Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/UCmT5XLVd7BiNO8Owam0fbNCwqw.roa
File: UCmT5XLVd7BiNO8Owam0fbNCwqw.roa (raw, json)
Hash identifier: 9g8scnHj86jQThXzBlpkFkuXtTX0jIBwrLeICEjoN+U=
Subject key identifier: 50:29:93:E5:72:D5:77:B0:62:34:EF:0E:C1:A9:B4:7D:B3:42:C2:AC
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1FF0
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/UCmT5XLVd7BiNO8Owam0fbNCwqw.roa
Signing time: Wed 18 Jun 2025 16:52:16 +0000
ROA not before: Wed 18 Jun 2025 16:52:16 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8176 (0x1ff0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 18 16:52:16 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=502993E572D577B06234EF0EC1A9B47DB342C2AC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:4b:f6:3f:8f:42:3f:8d:5a:15:80:fd:c7:a1:
ba:c7:d1:1d:b6:ff:a1:47:fe:7a:6c:e4:6b:d5:10:
0e:94:34:60:4a:a9:e0:40:7b:49:41:bf:cb:0c:b1:
b4:1d:9f:8a:11:ca:39:81:b1:38:c7:73:6c:bd:28:
f3:71:ec:c4:6c:a9:91:6d:45:07:de:31:f7:47:06:
56:00:18:24:00:aa:5f:84:82:3c:32:df:83:8e:71:
92:68:38:59:1b:b2:b6:2f:f9:a2:e2:27:4d:1a:48:
c7:4f:7c:d4:3f:38:bc:9d:76:f8:19:8c:67:48:f5:
90:83:9f:59:7d:30:a1:67:5d:45:67:71:7d:5e:14:
33:28:86:f8:e5:9e:dd:e2:13:f6:db:08:af:90:5c:
c3:42:4c:e9:51:37:a0:a4:67:43:34:0e:eb:af:c8:
9d:93:1f:5a:b2:c6:c3:5b:60:f0:db:a5:6f:9b:6d:
b6:f4:1d:93:18:66:b7:bc:ea:97:1a:b4:98:02:38:
28:f0:5e:c4:92:56:6c:e5:20:a1:48:98:27:0a:87:
aa:28:a4:84:d2:d1:e0:4a:df:a8:18:d5:67:1e:8f:
bf:51:07:7f:42:c8:5f:69:05:bc:7c:9d:0e:42:14:
22:c0:8b:3d:ac:95:51:9c:38:7a:fd:0c:be:e7:20:
73:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:29:93:E5:72:D5:77:B0:62:34:EF:0E:C1:A9:B4:7D:B3:42:C2:AC
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/UCmT5XLVd7BiNO8Owam0fbNCwqw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
59:bc:05:33:3a:00:bb:c2:ff:71:db:d2:59:5d:22:60:a9:ae:
da:42:7d:1a:e2:2c:43:e2:87:87:19:fc:09:27:90:69:4e:a1:
46:2e:ec:b5:ce:7e:9d:e9:77:62:e7:be:2c:4c:9c:a0:d4:de:
ba:6e:43:02:83:3a:f6:c3:ec:09:f3:6f:32:3f:b8:e7:82:a6:
60:56:ad:04:aa:e2:83:9b:e0:b1:6e:69:1f:37:ec:b2:0b:52:
24:f5:94:bc:7b:ef:3f:30:82:22:18:d9:26:29:42:ce:59:3c:
bf:97:74:dd:b4:08:7a:14:c6:1f:af:ff:5b:1b:6f:9d:e6:26:
ee:e6:f2:b5:56:53:75:ba:2c:23:9b:61:38:ae:73:cc:f8:a3:
ca:01:e7:60:93:7b:17:ae:79:18:fd:9e:6f:88:ab:21:d6:38:
e5:aa:00:32:c3:01:47:20:3d:8c:64:12:39:00:94:33:b5:d1:
49:f2:51:57:b0:24:ec:7d:52:98:23:b1:dc:f9:d3:43:48:89:
5a:08:fd:1e:09:e5:a1:e2:c9:f0:3a:54:20:7a:67:f7:48:95:
21:b2:d3:37:08:c8:dd:7d:f1:94:7e:48:cb:7f:8b:ff:6d:7e:
f3:8c:50:2c:c4:4e:ee:fb:ee:e0:52:d5:81:c8:5e:a3:a9:32:
e4:82:b6:6e
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICH/AwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy
NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA2MTgx
NjUyMTZaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKDUwMjk5M0U1NzJENTc3
QjA2MjM0RUYwRUMxQTlCNDdEQjM0MkMyQUMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDjS/Y/j0I/jVoVgP3HobrH0R22/6FH/nps5GvVEA6UNGBKqeBA
e0lBv8sMsbQdn4oRyjmBsTjHc2y9KPNx7MRsqZFtRQfeMfdHBlYAGCQAql+Egjwy
34OOcZJoOFkbsrYv+aLiJ00aSMdPfNQ/OLyddvgZjGdI9ZCDn1l9MKFnXUVncX1e
FDMohvjlnt3iE/bbCK+QXMNCTOlRN6CkZ0M0DuuvyJ2TH1qyxsNbYPDbpW+bbbb0
HZMYZre86pcatJgCOCjwXsSSVmzlIKFImCcKh6oopITS0eBK36gY1Wcej79RB39C
yF9pBbx8nQ5CFCLAiz2slVGcOHr9DL7nIHNXAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUUCmT5XLVd7BiNO8Owam0fbNCwqwwHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK
ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv
TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni9VQ21UNVhMVmQ3QmlOTzhP
d2FtMGZiTkN3cXcucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
fakwDQYJKoZIhvcNAQELBQADggEBAFm8BTM6ALvC/3Hb0lldImCprtpCfRriLEPi
h4cZ/AknkGlOoUYu7LXOfp3pd2LnvixMnKDU3rpuQwKDOvbD7AnzbzI/uOeCpmBW
rQSq4oOb4LFuaR837LILUiT1lLx77z8wgiIY2SYpQs5ZPL+XdN20CHoUxh+v/1sb
b53mJu7m8rVWU3W6LCObYTiuc8z4o8oB52CTexeueRj9nm+IqyHWOOWqADLDAUcg
PYxkEjkAlDO10UnyUVewJOx9Upgjsdz500NIiVoI/R4J5aHiyfA6VCB6Z/dIlSGy
0zcIyN198ZR+SMt/i/9tfvOMUCzETu777uBS1YHIXqOpMuSCtm4=
-----END CERTIFICATE-----
Generated at Sun Jul 20 19:01:40 2025 by rpki-client