Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/q7ZV1UYGRYD6KyukbKf9eIy8jg4.roa
File: q7ZV1UYGRYD6KyukbKf9eIy8jg4.roa (raw, json)
Hash identifier: nupz2W2abO/VhgP0lVH35LfnQ364YpciYJGnD9TcqwY=
Subject key identifier: AB:B6:55:D5:46:06:45:80:FA:2B:2B:A4:6C:A7:FD:78:8C:BC:8E:0E
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1318
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/q7ZV1UYGRYD6KyukbKf9eIy8jg4.roa
Signing time: Sun 01 Jun 2025 13:09:30 +0000
ROA not before: Sun 01 Jun 2025 13:09:30 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4888 (0x1318)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 1 13:09:30 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=ABB655D546064580FA2B2BA46CA7FD788CBC8E0E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:b9:81:8a:cb:59:55:dc:5a:e8:17:ee:1c:e9:
6a:c7:fa:0c:c3:85:98:84:ac:6b:28:37:6c:cc:56:
59:3b:d6:71:7d:bf:57:4d:15:dc:ec:a9:c8:d3:3e:
f3:8d:29:1b:42:dd:35:7b:58:f5:47:8d:c5:2b:78:
0e:c4:01:0e:9e:ac:80:1f:01:61:63:9c:df:64:6d:
1e:00:da:f2:9b:50:75:93:71:a7:36:c3:07:2c:05:
ad:58:c0:ab:26:ea:7b:fa:7e:a0:d5:36:ca:55:e4:
b1:c0:29:98:67:7f:82:a2:89:00:7c:94:a3:f8:6c:
4b:34:39:49:6d:c2:8f:3d:9f:26:eb:6a:5e:23:85:
b6:5a:d5:8f:4e:96:e1:16:77:ab:af:19:06:fd:47:
45:5d:51:ed:11:f3:53:c7:f4:6e:7b:be:fe:7c:e1:
ed:b8:2c:58:1d:0c:ae:e2:f4:51:82:38:76:45:ac:
07:a2:ce:67:0f:d9:4b:32:21:d3:d1:37:dd:82:d7:
d5:dd:e8:5e:5b:c0:5f:7c:e3:06:50:81:cc:c9:44:
69:8e:14:2b:be:ca:18:ce:93:3a:b5:ea:b7:f1:66:
ab:ef:39:c6:1f:3a:26:c2:c0:e1:c4:5f:59:d9:9f:
72:22:f5:05:60:9b:1e:41:df:7b:bd:ca:77:45:4a:
53:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:B6:55:D5:46:06:45:80:FA:2B:2B:A4:6C:A7:FD:78:8C:BC:8E:0E
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/q7ZV1UYGRYD6KyukbKf9eIy8jg4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
4f:c3:da:05:18:09:c2:65:88:af:39:e8:30:f0:27:60:63:57:
86:5f:20:bf:7b:c5:a2:50:a6:be:14:d4:58:7d:10:34:13:c3:
10:f1:95:72:e7:56:24:c4:ca:38:d5:aa:63:f9:90:03:6e:26:
7a:0f:13:fb:2a:0b:44:78:33:78:02:50:68:18:2a:3a:72:9b:
9b:88:41:ce:29:82:30:2f:40:52:f0:02:f5:3b:ec:b5:9f:bf:
10:07:05:28:ae:57:b8:d1:58:e5:7b:fa:74:d3:74:e5:22:9b:
1f:30:0c:a6:87:4b:5a:88:81:ef:87:6c:09:04:84:4b:1c:75:
cb:2f:aa:8d:c5:bf:42:c8:41:0e:ac:2b:46:99:b8:38:cb:69:
0a:e6:af:c6:23:92:c6:85:65:44:e2:d0:80:e2:1d:e5:26:ec:
a8:f1:8a:ce:93:3f:16:95:c2:6e:3e:6f:1d:90:54:f4:99:d9:
f6:14:51:cc:4b:9c:c8:c8:10:3e:16:42:ae:f3:71:91:e2:95:
80:e8:b1:19:4f:ad:c6:2b:85:0e:20:da:4b:9c:93:7f:2d:24:
d2:62:c9:b1:8a:7a:c7:c6:d2:dd:c2:fe:81:17:88:58:19:8b:
76:81:db:31:b5:d8:5f:f0:75:48:c0:11:4e:44:61:eb:76:4c:
30:f7:c1:26
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICExgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy
NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA2MDEx
MzA5MzBaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKEFCQjY1NUQ1NDYwNjQ1
ODBGQTJCMkJBNDZDQTdGRDc4OENCQzhFMEUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDJuYGKy1lV3FroF+4c6WrH+gzDhZiErGsoN2zMVlk71nF9v1dN
FdzsqcjTPvONKRtC3TV7WPVHjcUreA7EAQ6erIAfAWFjnN9kbR4A2vKbUHWTcac2
wwcsBa1YwKsm6nv6fqDVNspV5LHAKZhnf4KiiQB8lKP4bEs0OUltwo89nybral4j
hbZa1Y9OluEWd6uvGQb9R0VdUe0R81PH9G57vv584e24LFgdDK7i9FGCOHZFrAei
zmcP2UsyIdPRN92C19Xd6F5bwF984wZQgczJRGmOFCu+yhjOkzq16rfxZqvvOcYf
OibCwOHEX1nZn3Ii9QVgmx5B33u9yndFSlPlAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUq7ZV1UYGRYD6KyukbKf9eIy8jg4wHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK
ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv
TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni9xN1pWMVVZR1JZRDZLeXVr
YktmOWVJeThqZzQucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
fakwDQYJKoZIhvcNAQELBQADggEBAE/D2gUYCcJliK856DDwJ2BjV4ZfIL97xaJQ
pr4U1Fh9EDQTwxDxlXLnViTEyjjVqmP5kANuJnoPE/sqC0R4M3gCUGgYKjpym5uI
Qc4pgjAvQFLwAvU77LWfvxAHBSiuV7jRWOV7+nTTdOUimx8wDKaHS1qIge+HbAkE
hEscdcsvqo3Fv0LIQQ6sK0aZuDjLaQrmr8YjksaFZUTi0IDiHeUm7Kjxis6TPxaV
wm4+bx2QVPSZ2fYUUcxLnMjIED4WQq7zcZHilYDosRlPrcYrhQ4g2kuck38tJNJi
ybGKesfG0t3C/oEXiFgZi3aB2zG12F/wdUjAEU5EYet2TDD3wSY=
-----END CERTIFICATE-----
Generated at Thu Jun 5 20:39:09 2025 by rpki-client