Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/DTWHuP6qDi2LoUtCWLRhelX193A.roa
File: DTWHuP6qDi2LoUtCWLRhelX193A.roa (raw, json)
Hash identifier: r1QaefLydhY3HcP4ga8nbMUeOJkyYL7qhUe4jENiQNI=
Subject key identifier: 0D:35:87:B8:FE:AA:0E:2D:8B:A1:4B:42:58:B4:61:7A:55:F5:F7:70
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 18F4
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/DTWHuP6qDi2LoUtCWLRhelX193A.roa
Signing time: Mon 09 Jun 2025 08:39:45 +0000
ROA not before: Mon 09 Jun 2025 08:39:45 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6388 (0x18f4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 9 08:39:45 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=0D3587B8FEAA0E2D8BA14B4258B4617A55F5F770
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:79:3e:e9:0c:45:d9:a5:c7:e2:f5:bf:c9:02:
be:b8:26:3a:cf:b4:54:a0:f7:e5:77:4d:6a:72:f3:
8a:be:f8:2a:58:6c:17:01:19:ef:f1:cf:7e:f7:59:
3a:f2:1c:39:fa:08:b9:8a:8b:a8:d8:6c:ea:68:93:
45:2e:cf:86:b9:1d:d5:2e:bd:50:bc:58:f0:52:49:
c9:4c:31:be:47:bd:49:b5:bc:aa:fe:21:99:96:91:
a4:74:fb:0a:3e:d3:6f:3a:7b:a0:29:e0:34:98:71:
7f:2f:be:1c:50:1d:59:ee:e4:ae:80:90:bb:a3:31:
ea:e3:47:2a:49:ac:1a:db:3c:87:0a:38:8f:1a:80:
ff:29:43:12:2e:5c:7f:37:12:a8:ee:a9:33:e6:3f:
47:e9:07:66:e1:d4:9a:34:9e:40:8c:de:d6:91:52:
0c:49:6a:15:ab:75:55:88:f9:9d:79:85:4a:cf:f0:
7c:11:e3:2f:e6:40:86:6b:76:e6:d3:2c:8e:24:26:
1e:31:c8:12:4c:a4:e2:7e:29:f1:5e:e3:04:f3:ac:
28:f6:4a:a5:f9:07:27:4e:b3:97:2f:20:3b:00:6c:
08:a8:02:80:29:c3:79:5c:29:f0:c1:dd:7e:15:c4:
c9:9b:c9:dd:94:b8:18:45:23:9a:0c:93:58:bf:24:
fc:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:35:87:B8:FE:AA:0E:2D:8B:A1:4B:42:58:B4:61:7A:55:F5:F7:70
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/DTWHuP6qDi2LoUtCWLRhelX193A.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
ad:99:50:fd:6b:20:2a:64:b0:f8:e9:47:38:d8:36:73:50:90:
b2:1e:fb:66:3a:13:02:2e:10:30:33:b5:dd:c5:79:fe:b1:e8:
d3:9c:2f:38:e9:5b:44:a4:af:2e:57:df:27:b3:a9:c2:dc:d7:
70:a0:0a:47:f5:77:d7:a5:40:ea:d9:a3:88:af:f9:86:a2:23:
69:4c:68:4b:4f:92:9a:97:98:c9:83:53:de:95:b5:09:e4:7c:
df:e9:3e:12:e1:89:80:2e:46:e7:e9:a8:69:45:04:30:11:0f:
44:ce:07:d0:ce:b1:70:ad:f6:b4:35:f9:2c:7e:d1:b8:de:52:
7f:14:95:17:db:81:0b:69:dc:8d:ca:07:56:2c:2a:87:61:c7:
2a:4f:75:23:c5:74:04:5a:2f:c6:58:49:02:71:04:1e:25:23:
2a:b0:88:ba:df:ee:5a:ec:4c:e3:7b:d0:47:3e:93:e9:f7:f6:
0e:68:43:8d:df:0e:2a:e0:d9:00:23:96:71:a1:8b:ee:3f:a3:
b7:26:a5:cf:3d:13:ad:24:27:c1:1b:90:0f:ff:58:30:9e:27:
3e:42:83:19:09:32:b0:b7:6b:a4:c6:50:67:23:cc:10:a3:68:
02:e7:48:3b:f6:4d:c5:ad:c2:51:03:4a:68:5a:ad:fd:14:c2:
be:fe:d5:ec
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICGPQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy
NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA2MDkw
ODM5NDVaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKDBEMzU4N0I4RkVBQTBF
MkQ4QkExNEI0MjU4QjQ2MTdBNTVGNUY3NzAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQD8eT7pDEXZpcfi9b/JAr64JjrPtFSg9+V3TWpy84q++CpYbBcB
Ge/xz373WTryHDn6CLmKi6jYbOpok0Uuz4a5HdUuvVC8WPBSSclMMb5HvUm1vKr+
IZmWkaR0+wo+0286e6Ap4DSYcX8vvhxQHVnu5K6AkLujMerjRypJrBrbPIcKOI8a
gP8pQxIuXH83EqjuqTPmP0fpB2bh1Jo0nkCM3taRUgxJahWrdVWI+Z15hUrP8HwR
4y/mQIZrdubTLI4kJh4xyBJMpOJ+KfFe4wTzrCj2SqX5BydOs5cvIDsAbAioAoAp
w3lcKfDB3X4VxMmbyd2UuBhFI5oMk1i/JPydAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUDTWHuP6qDi2LoUtCWLRhelX193AwHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK
ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv
TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni9EVFdIdVA2cURpMkxvVXRD
V0xSaGVsWDE5M0Eucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
fakwDQYJKoZIhvcNAQELBQADggEBAK2ZUP1rICpksPjpRzjYNnNQkLIe+2Y6EwIu
EDAztd3Fef6x6NOcLzjpW0Skry5X3yezqcLc13CgCkf1d9elQOrZo4iv+YaiI2lM
aEtPkpqXmMmDU96VtQnkfN/pPhLhiYAuRufpqGlFBDARD0TOB9DOsXCt9rQ1+Sx+
0bjeUn8UlRfbgQtp3I3KB1YsKodhxypPdSPFdARaL8ZYSQJxBB4lIyqwiLrf7lrs
TON70Ec+k+n39g5oQ43fDirg2QAjlnGhi+4/o7cmpc89E60kJ8EbkA//WDCeJz5C
gxkJMrC3a6TGUGcjzBCjaALnSDv2TcWtwlEDSmharf0Uwr7+1ew=
-----END CERTIFICATE-----
Generated at Sun Jun 22 01:46:56 2025 by rpki-client