f9:d7:8e:ee:27:d9:4d:67:ec:05:7b:8f:52:
5a:5d:a2:3f:62:21:62:02:c4:3a:60:71:48:0e:6e:4d:c4:52:
6a:6d:93:9d:58:2a:e9:52:5a:69:9a:2b:e1:da:bc:1b:a0:1a:
8a:81:28:44:36:39:2c:2c:fb:89:24:f3:02:a0:9a:25:18:13:
f2:23:23:11
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICDpQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy
NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA1MjYx
MjM4NDJaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKDIxODI3NEVBODY1MUJE
QjhGNzEyMEQ1RDM2MUUyQUMyMjUyNUU3RTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDt1+uEjr0MQRvtnDQ2FfBgVb1AL7dhLuElku25h2bKCRVj6EqA
Q6ri9GB88YR3yo6cmDyjNKI0b77fEeSABr6wd4TzFdZIwdH3zew/ZhCviJuQGlO4
VjHGQ+Yb5vX/DZegu1VJROtkIbqSJXJYaJdwc8zQcW5XrxcePfFgf/vQ/T95yIku
WCeg0Pl5inWudZdnlN6H+VgwOevqX7I/+Rxj2BH9xJ4gwIsI7JdOydZMg+FGcDUr
wd8tVuIeN5s8xsp+Rap5kqXn/G1zaaCSWb5ZlhNn6enzU2FdgIT2rzt2EAyndX45
FEAs8mpUIpuFO5YkX//sNgUBO5mr0dMjIC+NAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUIYJ06oZRvbj3Eg1dNh4qwiUl5+IwHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK
ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv
TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni9JWUowNm9aUnZiajNFZzFk
Tmg0cXdpVWw1LUkucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
fakwDQYJKoZIhvcNAQELBQADggEBAHhh9v6KdbY4mmuK2KXvt0Dxbbcd3pooxBix
+VhP4J/rnE32x0+R+qm0DBBNZ03z0BDpoH3uDY85oaV5WhpdkREvpbz4kgNNDCFn
DAnxN56ipSOc+2ofGM5pGot4/sCs3AG8IJCMk/mGMC6qeTMZ2GohkOHeJOFWFsms
A4OFC6tgah6hpLF5zpn2NmlHM7ITt7++lsyHGtX3AAPTRb2hsKh6iopDwHGWrBmt
T0LRyx8zxl5DiK+NnYRd+deO7ifZTWfsBXuPUlpdoj9iIWICxDpgcUgObk3EUmpt
k51YKulSWmmaK+HavBugGoqBKEQ2OSws+4kk8wKgmiUYE/IjIxE=
-----END CERTIFICATE-----
Generated at Wed Jun 4 00:52:07 2025 by rpki-client