Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/N2YrunZdmeUbaLuB8ua0_RkDGds.roa
File: N2YrunZdmeUbaLuB8ua0_RkDGds.roa (raw, json)
Hash identifier: 0unlA9Ia1FjzT3MSotfJhuMzdhKOEbueEVC0HmLg14A=
Subject key identifier: 37:66:2B:BA:76:5D:99:E5:1B:68:BB:81:F2:E6:B4:FD:19:03:19:DB
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1E3C
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/N2YrunZdmeUbaLuB8ua0_RkDGds.roa
Signing time: Mon 16 Jun 2025 09:39:59 +0000
ROA not before: Mon 16 Jun 2025 09:39:59 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7740 (0x1e3c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 16 09:39:59 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=37662BBA765D99E51B68BB81F2E6B4FD190319DB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:c1:e9:e0:07:36:5d:28:a8:6a:d2:33:46:39:
9b:12:1c:d6:bb:93:c0:68:c7:cc:c6:41:82:06:08:
ed:c6:c0:95:6b:e7:91:2a:fa:3e:df:94:49:2f:e9:
40:40:39:6e:be:61:a7:06:d6:de:b7:60:18:bf:1e:
20:8d:81:85:b5:20:60:0e:68:a9:66:cb:32:b1:ff:
79:5f:95:3d:ec:69:ab:8d:bc:ee:62:7c:e7:e5:7a:
49:6f:50:cd:37:d5:0d:b3:61:74:a9:67:a8:f2:7c:
2a:2f:04:9f:5e:cc:fc:f7:1a:3c:34:f8:a1:49:1e:
7d:ce:b1:b9:a2:14:35:99:12:8e:66:bb:b4:61:39:
0a:e5:d3:4b:50:5a:19:7a:91:39:5b:b1:74:f1:51:
77:52:de:78:1d:75:f9:fc:7a:57:34:58:d0:ee:c4:
03:38:cc:bc:e5:75:43:02:45:97:bb:ba:b7:00:36:
25:2f:f6:68:27:4d:00:f6:43:d9:39:83:8c:85:f8:
b0:47:99:88:91:bb:71:0d:d4:f6:b5:14:c6:6d:d8:
ce:29:ee:99:07:9c:7f:cc:34:7c:a7:78:76:1a:30:
c2:ac:f5:9c:24:6a:b1:ad:e3:6e:b2:66:7e:5e:de:
86:bb:2c:02:d8:bc:e6:32:6d:27:9b:c6:34:7c:02:
9a:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:66:2B:BA:76:5D:99:E5:1B:68:BB:81:F2:E6:B4:FD:19:03:19:DB
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/N2YrunZdmeUbaLuB8ua0_RkDGds.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
9b:68:94:81:a4:3f:6d:3b:9f:24:b7:51:da:0b:31:09:34:d5:
2a:88:42:c0:c2:4e:0b:79:9e:cd:2a:e7:82:b3:f8:7a:91:26:
bc:51:ea:c0:d6:e3:4e:f4:03:19:3e:41:32:b1:73:56:3f:7d:
c6:49:24:9d:14:6b:87:ad:79:24:6c:67:4d:39:a7:d8:d8:61:
1f:2c:37:d0:88:b0:06:c3:f1:08:44:0e:09:4a:57:85:cb:2a:
30:52:97:90:0c:fa:c4:33:26:2c:e2:ae:e7:50:3d:3e:c2:07:
9a:28:6b:e8:dc:0e:c7:58:f4:09:55:c3:df:80:1f:1a:14:74:
99:01:b0:f9:c9:1d:a7:ac:eb:f0:5d:ea:6a:35:81:17:ce:04:
19:86:d5:62:f8:4a:8d:5d:b7:c5:48:9b:66:b3:54:14:4e:d5:
d7:15:55:86:f7:8f:05:b5:a2:54:c3:96:2c:dc:9f:f1:3d:23:
26:ba:69:38:cb:51:2f:47:4d:01:4a:fd:71:c3:df:98:ca:5a:
fc:36:95:43:ac:9c:3f:e8:fb:7b:e5:07:aa:85:49:f1:18:01:
75:ba:7d:36:f8:61:4b:06:58:af:4c:5c:af:57:34:18:9f:14:
22:6b:63:da:a7:5a:87:96:94:59:f3:62:35:10:36:17:b0:ad:
93:68:1b:da
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICHjwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy
NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA2MTYw
OTM5NTlaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKDM3NjYyQkJBNzY1RDk5
RTUxQjY4QkI4MUYyRTZCNEZEMTkwMzE5REIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDIwengBzZdKKhq0jNGOZsSHNa7k8Box8zGQYIGCO3GwJVr55Eq
+j7flEkv6UBAOW6+YacG1t63YBi/HiCNgYW1IGAOaKlmyzKx/3lflT3saauNvO5i
fOfleklvUM031Q2zYXSpZ6jyfCovBJ9ezPz3Gjw0+KFJHn3OsbmiFDWZEo5mu7Rh
OQrl00tQWhl6kTlbsXTxUXdS3ngddfn8elc0WNDuxAM4zLzldUMCRZe7urcANiUv
9mgnTQD2Q9k5g4yF+LBHmYiRu3EN1Pa1FMZt2M4p7pkHnH/MNHyneHYaMMKs9Zwk
arGt426yZn5e3oa7LALYvOYybSebxjR8ApoTAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUN2YrunZdmeUbaLuB8ua0/RkDGdswHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK
ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv
TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni9OMllydW5aZG1lVWJhTHVC
OHVhMF9Sa0RHZHMucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
fakwDQYJKoZIhvcNAQELBQADggEBAJtolIGkP207nyS3UdoLMQk01SqIQsDCTgt5
ns0q54Kz+HqRJrxR6sDW4070Axk+QTKxc1Y/fcZJJJ0Ua4eteSRsZ005p9jYYR8s
N9CIsAbD8QhEDglKV4XLKjBSl5AM+sQzJizirudQPT7CB5ooa+jcDsdY9AlVw9+A
HxoUdJkBsPnJHaes6/Bd6mo1gRfOBBmG1WL4So1dt8VIm2azVBRO1dcVVYb3jwW1
olTDlizcn/E9Iya6aTjLUS9HTQFK/XHD35jKWvw2lUOsnD/o+3vlB6qFSfEYAXW6
fTb4YUsGWK9MXK9XNBifFCJrY9qnWoeWlFnzYjUQNhewrZNoG9o=
-----END CERTIFICATE-----
Generated at Mon Jul 21 13:23:25 2025 by rpki-client