Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/hLGh6KXu0-I1L4Exbm8XUAMs3X4.roa
File: hLGh6KXu0-I1L4Exbm8XUAMs3X4.roa (raw, json)
Hash identifier: M2+PAahRF7rhZoIcgPWmCg6SxNEs3EVi/LX0nha23bg=
Subject key identifier: 84:B1:A1:E8:A5:EE:D3:E2:35:2F:81:31:6E:6F:17:50:03:2C:DD:7E
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 2038
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/hLGh6KXu0-I1L4Exbm8XUAMs3X4.roa
Signing time: Thu 19 Jun 2025 05:37:44 +0000
ROA not before: Thu 19 Jun 2025 05:37:44 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8248 (0x2038)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 19 05:37:44 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=84B1A1E8A5EED3E2352F81316E6F1750032CDD7E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:12:4e:ff:3e:76:5c:48:25:57:e4:41:5b:fc:
83:0f:24:4a:8a:1a:7d:91:5b:8a:9d:9b:93:4e:35:
bb:9b:f6:1a:73:80:ff:44:0a:be:f1:55:b4:62:78:
2f:69:6d:0e:a1:d3:c6:31:61:19:54:12:3c:63:a8:
f5:43:4c:74:f0:24:e8:db:e8:19:87:67:70:a4:c6:
80:41:d9:5b:73:da:7a:02:16:60:ea:00:91:94:8d:
47:9c:33:9b:3f:9c:05:96:1d:68:8b:cd:36:29:b8:
b8:b4:dd:18:41:0e:35:fd:05:28:ad:08:d0:76:69:
0e:99:13:b5:fd:de:6e:30:94:bc:e7:e3:04:6c:18:
6a:f9:a2:8b:15:5b:2c:9c:65:31:32:0c:83:2d:65:
82:fa:92:62:4f:35:34:9e:30:79:44:21:3e:ec:74:
13:b6:77:a3:7a:45:d3:1d:62:0f:7f:db:48:b5:7d:
38:7d:ee:c3:da:46:61:4e:c1:b8:0e:6a:c1:2d:cd:
eb:fd:af:49:59:a3:7b:e4:9d:c6:74:93:30:9c:a7:
34:16:4d:35:b0:33:5f:41:08:83:43:30:3d:60:2d:
eb:91:1a:47:39:78:40:fd:70:1f:3c:54:75:23:32:
6a:84:70:9c:5e:e9:f9:82:e2:ff:e5:c5:fd:b1:14:
75:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:B1:A1:E8:A5:EE:D3:E2:35:2F:81:31:6E:6F:17:50:03:2C:DD:7E
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/hLGh6KXu0-I1L4Exbm8XUAMs3X4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
ac:a1:cc:6b:95:e0:9b:5b:fd:76:01:fd:36:69:de:40:70:c8:
b3:da:88:fc:43:30:35:55:6b:ab:af:6a:fe:34:b4:7a:57:3f:
72:b9:e9:19:ed:1a:b1:bc:58:ff:1a:ff:95:aa:65:02:91:6c:
f5:e6:72:4b:ec:3d:8d:3b:62:04:24:41:49:97:1d:31:ab:ee:
97:5c:e5:1a:8c:e2:ee:4c:c9:97:ef:36:cb:85:93:d4:ec:30:
0c:2e:12:45:84:45:7c:68:34:76:bb:5d:4d:7c:92:f6:ce:9b:
df:67:6c:ef:fd:bb:c0:1d:c6:b2:74:07:7a:40:9b:cb:29:6b:
7a:2f:fb:3e:5b:b0:b8:14:8f:76:ee:90:71:cf:dc:e4:34:98:
80:17:b2:da:ac:41:01:6b:67:8c:7d:3c:fa:99:c7:2a:f3:4c:
42:1c:ab:72:81:dd:3f:d1:59:cb:c3:41:38:1f:7b:76:7f:05:
3e:8f:eb:f9:72:16:5a:a3:1e:d0:4c:3c:3a:b7:9a:53:3e:5d:
8f:88:a9:ac:e7:52:94:bf:d2:fa:1c:3e:ed:18:81:80:d9:82:
fb:e7:fa:82:62:19:3d:c9:15:9b:84:0f:5b:d4:9c:22:39:67:
e7:49:8b:3b:68:09:b4:ff:8a:7d:17:2a:fb:43:73:cc:a0:3d:
95:74:73:62
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICIDgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy
NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA2MTkw
NTM3NDRaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKDg0QjFBMUU4QTVFRUQz
RTIzNTJGODEzMTZFNkYxNzUwMDMyQ0REN0UwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCyEk7/PnZcSCVX5EFb/IMPJEqKGn2RW4qdm5NONbub9hpzgP9E
Cr7xVbRieC9pbQ6h08YxYRlUEjxjqPVDTHTwJOjb6BmHZ3CkxoBB2Vtz2noCFmDq
AJGUjUecM5s/nAWWHWiLzTYpuLi03RhBDjX9BSitCNB2aQ6ZE7X93m4wlLzn4wRs
GGr5oosVWyycZTEyDIMtZYL6kmJPNTSeMHlEIT7sdBO2d6N6RdMdYg9/20i1fTh9
7sPaRmFOwbgOasEtzev9r0lZo3vkncZ0kzCcpzQWTTWwM19BCINDMD1gLeuRGkc5
eED9cB88VHUjMmqEcJxe6fmC4v/lxf2xFHW9AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUhLGh6KXu0+I1L4Exbm8XUAMs3X4wHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK
ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv
TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni9oTEdoNktYdTAtSTFMNEV4
Ym04WFVBTXMzWDQucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
fakwDQYJKoZIhvcNAQELBQADggEBAKyhzGuV4Jtb/XYB/TZp3kBwyLPaiPxDMDVV
a6uvav40tHpXP3K56RntGrG8WP8a/5WqZQKRbPXmckvsPY07YgQkQUmXHTGr7pdc
5RqM4u5MyZfvNsuFk9TsMAwuEkWERXxoNHa7XU18kvbOm99nbO/9u8AdxrJ0B3pA
m8spa3ov+z5bsLgUj3bukHHP3OQ0mIAXstqsQQFrZ4x9PPqZxyrzTEIcq3KB3T/R
WcvDQTgfe3Z/BT6P6/lyFlqjHtBMPDq3mlM+XY+IqaznUpS/0vocPu0YgYDZgvvn
+oJiGT3JFZuED1vUnCI5Z+dJiztoCbT/in0XKvtDc8ygPZV0c2I=
-----END CERTIFICATE-----
Generated at Sun Jul 20 12:32:53 2025 by rpki-client