Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/bEV4XdSme0a53dZh72Fegby5L8w.roa
File: bEV4XdSme0a53dZh72Fegby5L8w.roa (raw, json)
Hash identifier: I0GqZKbnhzGUYdWhi7LVsr7Hlrr682oZbJIJCUuOnnk=
Subject key identifier: 6C:45:78:5D:D4:A6:7B:46:B9:DD:D6:61:EF:61:5E:81:BC:B9:2F:CC
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1BB8
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/bEV4XdSme0a53dZh72Fegby5L8w.roa
Signing time: Fri 13 Jun 2025 01:09:51 +0000
ROA not before: Fri 13 Jun 2025 01:09:51 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7096 (0x1bb8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 13 01:09:51 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=6C45785DD4A67B46B9DDD661EF615E81BCB92FCC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:64:52:52:38:14:f6:43:bd:f9:67:c4:4e:c7:
12:ed:df:0b:4e:08:53:0f:92:a9:a3:c4:6e:b4:f3:
e1:b5:d1:47:89:9e:13:b9:ba:5c:09:1e:c8:e7:22:
2d:b4:eb:e4:08:44:d2:c7:14:c9:aa:d4:0b:6a:d3:
88:b8:e4:f9:10:ac:8d:20:74:14:26:e2:17:2f:b1:
49:ae:37:ec:3e:3e:6f:7b:bc:74:13:82:c1:48:92:
6b:38:c0:5b:ac:a4:07:48:55:fd:c3:ba:52:d4:16:
38:cc:22:30:37:b1:8d:e6:7f:b4:52:2a:36:58:31:
36:95:bb:17:74:4a:bd:94:30:91:3f:4a:28:b7:de:
83:31:76:dc:c1:1f:ed:4a:7b:9c:6f:a5:ec:d8:7b:
e2:31:80:0e:64:20:da:63:45:1a:5f:84:61:f6:81:
b0:a3:e8:d5:f5:41:e6:fa:ce:12:a7:5a:68:6e:4a:
cf:43:4c:46:2b:18:d9:1e:79:70:39:c1:f2:25:aa:
05:94:5b:0b:87:db:9d:b7:04:8f:58:d8:1d:eb:89:
c2:27:65:9d:28:07:76:09:8a:9a:09:b3:6f:77:88:
ae:9c:ce:90:5a:8f:44:4e:a7:73:e9:ec:6c:42:00:
56:2c:00:40:1d:88:87:f5:21:cd:bf:b9:41:96:f6:
a4:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:45:78:5D:D4:A6:7B:46:B9:DD:D6:61:EF:61:5E:81:BC:B9:2F:CC
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/bEV4XdSme0a53dZh72Fegby5L8w.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
a7:02:00:1a:9b:c5:20:3e:73:5e:b0:cc:09:ba:24:61:db:c8:
46:75:2c:6d:a8:b8:37:bb:47:4a:ca:d1:71:cb:e3:f8:b9:f4:
83:2f:d4:57:a6:79:f7:92:bf:77:02:7b:67:cd:33:f2:f7:87:
e5:2f:2b:d1:05:2d:a6:55:b3:4f:ee:eb:62:05:f2:10:cc:04:
f3:05:84:99:d2:78:c1:b7:4c:e8:32:ae:63:8a:ca:92:20:1e:
c5:bf:32:09:ef:4c:7d:de:75:19:2e:13:d4:87:d8:e8:38:7b:
62:83:3f:c8:10:a1:24:db:85:a6:10:68:a3:ef:63:97:94:8e:
c4:ff:a3:36:b2:6c:d2:20:e1:5d:1f:19:68:d1:c6:b2:95:ad:
a1:54:0b:14:05:f2:95:4c:d2:23:36:f5:b4:80:2a:d4:0f:d5:
6e:34:a6:9f:31:37:1a:1a:ef:01:99:20:06:07:23:e7:9d:1c:
83:b8:59:29:5b:5d:4e:cc:a9:ea:49:88:5d:30:6c:6d:8f:c6:
68:fc:54:6d:a5:87:bf:05:38:92:82:c0:72:fb:60:63:48:9e:
65:06:f7:21:af:ac:9c:c7:01:73:29:a5:ab:8b:1c:91:08:ab:
5e:b9:34:ed:58:17:07:4b:6f:05:23:07:23:c8:76:72:08:be:
f5:4d:67:ba
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICG7gwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy
NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA2MTMw
MTA5NTFaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKDZDNDU3ODVERDRBNjdC
NDZCOURERDY2MUVGNjE1RTgxQkNCOTJGQ0MwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDFZFJSOBT2Q735Z8ROxxLt3wtOCFMPkqmjxG608+G10UeJnhO5
ulwJHsjnIi206+QIRNLHFMmq1Atq04i45PkQrI0gdBQm4hcvsUmuN+w+Pm97vHQT
gsFIkms4wFuspAdIVf3DulLUFjjMIjA3sY3mf7RSKjZYMTaVuxd0Sr2UMJE/Sii3
3oMxdtzBH+1Ke5xvpezYe+IxgA5kINpjRRpfhGH2gbCj6NX1Qeb6zhKnWmhuSs9D
TEYrGNkeeXA5wfIlqgWUWwuH2523BI9Y2B3ricInZZ0oB3YJipoJs293iK6czpBa
j0ROp3Pp7GxCAFYsAEAdiIf1Ic2/uUGW9qSfAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUbEV4XdSme0a53dZh72Fegby5L8wwHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK
ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv
TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni9iRVY0WGRTbWUwYTUzZFpo
NzJGZWdieTVMOHcucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
fakwDQYJKoZIhvcNAQELBQADggEBAKcCABqbxSA+c16wzAm6JGHbyEZ1LG2ouDe7
R0rK0XHL4/i59IMv1FemefeSv3cCe2fNM/L3h+UvK9EFLaZVs0/u62IF8hDMBPMF
hJnSeMG3TOgyrmOKypIgHsW/MgnvTH3edRkuE9SH2Og4e2KDP8gQoSTbhaYQaKPv
Y5eUjsT/ozaybNIg4V0fGWjRxrKVraFUCxQF8pVM0iM29bSAKtQP1W40pp8xNxoa
7wGZIAYHI+edHIO4WSlbXU7MqepJiF0wbG2Pxmj8VG2lh78FOJKCwHL7YGNInmUG
9yGvrJzHAXMppauLHJEIq165NO1YFwdLbwUjByPIdnIIvvVNZ7o=
-----END CERTIFICATE-----
Generated at Sun Jul 20 12:40:01 2025 by rpki-client