Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/_TYzDlR1qcwZioWIuY-wVR22JGI.roa
File: _TYzDlR1qcwZioWIuY-wVR22JGI.roa (raw, json)
Hash identifier: JAzRD30GIWEVCIxtsKbHDbTqNgzM0jiOiwclWHjgEI8=
Subject key identifier: FD:36:33:0E:54:75:A9:CC:19:8A:85:88:B9:8F:B0:55:1D:B6:24:62
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0BC8
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/_TYzDlR1qcwZioWIuY-wVR22JGI.roa
Signing time: Thu 22 May 2025 19:08:24 +0000
ROA not before: Thu 22 May 2025 19:08:24 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3016 (0xbc8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 22 19:08:24 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=FD36330E5475A9CC198A8588B98FB0551DB62462
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:83:ac:58:d9:ea:69:fd:02:c7:7c:42:38:c8:
5a:27:46:6c:a8:6c:db:9e:25:2d:c1:ac:96:74:0c:
a3:bd:a4:87:a2:6a:f8:2d:d5:ce:d7:b8:a4:6f:61:
fb:9e:2e:24:80:9f:7a:0a:cd:00:3a:0e:d0:7f:3e:
f6:6e:eb:3c:78:7d:cd:14:f1:f0:43:13:88:2c:01:
66:6c:7f:68:87:6e:0a:e4:2e:4d:37:0a:77:dd:bd:
2a:15:89:f5:44:ef:18:46:f8:3b:59:bc:c7:6a:f1:
3a:8e:5f:b5:66:fd:60:8a:58:1c:58:6c:36:fe:5a:
7d:30:ab:9d:9f:16:0b:1e:ff:37:0c:da:dd:2f:b0:
79:23:71:a7:c4:4d:9e:24:42:b9:47:07:7e:b5:3a:
3d:cc:50:e9:2d:37:c6:bf:b6:6b:5c:31:52:1e:74:
36:1d:01:4f:22:7e:00:a2:10:32:d2:93:10:db:94:
cb:d4:a9:60:42:0d:65:44:ac:d2:7a:e6:69:34:44:
01:f4:cf:a1:af:f6:3f:f2:e5:f1:43:58:b2:7f:81:
d7:ce:ad:11:e0:f3:c9:70:c8:e9:1b:2b:d1:31:f4:
44:c8:06:73:34:c4:a4:d9:22:17:ff:d0:b2:76:3f:
07:3b:70:4b:ba:f4:e9:c5:07:93:be:5a:93:0f:07:
d6:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:36:33:0E:54:75:A9:CC:19:8A:85:88:B9:8F:B0:55:1D:B6:24:62
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/_TYzDlR1qcwZioWIuY-wVR22JGI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
af:00:63:d1:0f:e0:e2:01:7d:4e:5a:a4:fe:3c:e8:fa:3b:d3:
4a:11:f2:49:11:aa:bd:cf:fb:37:5a:d8:96:92:72:54:96:fd:
51:78:dc:50:07:5c:6c:21:39:f8:0f:8d:33:60:11:f0:16:47:
e0:17:b5:34:e8:dd:57:c5:65:17:65:8a:36:56:cf:fe:75:c3:
8b:e2:5c:50:73:2d:4f:c9:aa:b4:ab:18:97:42:fe:5c:3c:aa:
1b:d3:18:28:0b:7e:c2:8f:ae:4e:4a:be:39:4b:20:2c:26:c5:
4b:c6:32:d6:cb:5e:3a:a1:7c:90:e4:47:d6:4f:76:82:7e:45:
77:52:e1:a3:17:0c:01:8c:69:1b:13:fe:c5:21:e7:7f:59:82:
e6:01:a0:f6:2e:6c:03:da:69:01:36:e3:28:f0:1a:8b:6b:ab:
f8:02:5f:27:f4:1c:6a:45:7c:66:25:d9:60:a5:3b:8b:5a:02:
e3:fd:93:a4:a4:32:6f:42:77:d3:42:c1:04:82:5f:d0:99:88:
48:c2:0f:2e:28:7b:5b:12:8a:ca:28:e3:4b:e9:1d:f6:35:04:
31:38:a7:27:b4:51:30:41:af:a9:a6:91:30:f2:e8:de:53:cf:
72:e6:6b:88:84:85:13:94:07:85:b8:ed:1f:b6:8b:e4:3d:2f:
8b:a3:9f:92
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICC8gwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy
NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA1MjIx
OTA4MjRaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKEZEMzYzMzBFNTQ3NUE5
Q0MxOThBODU4OEI5OEZCMDU1MURCNjI0NjIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCig6xY2epp/QLHfEI4yFonRmyobNueJS3BrJZ0DKO9pIeiavgt
1c7XuKRvYfueLiSAn3oKzQA6DtB/PvZu6zx4fc0U8fBDE4gsAWZsf2iHbgrkLk03
CnfdvSoVifVE7xhG+DtZvMdq8TqOX7Vm/WCKWBxYbDb+Wn0wq52fFgse/zcM2t0v
sHkjcafETZ4kQrlHB361Oj3MUOktN8a/tmtcMVIedDYdAU8ifgCiEDLSkxDblMvU
qWBCDWVErNJ65mk0RAH0z6Gv9j/y5fFDWLJ/gdfOrRHg88lwyOkbK9Ex9ETIBnM0
xKTZIhf/0LJ2Pwc7cEu69OnFB5O+WpMPB9Y7AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQU/TYzDlR1qcwZioWIuY+wVR22JGIwHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK
ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv
TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni9fVFl6RGxSMXFjd1ppb1dJ
dVktd1ZSMjJKR0kucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
fakwDQYJKoZIhvcNAQELBQADggEBAK8AY9EP4OIBfU5apP486Po700oR8kkRqr3P
+zda2JaSclSW/VF43FAHXGwhOfgPjTNgEfAWR+AXtTTo3VfFZRdlijZWz/51w4vi
XFBzLU/JqrSrGJdC/lw8qhvTGCgLfsKPrk5KvjlLICwmxUvGMtbLXjqhfJDkR9ZP
doJ+RXdS4aMXDAGMaRsT/sUh539ZguYBoPYubAPaaQE24yjwGotrq/gCXyf0HGpF
fGYl2WClO4taAuP9k6SkMm9Cd9NCwQSCX9CZiEjCDy4oe1sSisoo40vpHfY1BDE4
pye0UTBBr6mmkTDy6N5Tz3Lma4iEhROUB4W47R+2i+Q9L4ujn5I=
-----END CERTIFICATE-----
Generated at Thu Jun 5 19:17:52 2025 by rpki-client