Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/C-FpftUq7kbGoGDKBUENOUIC2Cs.roa
File: C-FpftUq7kbGoGDKBUENOUIC2Cs.roa (raw, json)
Hash identifier: C3tCvSriLAbwQv3b55v7TauQX+O/V5xBT0+Wa/WUlgA=
Subject key identifier: 0B:E1:69:7E:D5:2A:EE:46:C6:A0:60:CA:05:41:0D:39:42:02:D8:2B
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1C74
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/C-FpftUq7kbGoGDKBUENOUIC2Cs.roa
Signing time: Sat 14 Jun 2025 00:40:13 +0000
ROA not before: Sat 14 Jun 2025 00:40:13 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7284 (0x1c74)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 14 00:40:13 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=0BE1697ED52AEE46C6A060CA05410D394202D82B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:64:9d:7e:e7:31:99:b8:b6:77:7c:8d:e7:50:
e4:1d:85:b6:56:e6:25:97:9c:4a:5b:ae:a3:a0:53:
a0:f4:54:6d:5a:d6:5f:c1:55:e5:df:5f:b7:d8:0a:
be:cd:e5:36:8b:d1:69:0c:4e:2c:d8:e6:26:77:5a:
f6:b0:3c:cf:98:23:7b:f8:dc:c0:37:ca:3c:9c:f9:
cb:2d:f1:1f:f0:de:67:6b:81:60:19:fe:a9:03:b8:
ec:f3:12:67:cd:89:ab:d9:70:48:27:17:ce:55:73:
18:9f:ef:41:b5:51:15:05:d6:0d:65:0d:d3:6b:5d:
a9:25:f7:f8:f3:67:6c:87:e5:b0:bd:62:ab:c6:3e:
dd:6a:79:ad:c6:1a:e5:aa:31:cb:04:c6:05:68:0b:
23:ca:aa:44:dd:f5:08:2a:f9:95:f8:85:31:87:be:
da:cb:a9:5c:2d:07:d0:88:e3:bf:47:d4:79:19:3e:
92:d2:b3:f9:99:94:9b:d3:26:13:df:83:cc:e8:e5:
a8:8d:1b:6c:05:cc:c5:67:ff:cb:2a:3b:31:9d:a0:
a0:99:ef:dc:c0:98:34:56:c1:17:51:a6:1c:33:6e:
90:86:43:16:bf:86:62:56:c1:0d:d7:0e:dd:61:db:
96:00:28:3a:25:3a:4b:68:0e:a0:f5:a5:02:22:c3:
00:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:E1:69:7E:D5:2A:EE:46:C6:A0:60:CA:05:41:0D:39:42:02:D8:2B
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/C-FpftUq7kbGoGDKBUENOUIC2Cs.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
36:22:fc:4e:8a:df:03:34:15:c6:e8:64:33:c9:95:d9:28:de:
4e:ac:58:7d:b0:81:4f:13:f4:ea:44:9f:71:4a:42:3e:1b:f6:
10:5a:2e:7e:26:b1:58:fa:14:01:7b:8a:50:00:53:e2:aa:e1:
36:e5:08:f8:6d:b6:86:b1:e9:da:2a:1d:e3:73:fd:5c:f6:55:
4a:7c:d4:27:1f:63:ca:3a:4d:28:ca:ae:7a:db:09:28:18:5f:
c0:28:9e:45:5a:a2:1d:28:76:2f:f6:fb:90:dd:fb:9c:9e:8a:
a0:2b:a3:70:dc:d4:1e:36:68:38:35:b1:09:ab:6a:54:84:39:
72:41:8d:e1:a2:d6:3c:1c:53:02:6a:8c:d4:c2:aa:82:90:f9:
e9:ed:32:3c:13:55:86:c9:22:14:a2:57:43:fb:42:42:ae:93:
11:0d:b5:df:c4:32:6c:c0:25:a5:0a:cc:87:d8:94:2f:da:ea:
c8:3a:9d:4e:7a:88:b1:05:28:d7:cd:e4:e2:7a:1e:98:b6:91:
0d:32:8f:18:69:ec:3e:16:5b:e6:4b:5c:55:3f:c7:25:26:de:
74:b0:e7:d5:87:1e:5b:62:80:68:99:ee:fd:91:f4:72:fb:e7:
6f:92:d9:0c:26:15:d0:e5:73:ce:54:f7:d5:2d:1a:a6:cd:85:
89:90:e9:9b
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICHHQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy
NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA2MTQw
MDQwMTNaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKDBCRTE2OTdFRDUyQUVF
NDZDNkEwNjBDQTA1NDEwRDM5NDIwMkQ4MkIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDpZJ1+5zGZuLZ3fI3nUOQdhbZW5iWXnEpbrqOgU6D0VG1a1l/B
VeXfX7fYCr7N5TaL0WkMTizY5iZ3WvawPM+YI3v43MA3yjyc+cst8R/w3mdrgWAZ
/qkDuOzzEmfNiavZcEgnF85Vcxif70G1URUF1g1lDdNrXakl9/jzZ2yH5bC9YqvG
Pt1qea3GGuWqMcsExgVoCyPKqkTd9Qgq+ZX4hTGHvtrLqVwtB9CI479H1HkZPpLS
s/mZlJvTJhPfg8zo5aiNG2wFzMVn/8sqOzGdoKCZ79zAmDRWwRdRphwzbpCGQxa/
hmJWwQ3XDt1h25YAKDolOktoDqD1pQIiwwCZAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUC+FpftUq7kbGoGDKBUENOUIC2CswHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK
ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv
TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni9DLUZwZnRVcTdrYkdvR0RL
QlVFTk9VSUMyQ3Mucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
fakwDQYJKoZIhvcNAQELBQADggEBADYi/E6K3wM0FcboZDPJldko3k6sWH2wgU8T
9OpEn3FKQj4b9hBaLn4msVj6FAF7ilAAU+Kq4TblCPhttoax6doqHeNz/Vz2VUp8
1CcfY8o6TSjKrnrbCSgYX8AonkVaoh0odi/2+5Dd+5yeiqAro3Dc1B42aDg1sQmr
alSEOXJBjeGi1jwcUwJqjNTCqoKQ+entMjwTVYbJIhSiV0P7QkKukxENtd/EMmzA
JaUKzIfYlC/a6sg6nU56iLEFKNfN5OJ6Hpi2kQ0yjxhp7D4WW+ZLXFU/xyUm3nSw
59WHHltigGiZ7v2R9HL752+S2QwmFdDlc85U99UtGqbNhYmQ6Zs=
-----END CERTIFICATE-----
Generated at Mon Jun 16 15:58:24 2025 by rpki-client