Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/zbx-qnMyMGB4o-nJFvNXkUDaF3c.roa
File: zbx-qnMyMGB4o-nJFvNXkUDaF3c.roa (raw, json)
Hash identifier: KlHOMV6Fdav60sjV+1nS7PG3Zw5bAm3rXDFJyB1vfCE=
Subject key identifier: CD:BC:7E:AA:73:32:30:60:78:A3:E9:C9:16:F3:57:91:40:DA:17:77
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1504
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/zbx-qnMyMGB4o-nJFvNXkUDaF3c.roa
Signing time: Wed 04 Jun 2025 02:39:19 +0000
ROA not before: Wed 04 Jun 2025 02:39:19 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5380 (0x1504)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 4 02:39:19 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=CDBC7EAA7332306078A3E9C916F3579140DA1777
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:81:8b:fc:9c:66:c0:ee:25:ae:3f:92:00:fd:
a5:7d:e5:a3:46:6e:3a:d8:e9:1d:5b:c5:83:2e:c5:
81:fc:b7:56:29:20:4c:49:33:fb:c8:da:7d:9e:c3:
8c:76:de:f4:e8:7f:95:69:d7:1d:02:65:8c:c9:a7:
20:9b:4d:a7:cf:90:cd:36:cb:95:17:e2:65:af:8d:
c9:fe:de:64:ea:41:ef:7c:2d:a6:1c:a3:ce:b4:c1:
5e:b2:8a:97:87:56:cd:3a:39:8a:3b:16:4a:41:ae:
de:a1:f7:ea:b1:1d:74:0c:b4:40:2f:74:86:fa:f7:
e7:e5:0a:3f:96:67:6c:cf:1a:64:f3:94:10:02:89:
2c:c2:10:2a:03:d3:ed:3a:95:e1:2c:02:b7:f6:80:
95:70:9f:23:81:b0:a7:93:60:90:c5:b2:8a:c0:1c:
70:47:4f:fd:93:74:df:29:fa:33:35:1f:a2:cc:18:
36:48:70:63:c9:21:e3:51:18:6e:27:ca:23:7b:ec:
00:04:96:2e:53:17:a7:d5:f2:81:7c:8c:28:88:ed:
b2:ca:b2:d7:36:fc:25:94:32:ff:01:47:98:de:8b:
5a:d3:a0:4c:ba:03:26:1e:7b:e4:03:25:e3:a6:55:
7b:3a:cd:fe:4a:c1:ae:c0:b9:d5:2b:0b:85:25:fd:
c7:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:BC:7E:AA:73:32:30:60:78:A3:E9:C9:16:F3:57:91:40:DA:17:77
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/zbx-qnMyMGB4o-nJFvNXkUDaF3c.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
1f:6b:52:e3:5d:94:1f:a3:52:7e:bb:80:2d:25:78:be:bb:70:
5b:16:14:ac:83:79:84:7f:fb:ff:dc:83:25:bb:f2:dd:f4:69:
7a:dc:82:ee:fd:a1:9a:8f:53:65:35:68:44:9b:55:46:91:4e:
28:4d:11:c8:69:5e:f0:0d:15:e3:cd:75:87:fb:73:2d:d4:51:
e2:c0:64:ad:75:34:99:f3:e0:38:49:e3:b7:6b:9a:d0:75:0d:
05:f1:c1:39:d6:3b:f6:28:eb:db:ee:93:46:9c:0f:61:41:46:
bb:85:92:b5:be:4e:38:8d:be:76:86:e5:a5:ec:c8:87:2a:38:
4b:12:53:92:2e:15:d5:2b:0b:3d:0b:04:eb:6f:08:cf:91:d7:
e7:52:e0:59:c1:9d:1a:07:3d:9e:c2:4e:8e:a8:67:92:d0:ac:
9d:f9:87:df:b0:3e:40:8e:c0:00:04:04:db:fe:d9:fd:e4:ef:
9d:80:12:e8:5b:d9:b7:48:f6:d8:70:7c:56:c1:ab:f1:09:f1:
4a:76:cd:2f:95:8b:91:d6:03:b4:f5:53:27:ed:37:53:fd:65:
eb:02:3e:f5:91:54:42:bc:b8:78:a5:98:70:39:31:cf:4d:c7:
49:62:62:62:ac:43:70:98:a6:a1:85:ae:e9:46:5c:e0:52:5c:
6f:f2:89:e3
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICFQQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy
NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA2MDQw
MjM5MTlaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKENEQkM3RUFBNzMzMjMw
NjA3OEEzRTlDOTE2RjM1NzkxNDBEQTE3NzcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDfgYv8nGbA7iWuP5IA/aV95aNGbjrY6R1bxYMuxYH8t1YpIExJ
M/vI2n2ew4x23vTof5Vp1x0CZYzJpyCbTafPkM02y5UX4mWvjcn+3mTqQe98LaYc
o860wV6yipeHVs06OYo7FkpBrt6h9+qxHXQMtEAvdIb69+flCj+WZ2zPGmTzlBAC
iSzCECoD0+06leEsArf2gJVwnyOBsKeTYJDFsorAHHBHT/2TdN8p+jM1H6LMGDZI
cGPJIeNRGG4nyiN77AAEli5TF6fV8oF8jCiI7bLKstc2/CWUMv8BR5jei1rToEy6
AyYee+QDJeOmVXs6zf5Kwa7AudUrC4Ul/cdZAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUzbx+qnMyMGB4o+nJFvNXkUDaF3cwHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK
ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv
TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni96YngtcW5NeU1HQjRvLW5K
RnZOWGtVRGFGM2Mucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
fakwDQYJKoZIhvcNAQELBQADggEBAB9rUuNdlB+jUn67gC0leL67cFsWFKyDeYR/
+//cgyW78t30aXrcgu79oZqPU2U1aESbVUaRTihNEchpXvANFePNdYf7cy3UUeLA
ZK11NJnz4DhJ47drmtB1DQXxwTnWO/Yo69vuk0acD2FBRruFkrW+TjiNvnaG5aXs
yIcqOEsSU5IuFdUrCz0LBOtvCM+R1+dS4FnBnRoHPZ7CTo6oZ5LQrJ35h9+wPkCO
wAAEBNv+2f3k752AEuhb2bdI9thwfFbBq/EJ8Up2zS+Vi5HWA7T1UyftN1P9ZesC
PvWRVEK8uHilmHA5Mc9Nx0liYmKsQ3CYpqGFrulGXOBSXG/yieM=
-----END CERTIFICATE-----
Generated at Sun Jul 20 12:45:39 2025 by rpki-client