Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/F859XYBFqV2UQszOLrgWTau8Jcc.roa
File: F859XYBFqV2UQszOLrgWTau8Jcc.roa (raw, json)
Hash identifier: ld9kZumwQBqWuOO7UoviOGu8adBr+DKHZuxk8FClM6I=
Subject key identifier: 17:CE:7D:5D:80:45:A9:5D:94:42:CC:CE:2E:B8:16:4D:AB:BC:25:C7
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 08D4
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/F859XYBFqV2UQszOLrgWTau8Jcc.roa
Signing time: Sun 18 May 2025 20:38:07 +0000
ROA not before: Sun 18 May 2025 20:38:07 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2260 (0x8d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 18 20:38:07 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=17CE7D5D8045A95D9442CCCE2EB8164DABBC25C7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:83:50:0e:33:ce:d4:86:bd:7f:33:e6:13:81:
f3:7c:4f:2e:a4:c2:dc:f4:ac:c3:7d:87:52:0c:78:
68:e5:cf:de:9a:c6:5f:0f:79:08:b7:5c:4e:05:e0:
18:79:fc:e8:f1:14:d7:29:82:a5:3d:69:29:1a:bd:
e8:de:1e:69:e1:65:0b:fb:89:23:0d:50:d8:5e:d3:
bf:6a:c1:28:39:80:c3:26:1b:f6:29:93:74:79:2e:
ac:e6:c6:8f:5c:ce:55:2b:96:e9:02:0a:de:b4:e8:
d7:db:88:74:d3:db:3c:b9:80:15:87:6e:58:3b:4b:
63:d8:27:18:f7:43:4d:55:56:41:9e:ab:17:25:4e:
83:ce:de:04:92:83:ab:94:0a:85:c2:fe:10:6c:55:
30:2d:58:d7:c8:73:d4:a0:5d:00:12:3e:9b:62:49:
49:ac:e6:43:b8:de:2c:17:2a:0b:b3:a8:ae:f3:6d:
b6:45:33:0e:6d:c0:07:b5:67:c4:59:62:58:9a:d1:
29:20:5d:62:87:42:7a:d1:1f:3c:84:dc:c2:21:c5:
1f:7b:fb:05:6d:5a:2f:c0:73:c8:b7:c3:64:48:2d:
7c:4b:6b:fb:64:15:66:88:93:ee:e0:af:0d:c4:bc:
d0:3d:3e:c8:7c:ac:c3:a5:32:46:2a:2d:dd:14:a9:
fb:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:CE:7D:5D:80:45:A9:5D:94:42:CC:CE:2E:B8:16:4D:AB:BC:25:C7
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/F859XYBFqV2UQszOLrgWTau8Jcc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
18:85:a8:af:31:8c:60:a9:4e:fd:2d:8a:da:37:04:89:c5:e4:
85:47:81:2e:30:d6:9a:c0:7e:24:5c:dc:19:a7:78:d9:79:d1:
47:e9:1a:9b:aa:6b:3c:36:d7:9e:0c:d0:73:dd:32:18:88:3d:
11:df:0a:51:59:e6:44:cd:95:b3:24:6e:69:0d:a3:b8:a3:43:
66:d4:bc:59:cd:57:c6:d3:eb:1e:ec:9c:d9:47:6f:54:95:11:
2c:7e:00:b9:9d:93:5c:f9:b6:77:aa:ab:61:d3:07:4b:80:b2:
e5:3f:37:69:03:e6:2b:38:30:1d:ee:7a:1f:c8:0d:68:12:f7:
29:9f:6b:1a:e1:1b:d7:46:91:63:13:0f:ba:1d:18:ef:40:96:
e2:35:de:2e:94:1f:aa:0a:da:eb:49:72:d5:b3:3c:03:9a:4a:
97:5f:6e:41:7f:dd:05:31:ff:65:dc:44:4f:bd:f9:53:2e:a0:
f9:0e:ae:ad:83:98:50:d9:10:1b:61:8f:df:69:c0:29:ec:77:
11:ca:c3:01:c8:1d:41:59:40:02:b5:a4:5a:c3:47:59:6d:e9:
eb:4a:e7:c2:d6:cb:97:07:12:b7:4c:d0:d2:ba:c4:ad:eb:67:
7a:cc:03:1f:5d:27:fa:d7:63:a3:39:83:cb:06:25:70:db:99:
3a:1a:17:95
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICCNQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy
NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA1MTgy
MDM4MDdaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKDE3Q0U3RDVEODA0NUE5
NUQ5NDQyQ0NDRTJFQjgxNjREQUJCQzI1QzcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCzg1AOM87Uhr1/M+YTgfN8Ty6kwtz0rMN9h1IMeGjlz96axl8P
eQi3XE4F4Bh5/OjxFNcpgqU9aSkavejeHmnhZQv7iSMNUNhe079qwSg5gMMmG/Yp
k3R5Lqzmxo9czlUrlukCCt606NfbiHTT2zy5gBWHblg7S2PYJxj3Q01VVkGeqxcl
ToPO3gSSg6uUCoXC/hBsVTAtWNfIc9SgXQASPptiSUms5kO43iwXKguzqK7zbbZF
Mw5twAe1Z8RZYlia0SkgXWKHQnrRHzyE3MIhxR97+wVtWi/Ac8i3w2RILXxLa/tk
FWaIk+7grw3EvNA9Psh8rMOlMkYqLd0UqftLAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUF859XYBFqV2UQszOLrgWTau8JccwHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK
ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv
TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni9GODU5WFlCRnFWMlVRc3pP
THJnV1RhdThKY2Mucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
fakwDQYJKoZIhvcNAQELBQADggEBABiFqK8xjGCpTv0tito3BInF5IVHgS4w1prA
fiRc3BmneNl50UfpGpuqazw2154M0HPdMhiIPRHfClFZ5kTNlbMkbmkNo7ijQ2bU
vFnNV8bT6x7snNlHb1SVESx+ALmdk1z5tneqq2HTB0uAsuU/N2kD5is4MB3ueh/I
DWgS9ymfaxrhG9dGkWMTD7odGO9AluI13i6UH6oK2utJctWzPAOaSpdfbkF/3QUx
/2XcRE+9+VMuoPkOrq2DmFDZEBthj99pwCnsdxHKwwHIHUFZQAK1pFrDR1lt6etK
58LWy5cHErdM0NK6xK3rZ3rMAx9dJ/rXY6M5g8sGJXDbmToaF5U=
-----END CERTIFICATE-----
Generated at Sat Jun 21 16:51:10 2025 by rpki-client