Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/gRdkEyHs_iO4CxIRxhr_u5ZVqnM.roa
File: gRdkEyHs_iO4CxIRxhr_u5ZVqnM.roa (raw, json)
Hash identifier: 4qHSSssQcfFIlBpudhBAuEsomFNfDxrk+3SMsVXgqJo=
Subject key identifier: 81:17:64:13:21:EC:FE:23:B8:0B:12:11:C6:1A:FF:BB:96:55:AA:73
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0D28
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/gRdkEyHs_iO4CxIRxhr_u5ZVqnM.roa
Signing time: Sat 24 May 2025 15:08:32 +0000
ROA not before: Sat 24 May 2025 15:08:32 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3368 (0xd28)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 24 15:08:32 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=8117641321ECFE23B80B1211C61AFFBB9655AA73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:1a:96:fd:e0:e7:33:53:08:ba:08:88:6a:e6:
c4:81:c8:f2:0a:c5:29:e7:29:99:eb:67:be:31:55:
a3:e3:b7:55:7a:da:57:52:c9:66:79:d1:c0:fa:86:
d1:4a:f0:e8:ae:43:24:8c:ea:31:73:af:e7:bc:32:
a3:e6:cb:b5:b2:b9:b6:d4:87:ac:ba:92:c0:0a:f4:
b0:d8:6b:84:07:c6:3b:c9:85:a5:d1:78:42:a6:65:
c1:bc:bb:5a:be:3e:94:57:ef:74:61:f9:ac:77:ee:
74:fc:f5:50:68:03:93:92:01:98:5e:df:38:2c:10:
bd:af:da:a4:d4:bb:50:b2:dd:e7:ef:f8:a3:83:3a:
07:74:dd:b5:38:50:59:b3:72:65:3d:d7:0f:0d:b7:
32:79:b7:ac:d7:16:9e:73:81:bb:ab:9c:92:25:d1:
6e:8f:c8:88:9f:5b:34:65:d9:22:da:ba:1a:7e:41:
8e:6d:b9:eb:7d:40:32:ad:60:76:02:e3:69:06:54:
07:cc:2d:53:ce:26:ce:ad:46:cb:13:d4:a5:88:a2:
04:dc:58:54:6c:36:12:7c:84:5b:02:3c:3e:83:a1:
e5:52:a7:9f:b9:81:43:fa:b7:78:8e:fb:73:e5:7a:
2b:ca:12:a6:1a:f6:95:fb:16:37:47:8c:f7:c8:05:
cf:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:17:64:13:21:EC:FE:23:B8:0B:12:11:C6:1A:FF:BB:96:55:AA:73
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/gRdkEyHs_iO4CxIRxhr_u5ZVqnM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
6e:4d:79:02:9d:b9:22:f7:5a:71:d6:c0:03:b2:23:0d:c6:5e:
4d:3a:cb:37:43:20:b6:c9:9b:19:a9:f6:27:7f:1d:76:77:b3:
a2:5f:18:bc:80:e6:dc:13:5d:90:90:bf:f6:0f:fd:b0:d5:e7:
e6:54:47:7e:61:4a:7a:54:4d:05:8d:e6:53:e9:dc:68:56:e2:
cf:d3:b2:b5:90:29:1f:6b:1f:3b:a0:70:dd:11:5d:d7:95:69:
33:c9:8e:68:fe:2a:c3:aa:90:89:53:03:d2:eb:d5:42:c4:ae:
9f:cc:f4:ad:db:29:eb:8c:ce:fd:90:4c:b7:46:3d:c6:29:b9:
42:56:99:45:93:7f:aa:6c:01:59:e8:37:10:72:63:b8:be:19:
ca:1c:12:00:d9:5e:0f:c0:30:62:d9:4d:ab:dd:ab:70:36:23:
72:c8:95:31:a8:bd:2e:d2:a7:8c:58:70:c6:cb:95:04:10:b6:
d7:36:16:c0:93:ff:15:4e:0d:6d:6a:9f:8d:65:14:6a:87:65:
42:28:77:62:61:89:74:0f:95:9e:52:96:3a:fe:5c:0f:8c:56:
36:62:ad:9e:8c:ed:67:e4:62:64:d4:b0:f7:95:18:ea:f7:b7:
3c:ef:2d:d2:d2:48:ce:0e:3d:7c:f7:b5:b8:95:b2:05:3f:8c:
a5:5a:d8:75
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICDSgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy
NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA1MjQx
NTA4MzJaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKDgxMTc2NDEzMjFFQ0ZF
MjNCODBCMTIxMUM2MUFGRkJCOTY1NUFBNzMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC/Gpb94OczUwi6CIhq5sSByPIKxSnnKZnrZ74xVaPjt1V62ldS
yWZ50cD6htFK8OiuQySM6jFzr+e8MqPmy7WyubbUh6y6ksAK9LDYa4QHxjvJhaXR
eEKmZcG8u1q+PpRX73Rh+ax37nT89VBoA5OSAZhe3zgsEL2v2qTUu1Cy3efv+KOD
Ogd03bU4UFmzcmU91w8NtzJ5t6zXFp5zgburnJIl0W6PyIifWzRl2SLauhp+QY5t
uet9QDKtYHYC42kGVAfMLVPOJs6tRssT1KWIogTcWFRsNhJ8hFsCPD6DoeVSp5+5
gUP6t3iO+3PleivKEqYa9pX7FjdHjPfIBc/3AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUgRdkEyHs/iO4CxIRxhr/u5ZVqnMwHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK
ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv
TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni9nUmRrRXlIc19pTzRDeElS
eGhyX3U1WlZxbk0ucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
fakwDQYJKoZIhvcNAQELBQADggEBAG5NeQKduSL3WnHWwAOyIw3GXk06yzdDILbJ
mxmp9id/HXZ3s6JfGLyA5twTXZCQv/YP/bDV5+ZUR35hSnpUTQWN5lPp3GhW4s/T
srWQKR9rHzugcN0RXdeVaTPJjmj+KsOqkIlTA9Lr1ULErp/M9K3bKeuMzv2QTLdG
PcYpuUJWmUWTf6psAVnoNxByY7i+GcocEgDZXg/AMGLZTavdq3A2I3LIlTGovS7S
p4xYcMbLlQQQttc2FsCT/xVODW1qn41lFGqHZUIod2JhiXQPlZ5Sljr+XA+MVjZi
rZ6M7WfkYmTUsPeVGOr3tzzvLdLSSM4OPXz3tbiVsgU/jKVa2HU=
-----END CERTIFICATE-----
Generated at Wed Jun 4 00:55:29 2025 by rpki-client