Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/jRlOPVYTlK1IimQzePiVuT9_C7s.roa
File: jRlOPVYTlK1IimQzePiVuT9_C7s.roa (raw, json)
Hash identifier: 9KOh6U8l/0VIIwQZPzQ7dPjCz1mk2JR+/5KhWTqNvC0=
Subject key identifier: 8D:19:4E:3D:56:13:94:AD:48:8A:64:33:78:F8:95:B9:3F:7F:0B:BB
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 20D0
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/jRlOPVYTlK1IimQzePiVuT9_C7s.roa
Signing time: Fri 20 Jun 2025 07:13:51 +0000
ROA not before: Fri 20 Jun 2025 07:13:51 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8400 (0x20d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 20 07:13:51 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=8D194E3D561394AD488A643378F895B93F7F0BBB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ad:4d:45:1a:67:e6:d0:f1:df:a8:40:4f:52:
fb:df:90:2e:09:27:28:f0:00:a9:f3:0c:29:29:53:
e5:41:38:3d:8d:75:10:2c:fc:d9:4b:8c:d9:02:c6:
8d:d8:15:fe:11:a1:bf:6b:d5:b6:6e:f4:24:da:89:
05:5b:0f:48:b4:ec:06:c1:2f:db:61:34:85:81:0a:
92:d1:f7:28:1d:a8:6f:89:46:21:3c:5f:4c:8c:a0:
f7:79:2f:b2:ed:73:37:32:d4:da:9a:0d:d8:2e:0c:
64:0c:28:c4:41:22:a0:63:54:35:24:f5:2e:09:bb:
27:a7:5f:30:63:d4:8b:ca:49:b4:f1:8d:74:73:64:
72:50:5c:df:cc:7d:f4:d1:90:db:0a:29:c3:ad:9d:
58:fd:c9:18:55:3e:26:cf:e4:84:0a:f7:4b:86:9d:
39:78:1d:f6:ef:0f:05:85:15:6f:9d:4e:ee:63:d6:
14:8e:3e:c4:25:30:cd:58:cc:b9:48:b4:d0:ff:95:
a3:6e:42:e6:aa:15:b2:28:34:e6:8b:4a:e8:7a:77:
fe:96:3a:44:35:68:7d:51:f3:5a:0f:30:a3:e9:39:
5b:c3:01:31:c0:b7:69:72:66:f5:58:a6:e1:6f:e0:
6a:73:6d:b1:04:8f:d1:66:12:67:40:0a:8c:57:5f:
8f:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:19:4E:3D:56:13:94:AD:48:8A:64:33:78:F8:95:B9:3F:7F:0B:BB
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/jRlOPVYTlK1IimQzePiVuT9_C7s.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
2c:91:51:d3:e9:5b:8f:40:81:bc:bc:9c:dc:51:3c:ba:e4:da:
f9:d0:e0:2c:e6:7b:b5:db:ca:a9:b7:b0:1c:75:ee:ce:65:ba:
d8:c4:8c:6c:32:82:44:1b:76:95:f9:de:f4:13:c1:bc:b8:6d:
01:60:fa:15:6f:f4:2a:06:fe:1d:75:89:6c:90:03:ed:f9:18:
6d:14:5d:19:04:17:8e:2d:2f:99:e6:72:11:d0:35:61:7d:a8:
e0:60:70:c3:eb:ee:c7:99:35:f9:2a:16:7f:4e:4d:c4:49:1c:
c0:db:23:3f:7a:fb:f1:ed:68:4d:21:46:70:c2:62:e1:c0:37:
a2:dd:3b:61:b5:e1:1d:36:59:16:8f:f5:f7:26:1c:76:ac:ee:
cc:10:de:a0:de:a1:5e:d5:c1:c1:dc:ff:49:87:3b:e2:47:37:
91:d9:f4:28:dc:13:d9:85:8d:b5:ab:7a:34:4f:58:d6:2d:03:
fb:59:75:6a:ae:00:2c:8a:15:6d:64:2b:33:cc:ca:fd:74:24:
ab:37:e4:8c:df:2d:6b:b6:9d:dd:2b:41:ce:23:d9:77:85:40:
1f:38:12:35:10:bf:1d:b8:78:1c:17:d3:0b:05:2f:ce:e0:db:
1e:c8:fa:41:a2:9e:91:72:67:c7:7d:4c:fc:ac:a7:81:42:e4:
31:5c:45:98
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICINAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy
NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA2MjAw
NzEzNTFaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKDhEMTk0RTNENTYxMzk0
QUQ0ODhBNjQzMzc4Rjg5NUI5M0Y3RjBCQkIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCwrU1FGmfm0PHfqEBPUvvfkC4JJyjwAKnzDCkpU+VBOD2NdRAs
/NlLjNkCxo3YFf4Rob9r1bZu9CTaiQVbD0i07AbBL9thNIWBCpLR9ygdqG+JRiE8
X0yMoPd5L7Ltczcy1NqaDdguDGQMKMRBIqBjVDUk9S4JuyenXzBj1IvKSbTxjXRz
ZHJQXN/MffTRkNsKKcOtnVj9yRhVPibP5IQK90uGnTl4HfbvDwWFFW+dTu5j1hSO
PsQlMM1YzLlItND/laNuQuaqFbIoNOaLSuh6d/6WOkQ1aH1R81oPMKPpOVvDATHA
t2lyZvVYpuFv4GpzbbEEj9FmEmdACoxXX491AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUjRlOPVYTlK1IimQzePiVuT9/C7swHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK
ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv
TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni9qUmxPUFZZVGxLMUlpbVF6
ZVBpVnVUOV9DN3Mucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
fakwDQYJKoZIhvcNAQELBQADggEBACyRUdPpW49Agby8nNxRPLrk2vnQ4Czme7Xb
yqm3sBx17s5lutjEjGwygkQbdpX53vQTwby4bQFg+hVv9CoG/h11iWyQA+35GG0U
XRkEF44tL5nmchHQNWF9qOBgcMPr7seZNfkqFn9OTcRJHMDbIz96+/HtaE0hRnDC
YuHAN6LdO2G14R02WRaP9fcmHHas7swQ3qDeoV7VwcHc/0mHO+JHN5HZ9CjcE9mF
jbWrejRPWNYtA/tZdWquACyKFW1kKzPMyv10JKs35IzfLWu2nd0rQc4j2XeFQB84
EjUQvx24eBwX0wsFL87g2x7I+kGinpFyZ8d9TPysp4FC5DFcRZg=
-----END CERTIFICATE-----
Generated at Sun Jul 20 12:57:47 2025 by rpki-client