Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/F5IAwUh1IyxUdGVFXlkIzjznC6k.roa
File: F5IAwUh1IyxUdGVFXlkIzjznC6k.roa (raw, json)
Hash identifier: vJGE7ErwmOzY+iGlZOvjFuHdiFjWCpt80L46P+fnkAU=
Subject key identifier: 17:92:00:C1:48:75:23:2C:54:74:65:45:5E:59:08:CE:3C:E7:0B:A9
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1CF4
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/F5IAwUh1IyxUdGVFXlkIzjznC6k.roa
Signing time: Sat 14 Jun 2025 16:39:55 +0000
ROA not before: Sat 14 Jun 2025 16:39:55 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7412 (0x1cf4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 14 16:39:55 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=179200C14875232C547465455E5908CE3CE70BA9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:12:66:45:f6:fd:33:2f:76:2d:53:58:27:8f:
50:f2:8b:74:5f:2c:bb:e1:0a:fb:47:a6:93:d5:25:
31:a0:4d:09:15:ad:8d:1c:2d:1c:06:f6:4a:2c:ea:
5c:f4:46:81:2a:80:5f:4c:01:90:a5:8f:4b:da:26:
fa:54:e2:ea:40:5e:89:a2:71:34:3f:da:d4:8e:71:
73:3e:ae:52:28:df:46:7b:2c:7c:20:91:f1:82:3d:
b7:2c:48:09:78:8c:d4:e3:48:7f:46:6a:f3:ba:29:
64:94:25:98:13:94:62:df:03:e2:93:c2:0a:14:91:
40:e8:8f:a8:8c:c6:ce:b5:ca:97:37:5a:39:29:50:
b4:89:10:0e:bc:e7:ae:87:dc:f4:db:80:de:60:03:
f2:68:18:08:b6:09:f1:01:85:74:39:71:72:32:6b:
66:c8:71:e9:d0:1f:40:d9:fc:99:ce:49:3f:91:6c:
33:0d:81:d3:da:51:a0:93:a5:73:74:d9:dd:c1:17:
8e:3d:25:50:e8:2c:b0:bb:c5:12:09:d0:4a:43:c8:
1c:ad:70:a8:cd:9c:6a:8d:34:4c:a6:66:ed:f8:5f:
6d:25:6e:eb:d9:e7:44:e0:17:dd:f7:88:17:0f:df:
92:20:d2:76:15:b9:93:f5:2b:a7:21:a8:f9:11:1f:
7d:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:92:00:C1:48:75:23:2C:54:74:65:45:5E:59:08:CE:3C:E7:0B:A9
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/F5IAwUh1IyxUdGVFXlkIzjznC6k.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
82:91:f6:f4:d7:eb:79:a1:d8:88:89:51:e8:92:04:28:97:40:
af:c6:45:15:6e:46:45:29:19:07:5f:97:bb:33:5f:dc:bd:ec:
00:12:e5:53:ae:d3:25:d8:ee:c4:06:a6:17:90:bc:1b:3d:1c:
c0:55:06:29:b9:9e:31:32:5f:ed:8a:b4:2d:d2:ae:b5:22:d7:
64:02:78:a9:57:75:c5:79:83:7a:11:fe:79:9e:90:12:e6:3c:
e8:7a:b6:b1:f4:ad:4b:bf:64:5d:c4:d3:c6:9e:30:a2:e4:0f:
87:73:48:8f:ff:bb:c3:d5:74:d1:72:66:9d:9f:5a:02:76:73:
6e:e8:c1:de:8d:6b:47:a9:b7:ce:6f:5a:48:4f:e1:61:75:d6:
86:d9:08:45:8e:73:8e:8f:08:8e:ec:f6:26:ea:59:22:e3:6f:
15:8b:15:1a:2e:5c:e6:5a:4d:61:d7:00:3a:71:d9:60:7c:87:
30:58:f0:40:98:94:4d:55:5e:cd:16:e8:0e:c4:9f:bc:21:7e:
68:cd:42:e3:61:31:58:3a:ba:47:fa:69:d3:a7:1a:03:92:29:
04:71:7e:4e:f0:73:37:c8:de:e0:d2:7c:31:25:ca:4b:06:40:
1f:28:9e:f3:44:8a:43:e8:cf:ef:e0:b6:d0:f7:3b:74:26:86:
01:46:6e:86
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICHPQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy
NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA2MTQx
NjM5NTVaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKDE3OTIwMEMxNDg3NTIz
MkM1NDc0NjU0NTVFNTkwOENFM0NFNzBCQTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCrEmZF9v0zL3YtU1gnj1Dyi3RfLLvhCvtHppPVJTGgTQkVrY0c
LRwG9kos6lz0RoEqgF9MAZClj0vaJvpU4upAXomicTQ/2tSOcXM+rlIo30Z7LHwg
kfGCPbcsSAl4jNTjSH9GavO6KWSUJZgTlGLfA+KTwgoUkUDoj6iMxs61ypc3Wjkp
ULSJEA68566H3PTbgN5gA/JoGAi2CfEBhXQ5cXIya2bIcenQH0DZ/JnOST+RbDMN
gdPaUaCTpXN02d3BF449JVDoLLC7xRIJ0EpDyBytcKjNnGqNNEymZu34X20lbuvZ
50TgF933iBcP35Ig0nYVuZP1K6chqPkRH31lAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUF5IAwUh1IyxUdGVFXlkIzjznC6kwHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK
ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv
TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni9GNUlBd1VoMUl5eFVkR1ZG
WGxrSXpqem5DNmsucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
fakwDQYJKoZIhvcNAQELBQADggEBAIKR9vTX63mh2IiJUeiSBCiXQK/GRRVuRkUp
GQdfl7szX9y97AAS5VOu0yXY7sQGpheQvBs9HMBVBim5njEyX+2KtC3SrrUi12QC
eKlXdcV5g3oR/nmekBLmPOh6trH0rUu/ZF3E08aeMKLkD4dzSI//u8PVdNFyZp2f
WgJ2c27owd6Na0ept85vWkhP4WF11obZCEWOc46PCI7s9ibqWSLjbxWLFRouXOZa
TWHXADpx2WB8hzBY8ECYlE1VXs0W6A7En7whfmjNQuNhMVg6ukf6adOnGgOSKQRx
fk7wczfI3uDSfDElyksGQB8onvNEikPoz+/gttD3O3QmhgFGboY=
-----END CERTIFICATE-----
Generated at Sun Jun 22 01:03:51 2025 by rpki-client