Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/xp5IKMfW_5NCxY3BgXg2TTnt-PA.roa
File: xp5IKMfW_5NCxY3BgXg2TTnt-PA.roa (raw, json)
Hash identifier: 8VgGSxwRoVCvWspTgKFd5n/zT6DTrTyQGXM68+4pVSs=
Subject key identifier: C6:9E:48:28:C7:D6:FF:93:42:C5:8D:C1:81:78:36:4D:39:ED:F8:F0
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1EDC
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/xp5IKMfW_5NCxY3BgXg2TTnt-PA.roa
Signing time: Tue 17 Jun 2025 05:40:03 +0000
ROA not before: Tue 17 Jun 2025 05:40:03 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7900 (0x1edc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 17 05:40:03 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=C69E4828C7D6FF9342C58DC18178364D39EDF8F0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:bb:43:50:ee:cd:b1:59:bc:b5:05:aa:57:5a:
cc:b0:c5:6a:db:00:f1:ee:72:7f:fd:26:2a:92:ed:
37:70:98:bb:ee:a8:ea:91:99:af:57:40:1b:43:80:
9e:62:62:7b:95:7f:e8:06:34:59:f1:66:7e:d6:02:
1c:28:da:da:13:73:3d:ef:bf:09:81:b6:dc:99:67:
7f:eb:fd:50:79:c3:99:3f:80:8e:af:7e:36:38:be:
95:11:41:1b:36:01:09:5a:dd:91:c3:19:29:3d:c0:
5c:30:0b:07:03:23:4d:9f:00:e2:87:37:ec:bf:9c:
5e:58:3c:4c:2c:a6:a8:3c:08:51:8e:73:c4:ca:a7:
51:39:5c:66:8b:05:88:29:d0:a4:c7:bd:97:72:bc:
66:15:5e:df:42:e2:af:9c:15:56:35:60:11:38:02:
87:73:53:63:ec:5c:87:ce:55:27:a5:0f:62:85:f6:
00:7a:ea:a6:c4:32:f1:36:c5:b8:38:8c:c1:eb:96:
c5:53:2a:33:af:8f:67:49:c8:3f:6e:2b:4f:e2:19:
98:c9:ac:92:97:cb:00:51:47:a2:c5:6e:03:ec:b0:
9a:e8:8f:1d:d3:3e:9f:07:79:2d:aa:b8:72:82:c9:
0c:82:ce:a7:d8:0c:42:ff:50:1a:55:e5:cc:9b:4b:
4e:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:9E:48:28:C7:D6:FF:93:42:C5:8D:C1:81:78:36:4D:39:ED:F8:F0
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/xp5IKMfW_5NCxY3BgXg2TTnt-PA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
01:96:a0:b6:9c:6e:55:4e:6c:0f:7d:57:01:a2:3a:1d:1e:5b:
5c:a3:53:a4:e6:a3:b1:78:a7:36:a1:59:06:a9:0e:96:dc:b9:
00:a9:31:e9:9e:c5:40:34:86:9d:5a:24:fb:ca:54:5c:26:63:
62:e8:5d:c1:8e:5f:96:b7:86:39:4b:7d:ea:24:9a:f2:14:d0:
2f:f3:9b:c1:79:fb:56:d6:9c:62:06:a8:87:73:e3:95:2c:f3:
c6:20:b8:96:50:2c:41:9a:7a:03:6c:fb:7d:71:d7:de:3f:e4:
ba:18:a8:8b:b4:11:e9:d7:34:3e:ed:c4:c7:91:71:ce:af:2d:
9d:92:84:6c:19:b3:dc:c0:08:90:19:ad:24:7d:e9:e4:54:7a:
b3:b4:f6:3b:25:10:95:51:3a:93:00:01:25:4e:82:cf:41:60:
ac:c1:4e:48:db:be:ab:0c:34:46:27:32:b5:7e:2f:00:ed:31:
cd:c2:ab:ca:dc:bf:c2:06:f7:94:a4:75:be:43:fa:70:29:0c:
84:48:07:7a:40:1a:ff:3a:eb:8e:ed:5f:2d:5e:f7:01:f2:1c:
42:35:d3:d6:97:02:5f:d9:57:0e:c3:2f:d0:14:bc:59:35:66:
fd:11:1d:46:96:ab:12:54:ce:7b:dd:71:90:5a:3b:92:33:f8:
ce:3f:d7:39
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICHtwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy
NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA2MTcw
NTQwMDNaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKEM2OUU0ODI4QzdENkZG
OTM0MkM1OERDMTgxNzgzNjREMzlFREY4RjAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCou0NQ7s2xWby1BapXWsywxWrbAPHucn/9JiqS7TdwmLvuqOqR
ma9XQBtDgJ5iYnuVf+gGNFnxZn7WAhwo2toTcz3vvwmBttyZZ3/r/VB5w5k/gI6v
fjY4vpURQRs2AQla3ZHDGSk9wFwwCwcDI02fAOKHN+y/nF5YPEwspqg8CFGOc8TK
p1E5XGaLBYgp0KTHvZdyvGYVXt9C4q+cFVY1YBE4AodzU2PsXIfOVSelD2KF9gB6
6qbEMvE2xbg4jMHrlsVTKjOvj2dJyD9uK0/iGZjJrJKXywBRR6LFbgPssJrojx3T
Pp8HeS2quHKCyQyCzqfYDEL/UBpV5cybS07vAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUxp5IKMfW/5NCxY3BgXg2TTnt+PAwHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK
ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv
TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni94cDVJS01mV181TkN4WTNC
Z1hnMlRUbnQtUEEucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
fakwDQYJKoZIhvcNAQELBQADggEBAAGWoLacblVObA99VwGiOh0eW1yjU6Tmo7F4
pzahWQapDpbcuQCpMemexUA0hp1aJPvKVFwmY2LoXcGOX5a3hjlLfeokmvIU0C/z
m8F5+1bWnGIGqIdz45Us88YguJZQLEGaegNs+31x194/5LoYqIu0EenXND7txMeR
cc6vLZ2ShGwZs9zACJAZrSR96eRUerO09jslEJVROpMAASVOgs9BYKzBTkjbvqsM
NEYnMrV+LwDtMc3Cq8rcv8IG95Skdb5D+nApDIRIB3pAGv86647tXy1e9wHyHEI1
09aXAl/ZVw7DL9AUvFk1Zv0RHUaWqxJUznvdcZBaO5Iz+M4/1zk=
-----END CERTIFICATE-----
Generated at Sun Jul 20 12:52:22 2025 by rpki-client