Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/U00axeeiHR38XXdOdKD8Ih9TNAQ.roa
File: U00axeeiHR38XXdOdKD8Ih9TNAQ.roa (raw, json)
Hash identifier: oVxOg+fZZecS6IIVgs3oziOhVJwPvd0U28mGp2oEMEs=
Subject key identifier: 53:4D:1A:C5:E7:A2:1D:1D:FC:5D:77:4E:74:A0:FC:22:1F:53:34:04
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 2230
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/U00axeeiHR38XXdOdKD8Ih9TNAQ.roa
Signing time: Sun 22 Jun 2025 03:42:00 +0000
ROA not before: Sun 22 Jun 2025 03:42:00 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8752 (0x2230)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 22 03:42:00 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=534D1AC5E7A21D1DFC5D774E74A0FC221F533404
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:fc:96:f5:1b:e3:99:fb:61:99:53:30:39:13:
5a:d9:97:54:8d:e5:f1:c7:96:62:e2:16:59:d4:81:
0a:ac:65:b1:8e:30:7c:b8:dd:90:8b:a1:07:90:c4:
67:85:e0:ad:50:05:0b:0a:b7:87:43:74:2b:93:a4:
30:52:19:6d:41:ad:f5:15:3c:a4:08:dd:e1:b6:f7:
a2:4f:23:70:fa:ab:01:96:3a:c3:e1:0e:1a:9a:a9:
38:21:6f:74:10:a5:fc:01:e8:33:83:83:1a:e2:fd:
6e:9c:53:f5:cb:a2:92:ff:42:63:6a:48:69:73:32:
ed:66:77:d1:fb:63:25:f7:30:0f:04:1d:55:a2:dd:
98:28:1d:4b:d2:9a:93:72:d1:2e:0b:d2:d6:30:0e:
f0:8f:42:d2:2d:ee:18:92:6e:7d:20:79:39:fb:58:
cb:c6:06:a0:e2:5f:41:f6:03:f8:7c:c4:50:a8:27:
89:bc:b5:a0:f6:4b:66:04:10:08:3f:04:65:d2:7f:
5e:41:f1:86:51:6e:32:70:41:4a:67:0c:71:d5:a8:
2b:34:10:8d:99:eb:7a:01:4f:00:5e:83:63:c0:01:
63:ef:7f:4d:64:39:c5:0f:8f:7c:1f:5d:78:b2:c4:
4e:18:c3:6e:55:d2:a4:6d:c5:fe:f3:34:68:81:60:
7d:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:4D:1A:C5:E7:A2:1D:1D:FC:5D:77:4E:74:A0:FC:22:1F:53:34:04
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/U00axeeiHR38XXdOdKD8Ih9TNAQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
80:ff:a4:48:b1:68:4b:15:64:14:bb:fe:af:c5:f3:3e:90:90:
2c:8d:17:67:64:30:e7:90:9a:b7:0c:a5:d6:98:e3:01:44:25:
d1:52:47:e5:52:de:08:23:b8:fd:23:af:33:2a:79:1d:ba:82:
c5:27:58:83:8b:6d:c1:a4:16:e1:15:ef:2a:47:c4:95:83:a7:
30:27:91:8d:59:03:56:f3:3e:44:1c:02:3a:e4:5e:9a:00:96:
ef:18:cf:f7:4a:be:96:c0:98:78:c5:78:5d:7b:1b:26:d7:40:
b9:d3:8f:99:7a:0c:d2:8b:08:a7:f6:4c:8c:f5:4e:62:b6:21:
d8:9d:92:3a:a0:39:3e:39:8a:70:b9:d3:ce:9f:48:ee:a7:56:
1d:5b:a2:a0:42:46:51:27:47:20:a0:c0:b1:03:52:24:13:d1:
e4:8b:36:bc:2f:cd:52:7a:fe:ad:6b:0f:7a:b7:96:df:10:28:
d6:43:ea:cc:77:06:10:49:5f:0e:51:e2:17:5e:e9:61:9d:3b:
8c:f4:cb:82:1a:9f:e2:cc:1c:73:03:43:7f:27:73:9c:65:de:
4e:6a:f2:10:7f:4a:23:ab:92:ea:9c:c9:05:e9:92:2d:90:b3:
de:a7:5a:fe:02:1a:88:20:71:17:15:d9:04:12:ef:43:5c:64:
f5:13:d6:ea
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICIjAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy
NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA2MjIw
MzQyMDBaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKDUzNEQxQUM1RTdBMjFE
MURGQzVENzc0RTc0QTBGQzIyMUY1MzM0MDQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDI/Jb1G+OZ+2GZUzA5E1rZl1SN5fHHlmLiFlnUgQqsZbGOMHy4
3ZCLoQeQxGeF4K1QBQsKt4dDdCuTpDBSGW1BrfUVPKQI3eG296JPI3D6qwGWOsPh
DhqaqTghb3QQpfwB6DODgxri/W6cU/XLopL/QmNqSGlzMu1md9H7YyX3MA8EHVWi
3ZgoHUvSmpNy0S4L0tYwDvCPQtIt7hiSbn0geTn7WMvGBqDiX0H2A/h8xFCoJ4m8
taD2S2YEEAg/BGXSf15B8YZRbjJwQUpnDHHVqCs0EI2Z63oBTwBeg2PAAWPvf01k
OcUPj3wfXXiyxE4Yw25V0qRtxf7zNGiBYH1BAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUU00axeeiHR38XXdOdKD8Ih9TNAQwHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK
ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv
TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni9VMDBheGVlaUhSMzhYWGRP
ZEtEOEloOVROQVEucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
fakwDQYJKoZIhvcNAQELBQADggEBAID/pEixaEsVZBS7/q/F8z6QkCyNF2dkMOeQ
mrcMpdaY4wFEJdFSR+VS3ggjuP0jrzMqeR26gsUnWIOLbcGkFuEV7ypHxJWDpzAn
kY1ZA1bzPkQcAjrkXpoAlu8Yz/dKvpbAmHjFeF17GybXQLnTj5l6DNKLCKf2TIz1
TmK2IdidkjqgOT45inC5086fSO6nVh1boqBCRlEnRyCgwLEDUiQT0eSLNrwvzVJ6
/q1rD3q3lt8QKNZD6sx3BhBJXw5R4hde6WGdO4z0y4Ian+LMHHMDQ38nc5xl3k5q
8hB/SiOrkuqcyQXpki2Qs96nWv4CGoggcRcV2QQS70NcZPUT1uo=
-----END CERTIFICATE-----
Generated at Sun Jul 20 19:23:02 2025 by rpki-client