Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/a9eVmDqavNrKSeMscsMIveyR6o8.roa
File: a9eVmDqavNrKSeMscsMIveyR6o8.roa (raw, json)
Hash identifier: CT/OF0qlkr1WNVtzzcgzTQDhaMkfeKv+DrbMN0ohtq0=
Subject key identifier: 6B:D7:95:98:3A:9A:BC:DA:CA:49:E3:2C:72:C3:08:BD:EC:91:EA:8F
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 23D4
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/a9eVmDqavNrKSeMscsMIveyR6o8.roa
Signing time: Tue 24 Jun 2025 08:11:59 +0000
ROA not before: Tue 24 Jun 2025 08:11:59 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9172 (0x23d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 24 08:11:59 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=6BD795983A9ABCDACA49E32C72C308BDEC91EA8F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:09:98:34:63:9a:77:9e:85:2a:69:0b:b4:d3:
df:a3:ce:28:17:c1:da:d8:7e:24:6c:dc:54:64:bd:
63:d4:c0:85:c8:a3:0f:75:83:78:f7:8a:d9:f0:a3:
0a:ab:dc:6d:bc:cc:aa:2b:0c:bc:bc:6f:a2:a6:01:
d5:7c:73:47:5d:50:8f:79:57:ad:ba:2f:98:6c:21:
e1:d8:a1:6a:5b:d5:6a:d8:8d:a8:fc:44:00:4d:cd:
3d:df:f3:3f:4f:4a:1f:e7:86:dd:f7:7e:31:8b:22:
98:de:74:00:b0:df:4f:07:16:c7:6c:03:47:0e:b0:
5a:f4:b5:3e:66:70:ef:c2:f3:ea:aa:69:fc:7e:28:
ce:3d:76:21:e0:1a:2c:49:38:dd:24:56:b5:02:01:
a9:9f:79:c9:42:17:02:e9:be:cd:a8:d4:3c:73:0d:
04:e6:fa:28:cc:a4:08:65:7b:a9:78:ce:31:d4:0f:
1d:f9:66:c5:bc:e3:57:3e:45:b1:ec:d7:0a:a7:5e:
61:11:fc:c0:12:2d:4d:47:dd:62:ed:0d:a0:5a:58:
91:29:f8:cb:21:6b:94:98:48:a9:f8:8f:e9:f6:3f:
9b:d3:db:aa:58:fa:14:41:47:cb:e0:76:fa:ff:2b:
0e:7d:6c:4e:bc:b5:86:f5:97:65:ae:65:1d:0f:11:
fc:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:D7:95:98:3A:9A:BC:DA:CA:49:E3:2C:72:C3:08:BD:EC:91:EA:8F
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/a9eVmDqavNrKSeMscsMIveyR6o8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
95:f9:7f:93:9f:0f:ba:68:4c:2e:9d:29:81:91:59:3d:d2:5d:
76:b0:1f:e7:6e:13:4d:dd:35:7a:ce:e8:2c:69:d0:53:5a:34:
cf:a6:ed:bf:38:75:e2:fa:2d:e8:f2:74:d5:67:10:7e:5c:31:
26:6b:6f:0c:44:5b:59:2d:bb:8b:04:51:b6:49:09:ed:fa:cc:
8f:8f:f1:22:d9:49:a5:5c:ab:ed:43:94:75:c5:5f:cc:68:c7:
c9:de:23:a6:84:7b:19:4c:6e:d2:5f:df:d3:76:4c:b2:cd:d9:
16:ad:8c:d0:51:a5:29:17:48:68:13:ae:f5:8a:1c:19:2a:3a:
0d:03:36:8d:47:1e:b1:b4:e6:40:6b:00:72:e6:fc:eb:3e:48:
53:32:08:94:c6:f1:3f:43:7b:18:96:c0:4c:87:ff:2a:f6:ec:
ed:62:46:f9:09:e9:08:c4:6c:c7:3f:c2:9d:31:b2:4a:d8:cf:
49:6d:3d:1a:1b:a4:d2:15:71:6c:e0:10:d8:6c:d8:ba:ed:b0:
8e:3c:8d:c5:9a:f5:89:56:d9:4a:28:32:f4:59:1d:6e:5a:4d:
aa:1a:e2:ff:c2:c8:0d:8c:66:12:6b:03:3d:e0:68:27:51:c0:
a3:55:15:77:1b:1f:ee:d5:30:d7:9a:07:f2:26:ff:1d:ce:c5:
ea:6e:89:56
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICI9QwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy
NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA2MjQw
ODExNTlaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKDZCRDc5NTk4M0E5QUJD
REFDQTQ5RTMyQzcyQzMwOEJERUM5MUVBOEYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDMCZg0Y5p3noUqaQu009+jzigXwdrYfiRs3FRkvWPUwIXIow91
g3j3itnwowqr3G28zKorDLy8b6KmAdV8c0ddUI95V626L5hsIeHYoWpb1WrYjaj8
RABNzT3f8z9PSh/nht33fjGLIpjedACw308HFsdsA0cOsFr0tT5mcO/C8+qqafx+
KM49diHgGixJON0kVrUCAamfeclCFwLpvs2o1DxzDQTm+ijMpAhle6l4zjHUDx35
ZsW841c+RbHs1wqnXmER/MASLU1H3WLtDaBaWJEp+Msha5SYSKn4j+n2P5vT26pY
+hRBR8vgdvr/Kw59bE68tYb1l2WuZR0PEfxfAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUa9eVmDqavNrKSeMscsMIveyR6o8wHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK
ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv
TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni9hOWVWbURxYXZOcktTZU1z
Y3NNSXZleVI2bzgucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
fakwDQYJKoZIhvcNAQELBQADggEBAJX5f5OfD7poTC6dKYGRWT3SXXawH+duE03d
NXrO6Cxp0FNaNM+m7b84deL6LejydNVnEH5cMSZrbwxEW1ktu4sEUbZJCe36zI+P
8SLZSaVcq+1DlHXFX8xox8neI6aEexlMbtJf39N2TLLN2RatjNBRpSkXSGgTrvWK
HBkqOg0DNo1HHrG05kBrAHLm/Os+SFMyCJTG8T9DexiWwEyH/yr27O1iRvkJ6QjE
bMc/wp0xskrYz0ltPRobpNIVcWzgENhs2LrtsI48jcWa9YlW2UooMvRZHW5aTaoa
4v/CyA2MZhJrAz3gaCdRwKNVFXcbH+7VMNeaB/Im/x3OxepuiVY=
-----END CERTIFICATE-----
Generated at Sun Jul 20 12:51:31 2025 by rpki-client