Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/_gdIspJcpmM2P7WW-8HokDBgLtY.roa
File: _gdIspJcpmM2P7WW-8HokDBgLtY.roa (raw, json)
Hash identifier: OjaI1z0FSDT/FyzeXbWPSsUzXCrTqpFTW+SStNzhu1s=
Subject key identifier: FE:07:48:B2:92:5C:A6:63:36:3F:B5:96:FB:C1:E8:90:30:60:2E:D6
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 07B0
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/_gdIspJcpmM2P7WW-8HokDBgLtY.roa
Signing time: Sat 17 May 2025 08:08:53 +0000
ROA not before: Sat 17 May 2025 08:08:53 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1968 (0x7b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 17 08:08:53 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=FE0748B2925CA663363FB596FBC1E89030602ED6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:1f:78:26:91:cc:69:9f:1a:21:31:30:a9:db:
41:41:fe:cb:35:5c:be:37:bf:cd:1b:70:6c:4d:b8:
ee:8a:5e:14:93:31:06:2b:01:8f:c9:2a:95:ef:32:
46:f1:69:dd:20:02:5c:1e:0e:06:ad:bb:a8:d1:9e:
6e:75:0b:01:7d:aa:3a:10:e6:b6:28:c2:be:a9:d4:
08:ae:a9:a8:15:bd:0e:3b:7d:ae:06:25:fd:de:41:
69:b6:46:be:b9:64:2a:38:17:20:95:5a:b1:61:34:
b1:5a:75:20:62:5e:f8:4d:f0:bf:80:1c:72:a8:04:
87:2a:1c:19:0e:09:f3:35:d7:cc:0b:cb:a3:6b:ab:
b7:0c:ef:4c:fb:97:da:44:38:8a:71:98:f1:c0:30:
32:e2:90:17:26:1d:ef:4f:53:10:d9:02:e8:e7:3a:
bc:fa:da:e3:d5:47:af:03:40:e5:7a:68:98:f4:fe:
36:a8:68:0c:95:b6:4b:34:34:8a:20:21:23:1f:f8:
c9:ad:28:d4:74:54:42:ae:70:87:fb:ab:5f:23:16:
11:3e:10:54:21:17:5c:c3:87:f0:e4:fb:30:bb:47:
a4:44:e0:25:88:a9:ed:46:41:a3:c4:a3:88:d2:38:
40:26:ae:f9:5b:c1:12:1e:c4:42:74:f6:e6:62:f3:
f1:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:07:48:B2:92:5C:A6:63:36:3F:B5:96:FB:C1:E8:90:30:60:2E:D6
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/_gdIspJcpmM2P7WW-8HokDBgLtY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
2b:c3:28:b8:e3:b2:53:e3:77:fa:b7:d3:d8:b5:df:53:ae:30:
e4:f6:4e:34:83:cd:60:7d:6a:cb:91:43:11:c3:4c:79:5c:c0:
d5:e2:f9:bc:55:07:c7:42:b3:8c:30:e6:5e:92:59:ee:fa:99:
a3:df:b6:dc:ae:31:32:70:b8:3a:14:d5:2d:98:b5:7c:9e:4f:
61:e1:32:21:8d:3a:aa:13:c9:74:49:ae:10:51:13:4c:d1:02:
8f:38:79:5f:b5:36:d6:60:d6:84:56:c8:db:98:07:43:8a:27:
f7:6c:d9:df:43:68:d1:e7:d4:42:d3:2a:f1:36:2e:c9:eb:7c:
ff:b5:62:4a:21:d0:37:89:37:6f:2d:5c:d3:d7:a0:cb:96:93:
1c:ec:03:62:72:8a:55:2d:7c:35:b8:e2:f9:52:0f:42:a0:a4:
48:c5:d2:80:53:f9:7e:07:fe:1b:88:51:b0:72:fc:92:24:f5:
9b:c5:cd:30:87:11:0a:1c:cb:c8:49:15:86:24:4c:56:02:04:
9b:2d:1f:c3:ec:28:3a:67:86:d6:b0:eb:87:2d:e6:bc:2b:f8:
4f:cb:07:e0:58:66:30:b1:22:44:58:0b:6f:09:69:8e:f0:ff:
e7:d3:81:75:65:6d:17:8f:48:c1:dc:48:33:e1:b6:7e:90:76:
eb:5f:3e:5c
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICB7AwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy
NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA1MTcw
ODA4NTNaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKEZFMDc0OEIyOTI1Q0E2
NjMzNjNGQjU5NkZCQzFFODkwMzA2MDJFRDYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDIH3gmkcxpnxohMTCp20FB/ss1XL43v80bcGxNuO6KXhSTMQYr
AY/JKpXvMkbxad0gAlweDgatu6jRnm51CwF9qjoQ5rYowr6p1AiuqagVvQ47fa4G
Jf3eQWm2Rr65ZCo4FyCVWrFhNLFadSBiXvhN8L+AHHKoBIcqHBkOCfM118wLy6Nr
q7cM70z7l9pEOIpxmPHAMDLikBcmHe9PUxDZAujnOrz62uPVR68DQOV6aJj0/jao
aAyVtks0NIogISMf+MmtKNR0VEKucIf7q18jFhE+EFQhF1zDh/Dk+zC7R6RE4CWI
qe1GQaPEo4jSOEAmrvlbwRIexEJ09uZi8/EVAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQU/gdIspJcpmM2P7WW+8HokDBgLtYwHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK
ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv
TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni9fZ2RJc3BKY3BtTTJQN1dX
LThIb2tEQmdMdFkucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
fakwDQYJKoZIhvcNAQELBQADggEBACvDKLjjslPjd/q309i131OuMOT2TjSDzWB9
asuRQxHDTHlcwNXi+bxVB8dCs4ww5l6SWe76maPfttyuMTJwuDoU1S2YtXyeT2Hh
MiGNOqoTyXRJrhBRE0zRAo84eV+1NtZg1oRWyNuYB0OKJ/ds2d9DaNHn1ELTKvE2
LsnrfP+1Ykoh0DeJN28tXNPXoMuWkxzsA2JyilUtfDW44vlSD0KgpEjF0oBT+X4H
/huIUbBy/JIk9ZvFzTCHEQocy8hJFYYkTFYCBJstH8PsKDpnhtaw64ct5rwr+E/L
B+BYZjCxIkRYC28JaY7w/+fTgXVlbRePSMHcSDPhtn6QdutfPlw=
-----END CERTIFICATE-----
Generated at Wed Jun 4 00:44:48 2025 by rpki-client