Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/y_TFEmXGUPBYvgheDsx5cLQl5k4.roa
File: y_TFEmXGUPBYvgheDsx5cLQl5k4.roa (raw, json)
Hash identifier: UHKf25A+enGvPZpa9MMyvOt4mQSxJISkNABfrdvOwXc=
Subject key identifier: CB:F4:C5:12:65:C6:50:F0:58:BE:08:5E:0E:CC:79:70:B4:25:E6:4E
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0C78
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/y_TFEmXGUPBYvgheDsx5cLQl5k4.roa
Signing time: Fri 23 May 2025 17:08:27 +0000
ROA not before: Fri 23 May 2025 17:08:27 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3192 (0xc78)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 23 17:08:27 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=CBF4C51265C650F058BE085E0ECC7970B425E64E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e2:cd:88:d1:35:a6:37:8a:d7:dd:d3:e6:8d:
18:cf:00:66:2b:e8:b9:a9:51:76:19:83:0a:74:e2:
9e:fc:f4:11:6d:a1:0b:48:bb:f7:17:c9:cf:f1:50:
7d:25:94:ee:c6:84:2d:bd:f3:5b:1b:c4:a2:3d:b4:
10:44:32:0d:c5:07:44:c7:6d:62:10:ab:c9:2b:91:
0e:e2:a7:a6:00:93:a2:7c:d9:51:8d:4c:01:bb:d1:
bf:a7:2b:e3:7f:2b:1a:70:6a:1d:f7:ac:ca:f9:e2:
8b:fc:ba:62:b5:ea:dc:98:bf:06:b4:95:58:f2:59:
c2:bd:52:d3:49:bf:a0:db:df:01:95:39:69:2c:92:
da:a6:f6:00:d4:6a:52:2e:44:55:09:b1:47:31:3e:
3c:0f:c5:3a:e5:6c:dc:a9:2b:c6:46:c0:2f:92:40:
bc:93:e1:1a:28:60:42:93:f3:11:fb:d1:bd:d4:b4:
f1:d3:53:7c:9d:8f:0d:01:ce:e3:cb:a7:7f:df:3f:
55:b2:cc:7c:bd:cd:d0:51:1f:03:2e:d4:41:6b:b5:
82:00:af:f7:e4:e6:ec:40:6f:e7:30:fc:f4:2b:45:
0b:bd:0b:be:93:04:8d:05:99:69:85:3c:19:b5:52:
21:97:8f:56:e9:01:24:67:62:e2:8f:53:f4:2b:89:
9a:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:F4:C5:12:65:C6:50:F0:58:BE:08:5E:0E:CC:79:70:B4:25:E6:4E
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/y_TFEmXGUPBYvgheDsx5cLQl5k4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
57:12:7d:8b:d4:da:9d:d4:02:6c:ea:97:58:f0:39:15:63:f3:
dd:e9:02:71:d0:7b:38:09:29:67:04:68:71:a0:57:75:08:8d:
cb:0f:f0:69:8c:8b:f5:d6:2c:c4:73:78:b9:c0:62:36:91:de:
57:8f:96:54:82:0d:94:ef:9b:83:c9:12:5e:d3:38:5d:c4:31:
09:65:06:7f:84:ea:3b:25:07:82:3f:b7:10:a0:c7:e0:30:a2:
05:90:27:f2:14:0e:b0:95:77:17:ed:d8:83:24:19:29:ee:5c:
42:28:9b:aa:03:55:32:ef:11:ce:ca:72:ce:11:f5:2b:b4:bb:
92:25:56:63:2f:ba:f3:c1:2a:da:ef:02:fb:47:4c:ee:6c:13:
12:dc:81:9d:a5:49:ae:e1:f4:45:5e:c8:07:b6:61:84:09:cf:
7c:7e:30:27:fa:c7:0b:d4:e7:0d:44:54:95:a6:61:82:c8:86:
69:74:98:06:3b:d9:a1:17:82:61:f8:f7:06:51:9d:5c:52:d5:
c4:83:95:8b:0b:d1:6a:a4:66:e6:4f:95:de:8f:86:dc:ef:3b:
3f:e9:db:af:11:ee:38:43:01:41:0f:24:c2:10:7f:2e:7a:08:
fe:da:79:81:74:e6:2e:df:3a:84:38:30:e6:43:a2:ed:98:ad:
23:33:b7:13
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICDHgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy
NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA1MjMx
NzA4MjdaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKENCRjRDNTEyNjVDNjUw
RjA1OEJFMDg1RTBFQ0M3OTcwQjQyNUU2NEUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC54s2I0TWmN4rX3dPmjRjPAGYr6LmpUXYZgwp04p789BFtoQtI
u/cXyc/xUH0llO7GhC2981sbxKI9tBBEMg3FB0THbWIQq8krkQ7ip6YAk6J82VGN
TAG70b+nK+N/Kxpwah33rMr54ov8umK16tyYvwa0lVjyWcK9UtNJv6Db3wGVOWks
ktqm9gDUalIuRFUJsUcxPjwPxTrlbNypK8ZGwC+SQLyT4RooYEKT8xH70b3UtPHT
U3ydjw0BzuPLp3/fP1WyzHy9zdBRHwMu1EFrtYIAr/fk5uxAb+cw/PQrRQu9C76T
BI0FmWmFPBm1UiGXj1bpASRnYuKPU/QriZqhAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUy/TFEmXGUPBYvgheDsx5cLQl5k4wHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK
ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv
TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni95X1RGRW1YR1VQQll2Z2hl
RHN4NWNMUWw1azQucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
fakwDQYJKoZIhvcNAQELBQADggEBAFcSfYvU2p3UAmzql1jwORVj893pAnHQezgJ
KWcEaHGgV3UIjcsP8GmMi/XWLMRzeLnAYjaR3lePllSCDZTvm4PJEl7TOF3EMQll
Bn+E6jslB4I/txCgx+AwogWQJ/IUDrCVdxft2IMkGSnuXEIom6oDVTLvEc7Kcs4R
9Su0u5IlVmMvuvPBKtrvAvtHTO5sExLcgZ2lSa7h9EVeyAe2YYQJz3x+MCf6xwvU
5w1EVJWmYYLIhml0mAY72aEXgmH49wZRnVxS1cSDlYsL0WqkZuZPld6PhtzvOz/p
268R7jhDAUEPJMIQfy56CP7aeYF05i7fOoQ4MOZDou2YrSMztxM=
-----END CERTIFICATE-----
Generated at Wed Jun 4 01:12:20 2025 by rpki-client