Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/m6GmKtoBl99FAaqSjc2r12_Lfuo.roa
File: m6GmKtoBl99FAaqSjc2r12_Lfuo.roa (raw, json)
Hash identifier: gCcBdJNZExWlEjEXzZCHumcbQh7C0PMJ8FD+6nXbGyw=
Subject key identifier: 9B:A1:A6:2A:DA:01:97:DF:45:01:AA:92:8D:CD:AB:D7:6F:CB:7E:EA
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0494
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/m6GmKtoBl99FAaqSjc2r12_Lfuo.roa
Signing time: Tue 13 May 2025 04:38:01 +0000
ROA not before: Tue 13 May 2025 04:38:01 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1172 (0x494)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 13 04:38:01 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=9BA1A62ADA0197DF4501AA928DCDABD76FCB7EEA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:3a:5e:f0:8a:3b:9c:1b:c3:93:a6:63:ae:09:
25:4f:98:b7:d1:00:61:ce:12:e5:98:fc:fa:93:10:
9d:e3:ae:29:a0:d2:40:72:bf:52:19:e9:27:14:e7:
bf:2a:20:af:fb:1f:9e:d4:0a:59:82:e4:c3:10:29:
84:1e:b3:44:37:5b:88:57:46:19:ea:33:32:99:69:
0b:8e:14:25:44:6f:c8:18:28:74:88:53:6a:0a:01:
e3:8b:03:49:be:44:01:89:9e:fe:c3:52:66:68:aa:
86:2a:31:2a:53:2b:86:d6:87:16:8e:2a:79:69:8a:
32:a5:22:26:c3:14:8d:31:29:39:1d:bc:4a:a8:87:
aa:11:d1:50:3a:04:28:c5:eb:27:fb:e4:a5:8f:5e:
8f:bb:5e:1d:ab:8a:e5:42:9b:e3:99:62:7c:39:fb:
40:d9:a6:90:52:ee:f0:d2:6f:f9:db:4c:ce:8e:3c:
d3:bc:28:96:39:eb:90:3b:10:96:c6:45:5c:7d:2c:
c7:2c:0b:27:aa:47:51:ca:72:ba:1e:4c:2d:2f:02:
7b:8a:ff:bf:6a:03:55:65:3d:5b:7b:c4:81:94:9b:
e7:86:c7:42:e6:d3:1c:f4:76:20:90:a3:4a:10:84:
23:eb:04:e6:f2:56:06:f1:fe:2f:48:de:ca:95:eb:
c4:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:A1:A6:2A:DA:01:97:DF:45:01:AA:92:8D:CD:AB:D7:6F:CB:7E:EA
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/m6GmKtoBl99FAaqSjc2r12_Lfuo.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
ae:d7:ed:e6:30:ac:16:d6:33:b3:ff:4e:2f:b2:70:ce:89:92:
e0:90:9e:fd:c4:21:42:02:7f:63:0c:c8:f2:41:21:c7:cf:83:
48:93:6d:be:4d:2f:6b:71:fa:69:f8:9a:34:52:1e:7c:b1:d2:
50:cd:06:ca:57:8b:44:1d:39:6a:1b:91:c2:e0:c5:c8:54:e3:
82:78:2f:31:99:7a:3f:43:15:c0:06:0f:16:68:68:2d:f6:58:
aa:5d:be:23:48:8c:9c:d9:90:53:ba:0c:8b:50:b5:4b:26:50:
da:84:dc:4e:63:18:e1:3d:75:c5:71:6f:b7:17:2c:66:bb:39:
23:d4:82:50:41:ec:d0:18:c1:86:59:dc:93:d9:fe:4a:4a:9d:
97:fe:41:d8:c0:05:13:e9:ba:37:b2:d7:0c:df:c4:9a:22:fc:
dd:91:2e:3b:29:30:01:f3:b7:ef:20:b3:41:12:f1:76:a7:f8:
20:88:b5:70:54:6f:cb:73:bc:dc:77:77:a0:92:7e:b5:70:b8:
a8:6e:e7:6f:f8:0a:a1:60:2c:e5:ba:6d:91:79:82:92:95:93:
12:b0:e6:44:12:e1:6d:b3:03:47:ee:3d:77:e0:15:0f:a8:9a:
88:bf:9a:9c:fe:68:70:88:bf:b7:47:24:2e:9d:bc:39:7a:16:
63:05:3e:81
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICBJQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy
NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA1MTMw
NDM4MDFaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKDlCQTFBNjJBREEwMTk3
REY0NTAxQUE5MjhEQ0RBQkQ3NkZDQjdFRUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC7Ol7wijucG8OTpmOuCSVPmLfRAGHOEuWY/PqTEJ3jrimg0kBy
v1IZ6ScU578qIK/7H57UClmC5MMQKYQes0Q3W4hXRhnqMzKZaQuOFCVEb8gYKHSI
U2oKAeOLA0m+RAGJnv7DUmZoqoYqMSpTK4bWhxaOKnlpijKlIibDFI0xKTkdvEqo
h6oR0VA6BCjF6yf75KWPXo+7Xh2riuVCm+OZYnw5+0DZppBS7vDSb/nbTM6OPNO8
KJY565A7EJbGRVx9LMcsCyeqR1HKcroeTC0vAnuK/79qA1VlPVt7xIGUm+eGx0Lm
0xz0diCQo0oQhCPrBObyVgbx/i9I3sqV68QXAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUm6GmKtoBl99FAaqSjc2r12/LfuowHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK
ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv
TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni9tNkdtS3RvQmw5OUZBYXFT
amMycjEyX0xmdW8ucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
fakwDQYJKoZIhvcNAQELBQADggEBAK7X7eYwrBbWM7P/Ti+ycM6JkuCQnv3EIUIC
f2MMyPJBIcfPg0iTbb5NL2tx+mn4mjRSHnyx0lDNBspXi0QdOWobkcLgxchU44J4
LzGZej9DFcAGDxZoaC32WKpdviNIjJzZkFO6DItQtUsmUNqE3E5jGOE9dcVxb7cX
LGa7OSPUglBB7NAYwYZZ3JPZ/kpKnZf+QdjABRPpujey1wzfxJoi/N2RLjspMAHz
t+8gs0ES8Xan+CCItXBUb8tzvNx3d6CSfrVwuKhu52/4CqFgLOW6bZF5gpKVkxKw
5kQS4W2zA0fuPXfgFQ+omoi/mpz+aHCIv7dHJC6dvDl6FmMFPoE=
-----END CERTIFICATE-----
Generated at Wed Jun 4 01:19:11 2025 by rpki-client