Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/EAvmycb2HMsdBKwJpht13BTvecQ.roa
File: EAvmycb2HMsdBKwJpht13BTvecQ.roa (raw, json)
Hash identifier: mmR7vZCdryGwpFoxcPfNzRcDxydt+nn8Syf5s0YGpco=
Subject key identifier: 10:0B:E6:C9:C6:F6:1C:CB:1D:04:AC:09:A6:1B:75:DC:14:EF:79:C4
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0464
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/EAvmycb2HMsdBKwJpht13BTvecQ.roa
Signing time: Mon 12 May 2025 22:37:58 +0000
ROA not before: Mon 12 May 2025 22:37:58 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1124 (0x464)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 12 22:37:58 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=100BE6C9C6F61CCB1D04AC09A61B75DC14EF79C4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:84:a5:50:2d:6c:a5:f4:c3:2b:1f:94:ee:6d:
a7:be:ce:c0:42:ee:ca:2e:76:dc:ef:6e:53:2c:cb:
af:e9:16:49:d5:1c:f8:64:ac:c8:12:d4:d3:da:4b:
bd:81:9e:29:1a:4d:db:ae:f6:cd:81:19:94:8e:52:
f6:05:4e:46:f9:1e:d8:4b:6a:95:62:8a:09:eb:3f:
e2:77:fa:c7:be:53:28:a2:c0:a7:07:4f:ee:3d:49:
fe:18:9d:4f:fd:2e:00:62:ce:18:92:97:c6:ce:1a:
b7:81:37:06:2a:39:e7:46:25:30:ff:a2:4d:95:74:
32:9d:1e:02:49:90:d2:45:f5:a7:5c:bb:01:04:04:
a4:68:2a:ef:87:bb:65:d3:54:0e:f9:1f:42:61:ec:
af:e4:db:25:8c:c1:da:68:c6:fa:2d:43:06:00:23:
98:91:a8:22:04:0c:cd:07:c8:d5:49:84:21:a6:48:
42:de:d5:8b:b5:7e:3f:2a:1f:06:e1:6c:59:a9:c2:
8b:ca:7d:48:1f:24:2f:e0:1e:e5:87:0e:4c:db:3c:
bd:bf:c9:c9:6d:fa:a8:3c:70:d8:92:8d:f9:12:6e:
7c:ce:8a:06:7f:a4:3c:b8:f0:01:89:1f:c9:a5:bd:
31:1f:21:ea:74:5a:06:8a:ad:8d:57:8f:1e:3c:8d:
14:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:0B:E6:C9:C6:F6:1C:CB:1D:04:AC:09:A6:1B:75:DC:14:EF:79:C4
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/EAvmycb2HMsdBKwJpht13BTvecQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
77:0c:ec:8e:e6:78:92:0e:5e:8a:db:16:d0:2e:7b:43:62:b1:
42:e3:82:03:eb:b4:42:05:84:aa:99:4f:d1:9f:b8:61:30:b4:
1a:4d:bc:5c:b4:b2:e6:0a:ae:f4:10:c7:2c:4e:ac:6e:fb:55:
d9:04:5a:0b:44:44:be:a6:68:c0:c0:a9:c4:6d:20:be:eb:d4:
02:3b:ff:b0:c5:40:8d:72:cc:e3:b7:f8:60:0a:59:df:ee:d3:
e7:7e:ff:e7:82:a2:28:75:90:e9:10:a3:c7:84:34:e9:04:79:
c0:5d:41:9f:0b:2d:37:e9:0f:b4:de:73:74:51:c6:42:ce:fd:
47:36:b2:6a:07:67:7a:50:1e:45:c4:11:6c:2a:3e:26:f3:d5:
20:26:d9:c9:de:18:ee:4b:58:b0:b6:a8:4e:e0:61:b7:50:d0:
b6:fd:fe:04:73:cc:2a:f1:70:54:72:65:83:ca:32:f0:a1:fa:
cf:46:2b:9c:bf:f9:ce:9d:c6:5f:fe:19:de:fe:f7:45:40:9d:
57:26:8b:38:5e:a7:91:c3:7b:e1:52:6a:75:57:ed:7b:88:8e:
a2:5e:4a:70:15:92:3a:16:87:b5:73:f0:af:d5:4c:6d:45:27:
4d:f8:2a:de:b1:2e:70:df:c0:fe:92:88:6b:8e:ed:ec:74:72:
e6:a5:9e:7b
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICBGQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy
NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA1MTIy
MjM3NThaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKDEwMEJFNkM5QzZGNjFD
Q0IxRDA0QUMwOUE2MUI3NURDMTRFRjc5QzQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCphKVQLWyl9MMrH5Tubae+zsBC7soudtzvblMsy6/pFknVHPhk
rMgS1NPaS72BnikaTduu9s2BGZSOUvYFTkb5HthLapViignrP+J3+se+UyiiwKcH
T+49Sf4YnU/9LgBizhiSl8bOGreBNwYqOedGJTD/ok2VdDKdHgJJkNJF9adcuwEE
BKRoKu+Hu2XTVA75H0Jh7K/k2yWMwdpoxvotQwYAI5iRqCIEDM0HyNVJhCGmSELe
1Yu1fj8qHwbhbFmpwovKfUgfJC/gHuWHDkzbPL2/yclt+qg8cNiSjfkSbnzOigZ/
pDy48AGJH8mlvTEfIep0WgaKrY1Xjx48jRQVAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUEAvmycb2HMsdBKwJpht13BTvecQwHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK
ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv
TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni9FQXZteWNiMkhNc2RCS3dK
cGh0MTNCVHZlY1Eucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
fakwDQYJKoZIhvcNAQELBQADggEBAHcM7I7meJIOXorbFtAue0NisULjggPrtEIF
hKqZT9GfuGEwtBpNvFy0suYKrvQQxyxOrG77VdkEWgtERL6maMDAqcRtIL7r1AI7
/7DFQI1yzOO3+GAKWd/u0+d+/+eCoih1kOkQo8eENOkEecBdQZ8LLTfpD7Tec3RR
xkLO/Uc2smoHZ3pQHkXEEWwqPibz1SAm2cneGO5LWLC2qE7gYbdQ0Lb9/gRzzCrx
cFRyZYPKMvCh+s9GK5y/+c6dxl/+Gd7+90VAnVcmizhep5HDe+FSanVX7XuIjqJe
SnAVkjoWh7Vz8K/VTG1FJ034Kt6xLnDfwP6SiGuO7ex0cualnns=
-----END CERTIFICATE-----
Generated at Sat Jun 21 21:19:19 2025 by rpki-client