Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/lgHrXuBgPY8m0XSff06UC2cyjv4.roa
File: lgHrXuBgPY8m0XSff06UC2cyjv4.roa (raw, json)
Hash identifier: mGYoarCQcueh2PNIgPc8sDBxhzFIG5AzjtDsM289spw=
Subject key identifier: 96:01:EB:5E:E0:60:3D:8F:26:D1:74:9F:7F:4E:94:0B:67:32:8E:FE
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0D38
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/lgHrXuBgPY8m0XSff06UC2cyjv4.roa
Signing time: Sat 24 May 2025 17:08:31 +0000
ROA not before: Sat 24 May 2025 17:08:31 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3384 (0xd38)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 24 17:08:31 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=9601EB5EE0603D8F26D1749F7F4E940B67328EFE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:12:18:b4:ae:ab:07:8b:45:45:be:e0:c6:00:
d6:40:05:b0:9f:8f:71:e2:b1:1c:c9:bc:da:7b:b3:
a2:41:c0:4b:36:c2:e6:67:10:90:f0:d8:c8:0d:74:
57:36:f7:8e:c8:80:9b:11:9c:8c:b4:a1:2f:dd:a6:
d6:8b:94:1f:1f:35:02:b5:4f:de:e6:29:4b:b9:72:
91:7c:35:09:c8:be:3f:6d:f1:84:36:a2:54:b3:11:
03:55:25:c1:39:7c:41:84:26:2e:a1:db:87:9f:f9:
2f:0c:74:03:cf:10:66:f8:f2:ef:ab:cb:5d:c6:11:
e4:31:84:d2:0f:95:51:90:42:3c:2c:4d:fb:a5:bd:
72:4a:53:0e:8a:0a:01:ff:84:0a:7d:a7:1d:54:10:
a4:c7:dd:0b:e2:db:12:af:8c:11:8e:79:29:a8:12:
bb:2e:3f:80:dd:cd:e0:a5:a0:d0:18:a9:8a:a9:7c:
0e:ef:ca:17:69:ef:81:29:a5:e9:c3:05:cf:4d:5c:
6e:37:9e:27:db:e8:a2:7d:d8:31:19:39:60:85:b1:
b2:fe:d1:b1:61:cf:e9:62:b4:c1:0a:46:59:52:cb:
30:07:ad:c7:8c:48:59:70:bd:38:94:2d:29:b1:78:
ed:40:5d:df:f0:de:aa:be:04:6c:3b:59:a5:0e:c0:
ed:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:01:EB:5E:E0:60:3D:8F:26:D1:74:9F:7F:4E:94:0B:67:32:8E:FE
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/lgHrXuBgPY8m0XSff06UC2cyjv4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
2d:e5:df:2a:01:a3:77:44:3a:b1:4d:e1:9c:5d:c7:3d:7d:30:
c9:8e:32:bf:42:e0:bd:f4:03:c2:19:f1:4b:68:4a:61:bf:1c:
42:09:ea:29:9b:6f:66:c6:9f:64:2a:c1:53:e2:56:36:1e:28:
ca:66:b7:96:dc:e4:86:c9:1b:81:40:c5:ff:11:6d:2e:00:af:
89:3f:6f:06:90:33:ba:8f:e4:67:bb:ea:42:60:2f:1c:48:b5:
ec:6b:cf:bc:61:9c:68:25:48:e2:a4:3c:85:ee:e0:95:a5:8d:
4a:17:e3:4c:5e:90:68:a6:9f:75:b2:c0:ed:52:e3:09:7b:c7:
d6:a6:1d:b9:b6:b6:0c:42:6a:88:bb:9b:82:0b:6e:1b:15:06:
ef:b3:d7:24:dd:9f:d5:23:ef:90:3b:9b:66:2a:0c:e2:83:d4:
b1:48:3b:f1:9e:f0:c6:8a:66:4e:eb:1c:2e:6e:81:15:39:66:
3d:9b:2b:5d:ea:68:52:68:2a:2c:84:61:12:1b:b5:6f:c4:4b:
31:7a:1a:ce:f9:58:23:a2:db:5d:d3:cb:16:bf:d6:a2:c8:04:
ff:e1:09:40:11:5c:9f:00:d9:81:67:9e:c4:34:23:8a:a6:87:
a0:ce:d0:f3:7e:2d:7c:3c:e7:68:ac:e5:4c:f1:82:13:ba:59:
f0:72:5d:f0
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICDTgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy
NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA1MjQx
NzA4MzFaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKDk2MDFFQjVFRTA2MDNE
OEYyNkQxNzQ5RjdGNEU5NDBCNjczMjhFRkUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC9Ehi0rqsHi0VFvuDGANZABbCfj3HisRzJvNp7s6JBwEs2wuZn
EJDw2MgNdFc2947IgJsRnIy0oS/dptaLlB8fNQK1T97mKUu5cpF8NQnIvj9t8YQ2
olSzEQNVJcE5fEGEJi6h24ef+S8MdAPPEGb48u+ry13GEeQxhNIPlVGQQjwsTful
vXJKUw6KCgH/hAp9px1UEKTH3Qvi2xKvjBGOeSmoErsuP4DdzeCloNAYqYqpfA7v
yhdp74EppenDBc9NXG43nifb6KJ92DEZOWCFsbL+0bFhz+litMEKRllSyzAHrceM
SFlwvTiULSmxeO1AXd/w3qq+BGw7WaUOwO1LAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUlgHrXuBgPY8m0XSff06UC2cyjv4wHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK
ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv
TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni9sZ0hyWHVCZ1BZOG0wWFNm
ZjA2VUMyY3lqdjQucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
fakwDQYJKoZIhvcNAQELBQADggEBAC3l3yoBo3dEOrFN4Zxdxz19MMmOMr9C4L30
A8IZ8UtoSmG/HEIJ6imbb2bGn2QqwVPiVjYeKMpmt5bc5IbJG4FAxf8RbS4Ar4k/
bwaQM7qP5Ge76kJgLxxItexrz7xhnGglSOKkPIXu4JWljUoX40xekGimn3WywO1S
4wl7x9amHbm2tgxCaoi7m4ILbhsVBu+z1yTdn9Uj75A7m2YqDOKD1LFIO/Ge8MaK
Zk7rHC5ugRU5Zj2bK13qaFJoKiyEYRIbtW/ESzF6Gs75WCOi213Tyxa/1qLIBP/h
CUARXJ8A2YFnnsQ0I4qmh6DO0PN+LXw852is5UzxghO6WfByXfA=
-----END CERTIFICATE-----
Generated at Wed Jun 4 00:59:53 2025 by rpki-client