Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/INP_5kyMnVxZNcFYSmEB6ggBdDY.roa
File: INP_5kyMnVxZNcFYSmEB6ggBdDY.roa (raw, json)
Hash identifier: rZuQD4OhPyMaHGSqUFcQQwbSCzHY52Le7lR5/PaLhGc=
Subject key identifier: 20:D3:FF:E6:4C:8C:9D:5C:59:35:C1:58:4A:61:01:EA:08:01:74:36
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1730
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/INP_5kyMnVxZNcFYSmEB6ggBdDY.roa
Signing time: Sat 07 Jun 2025 00:09:27 +0000
ROA not before: Sat 07 Jun 2025 00:09:27 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5936 (0x1730)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 7 00:09:27 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=20D3FFE64C8C9D5C5935C1584A6101EA08017436
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:8a:25:39:10:0b:7b:c5:8f:cf:7b:21:1b:b8:
25:c3:d7:61:2a:3d:64:7c:74:ce:34:1d:f4:cb:56:
cd:94:59:ab:8d:30:a0:4d:d5:36:78:0d:ed:23:f0:
fe:1a:cd:0d:e7:a9:15:f2:87:37:eb:a3:db:04:4f:
52:cc:6d:d9:a3:c9:33:59:0c:5e:7c:f0:7b:a5:e8:
10:6b:0d:c2:d3:d2:9e:50:c6:4d:c2:42:69:4b:be:
cc:a1:f8:a6:a7:7e:33:6c:8b:61:c0:11:42:02:d7:
3e:a6:e5:c9:67:2d:e2:21:d1:72:d5:3e:f9:2b:be:
c8:10:96:8e:a0:f3:05:ab:eb:9e:67:f9:24:67:74:
78:ca:52:fc:f5:6f:10:46:da:3a:03:bc:ca:fc:b9:
5e:2a:f9:dc:ac:f8:65:a9:89:ec:de:8e:00:0c:fe:
d9:b5:a8:c3:de:d1:09:38:dd:a3:a1:5a:07:2e:16:
62:a4:c1:30:d2:83:b5:c7:10:6a:94:87:8a:42:3d:
df:64:b6:73:37:20:2d:f2:b9:f4:2a:3d:85:97:7a:
49:f4:6c:a3:fc:d5:d6:80:ac:36:dd:08:b7:f6:be:
6a:4e:97:9e:4f:97:9e:01:a6:d4:75:9f:69:a0:c6:
77:fa:de:18:da:a3:23:c1:39:3d:37:f6:57:8c:9c:
c4:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:D3:FF:E6:4C:8C:9D:5C:59:35:C1:58:4A:61:01:EA:08:01:74:36
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/INP_5kyMnVxZNcFYSmEB6ggBdDY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
99:24:ae:fe:e4:07:50:c8:98:80:6a:18:cc:41:03:83:92:4c:
c4:bd:65:3f:3f:8e:b4:9b:d7:ee:0a:0f:13:79:da:ed:a6:99:
bf:fa:2b:59:98:6b:2f:58:89:14:44:f7:54:8c:12:21:47:86:
ae:23:80:f1:5f:73:97:a2:c3:13:d7:2c:41:d0:19:f7:24:92:
55:e3:cf:d7:62:ca:5a:07:6d:a9:f7:81:b0:60:e3:96:d8:fb:
c2:ce:b3:57:13:f6:9e:db:7c:ce:83:e1:de:fe:a5:bc:ab:60:
73:a3:f8:1f:e5:e6:98:7b:93:8e:82:90:3e:b2:b2:fb:47:bc:
6a:e3:2a:1c:d2:97:39:dc:0b:d9:d5:0b:84:bc:21:48:74:1c:
08:7b:05:5a:a6:19:9a:60:90:34:dc:05:9e:b8:ca:25:e5:4d:
f7:ea:e1:37:f4:10:a5:38:5f:4b:0d:d7:4e:15:8b:01:a6:c8:
f2:c4:ed:05:7e:39:85:33:8f:6f:70:e8:f3:0a:39:4d:4f:13:
89:60:2d:8a:ca:be:a0:97:29:7e:ad:57:39:e2:3b:9e:90:7b:
28:43:dd:fe:24:81:61:a3:83:9e:16:66:3f:f2:bd:a5:e9:78:
08:d7:b4:1d:63:1e:62:af:a0:a1:f9:86:47:a1:e8:de:38:5a:
1a:e6:d6:b7
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICFzAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy
NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA2MDcw
MDA5MjdaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKDIwRDNGRkU2NEM4QzlE
NUM1OTM1QzE1ODRBNjEwMUVBMDgwMTc0MzYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDXiiU5EAt7xY/PeyEbuCXD12EqPWR8dM40HfTLVs2UWauNMKBN
1TZ4De0j8P4azQ3nqRXyhzfro9sET1LMbdmjyTNZDF588Hul6BBrDcLT0p5Qxk3C
QmlLvsyh+KanfjNsi2HAEUIC1z6m5clnLeIh0XLVPvkrvsgQlo6g8wWr655n+SRn
dHjKUvz1bxBG2joDvMr8uV4q+dys+GWpiezejgAM/tm1qMPe0Qk43aOhWgcuFmKk
wTDSg7XHEGqUh4pCPd9ktnM3IC3yufQqPYWXekn0bKP81daArDbdCLf2vmpOl55P
l54BptR1n2mgxnf63hjaoyPBOT039leMnMRTAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUINP/5kyMnVxZNcFYSmEB6ggBdDYwHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK
ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv
TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni9JTlBfNWt5TW5WeFpOY0ZZ
U21FQjZnZ0JkRFkucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
fakwDQYJKoZIhvcNAQELBQADggEBAJkkrv7kB1DImIBqGMxBA4OSTMS9ZT8/jrSb
1+4KDxN52u2mmb/6K1mYay9YiRRE91SMEiFHhq4jgPFfc5eiwxPXLEHQGfckklXj
z9diyloHban3gbBg45bY+8LOs1cT9p7bfM6D4d7+pbyrYHOj+B/l5ph7k46CkD6y
svtHvGrjKhzSlzncC9nVC4S8IUh0HAh7BVqmGZpgkDTcBZ64yiXlTffq4Tf0EKU4
X0sN104ViwGmyPLE7QV+OYUzj29w6PMKOU1PE4lgLYrKvqCXKX6tVzniO56QeyhD
3f4kgWGjg54WZj/yvaXpeAjXtB1jHmKvoKH5hkeh6N44Whrm1rc=
-----END CERTIFICATE-----
Generated at Sun Jun 22 09:13:30 2025 by rpki-client