Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/Pr8RtBuZjv5Vg3xyrfKKcPf1HZ8.roa
File: Pr8RtBuZjv5Vg3xyrfKKcPf1HZ8.roa (raw, json)
Hash identifier: ffIFFYWpUYSm38TWDQu+l7FBOzw7kk3P+Qcd9GarclM=
Subject key identifier: 3E:BF:11:B4:1B:99:8E:FE:55:83:7C:72:AD:F2:8A:70:F7:F5:1D:9F
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0C14
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/Pr8RtBuZjv5Vg3xyrfKKcPf1HZ8.roa
Signing time: Fri 23 May 2025 04:38:25 +0000
ROA not before: Fri 23 May 2025 04:38:25 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3092 (0xc14)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 23 04:38:25 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=3EBF11B41B998EFE55837C72ADF28A70F7F51D9F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:32:47:8d:e3:f7:66:8d:df:6b:2b:a6:27:c8:
22:80:4c:b8:b2:d7:6f:e0:a7:6f:83:6c:c9:aa:7f:
5c:a5:34:95:e4:8d:6b:bd:14:30:c9:d9:ec:e9:09:
7f:db:9b:b6:0c:6a:da:04:86:ea:71:48:04:90:1e:
74:17:89:a1:a7:c2:e2:8f:d7:b6:91:ac:c7:6e:d0:
29:d8:fa:88:18:eb:07:4f:84:f9:81:07:0b:3a:a9:
13:28:4a:bb:1d:03:2f:f1:10:e7:df:36:89:54:b2:
68:96:fb:fc:1c:2b:d1:fe:19:d8:9e:73:91:69:7f:
32:1c:bb:3f:f7:cf:85:f8:73:f3:fd:c0:63:f4:18:
c8:dc:77:76:35:5c:a4:5f:73:0d:36:7e:0b:12:2f:
6e:0f:72:6f:16:97:18:3b:f1:40:13:a3:ba:a1:4d:
22:a1:9b:32:bd:e7:8d:ac:ae:7e:3d:6d:02:b0:8d:
d6:06:96:b7:3b:5b:cf:ef:13:cf:fa:7e:f5:41:8a:
38:09:60:9b:85:01:fa:cd:dc:9b:99:03:e7:a3:f5:
c9:a6:a6:0d:25:c4:41:95:af:b2:fb:90:a2:31:5f:
bf:1c:ed:a9:19:3a:36:ac:68:cb:b1:e6:d8:45:68:
84:fd:ee:00:27:cf:63:6c:4b:24:68:0e:d4:75:74:
06:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:BF:11:B4:1B:99:8E:FE:55:83:7C:72:AD:F2:8A:70:F7:F5:1D:9F
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/Pr8RtBuZjv5Vg3xyrfKKcPf1HZ8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
7a:0a:a5:03:10:8c:c6:fe:2e:66:80:bd:42:b2:62:d2:2a:82:
9b:67:43:f0:fd:1f:32:41:47:64:d3:91:7a:f9:ca:44:f4:9c:
c1:10:91:f2:fa:61:2f:73:67:43:99:34:2e:54:bf:a9:bd:8e:
f5:c6:ce:35:ee:a2:c6:44:5e:32:26:d2:58:d6:93:21:3c:43:
66:4b:2f:ef:5f:93:1f:02:fa:60:70:3d:fe:7b:37:4b:1f:a9:
3d:ae:a4:0d:d8:28:b8:27:4e:4c:25:72:4a:87:c2:80:e6:e9:
4e:b3:03:4b:4c:d6:6e:c1:ff:9c:90:e1:1d:a1:a6:a0:25:65:
39:b1:4d:0e:1a:40:65:93:ec:f9:90:91:aa:ed:8f:ac:90:97:
74:72:78:d1:05:22:ba:f9:7e:7c:bc:e9:8a:8e:1d:c2:d4:e7:
eb:54:0a:22:2f:16:7d:63:c5:4b:29:6f:66:27:18:26:26:67:
94:bf:38:b6:22:f3:4d:28:6c:1f:4e:40:0e:88:cf:ab:56:fb:
c6:f4:e6:f0:32:42:71:bf:f5:7f:21:74:62:b4:5d:00:f6:48:
ca:08:9c:0e:e3:f3:9e:8d:2e:be:2b:c0:97:d3:93:37:73:37:
e6:a2:28:5b:38:c7:84:83:85:25:e1:9f:1a:0f:18:18:e9:e9:
89:27:22:5c
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICDBQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy
NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA1MjMw
NDM4MjVaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKDNFQkYxMUI0MUI5OThF
RkU1NTgzN0M3MkFERjI4QTcwRjdGNTFEOUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDRMkeN4/dmjd9rK6YnyCKATLiy12/gp2+DbMmqf1ylNJXkjWu9
FDDJ2ezpCX/bm7YMatoEhupxSASQHnQXiaGnwuKP17aRrMdu0CnY+ogY6wdPhPmB
Bws6qRMoSrsdAy/xEOffNolUsmiW+/wcK9H+Gdiec5FpfzIcuz/3z4X4c/P9wGP0
GMjcd3Y1XKRfcw02fgsSL24Pcm8Wlxg78UATo7qhTSKhmzK9542srn49bQKwjdYG
lrc7W8/vE8/6fvVBijgJYJuFAfrN3JuZA+ej9cmmpg0lxEGVr7L7kKIxX78c7akZ
OjasaMux5thFaIT97gAnz2NsSyRoDtR1dAadAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUPr8RtBuZjv5Vg3xyrfKKcPf1HZ8wHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK
ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv
TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni9QcjhSdEJ1Wmp2NVZnM3h5
cmZLS2NQZjFIWjgucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
fakwDQYJKoZIhvcNAQELBQADggEBAHoKpQMQjMb+LmaAvUKyYtIqgptnQ/D9HzJB
R2TTkXr5ykT0nMEQkfL6YS9zZ0OZNC5Uv6m9jvXGzjXuosZEXjIm0ljWkyE8Q2ZL
L+9fkx8C+mBwPf57N0sfqT2upA3YKLgnTkwlckqHwoDm6U6zA0tM1m7B/5yQ4R2h
pqAlZTmxTQ4aQGWT7PmQkartj6yQl3RyeNEFIrr5fny86YqOHcLU5+tUCiIvFn1j
xUspb2YnGCYmZ5S/OLYi800obB9OQA6Iz6tW+8b05vAyQnG/9X8hdGK0XQD2SMoI
nA7j856NLr4rwJfTkzdzN+aiKFs4x4SDhSXhnxoPGBjp6YknIlw=
-----END CERTIFICATE-----
Generated at Thu Jun 5 20:38:03 2025 by rpki-client