Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/PFecLaoYP6rFHRsabOarbpDuTgA.roa
File: PFecLaoYP6rFHRsabOarbpDuTgA.roa (raw, json)
Hash identifier: taqPWQRMpYWvrtpJyatlDT56qk0TdATfTRVa9Q6apxk=
Subject key identifier: 3C:57:9C:2D:AA:18:3F:AA:C5:1D:1B:1A:6C:E6:AB:6E:90:EE:4E:00
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0E04
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/PFecLaoYP6rFHRsabOarbpDuTgA.roa
Signing time: Sun 25 May 2025 18:38:35 +0000
ROA not before: Sun 25 May 2025 18:38:35 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3588 (0xe04)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 25 18:38:35 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=3C579C2DAA183FAAC51D1B1A6CE6AB6E90EE4E00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:dd:76:98:3b:f4:18:96:e0:57:fa:4b:15:d8:
26:9d:aa:33:be:22:f9:a5:c6:47:dc:bb:c6:28:27:
17:e8:1c:b3:6b:1a:9d:5d:05:56:c2:e2:a8:d0:97:
4d:74:63:f2:a7:2b:1f:d6:0b:58:e0:84:97:22:42:
b9:51:9f:e1:49:08:b4:49:28:02:60:28:0d:f0:68:
c1:fe:9c:19:a0:5c:9d:51:09:7a:f2:0a:b7:5f:ac:
23:66:22:9f:9e:4e:b1:89:39:b6:8a:bb:5e:ea:aa:
3b:18:aa:8f:45:82:5a:61:9b:32:9e:c9:23:5a:08:
82:2d:88:15:9e:a2:13:bc:1b:b9:d3:9f:32:23:be:
90:8e:6d:5a:e5:7b:52:0d:ef:73:d3:e2:87:1b:1f:
cc:23:40:de:a2:f6:02:0b:1c:8a:d2:bf:87:57:4d:
33:55:68:22:b2:e2:b9:ac:76:ba:dc:bd:1e:c0:5c:
90:76:90:35:43:05:fb:b6:5c:26:1b:f9:92:7b:80:
83:ad:54:75:14:c3:3f:0e:ea:3d:45:6b:a4:98:b8:
58:60:fb:55:cf:26:2c:dc:23:be:aa:0b:95:79:fb:
ac:c1:3f:57:17:7d:90:72:7f:db:b6:95:25:fc:fd:
c2:ab:f9:49:30:da:6a:3e:7b:bb:6b:78:b5:fa:77:
0f:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:57:9C:2D:AA:18:3F:AA:C5:1D:1B:1A:6C:E6:AB:6E:90:EE:4E:00
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/PFecLaoYP6rFHRsabOarbpDuTgA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
95:88:ea:d6:e6:85:d4:e5:bc:63:37:d0:30:0d:4f:d8:98:bb:
eb:40:22:97:08:54:8e:ee:5a:05:f5:93:18:e8:2d:e1:19:ab:
ea:46:89:8e:7e:b4:6f:a7:a6:0f:8f:14:83:4d:88:4a:e9:e0:
09:f1:87:5a:fd:5d:aa:83:db:d2:c3:f3:fa:21:5c:ea:4f:83:
ac:56:08:d4:ce:da:70:24:10:a2:66:66:6e:1f:3d:89:55:22:
c1:9c:ac:37:4c:22:7e:ee:c8:ca:ea:5c:f0:24:06:91:d8:e5:
65:67:11:99:fe:35:ac:ef:87:6a:7c:cd:36:07:28:cd:8d:df:
bb:08:94:f4:a6:5b:e4:42:20:28:08:2a:9e:25:41:17:87:e9:
c6:cb:7d:aa:90:cf:07:34:21:e0:1e:06:61:d9:f8:fc:0f:e5:
16:a3:d7:81:73:97:4d:8b:d2:55:0e:1f:ec:b8:0d:fb:8e:9e:
86:16:8e:13:3b:70:ca:0b:72:b4:9e:ff:a3:e6:d0:b1:83:9b:
5a:18:bd:a3:40:7b:00:de:45:63:d2:8c:c8:4c:de:ed:90:27:
90:17:d9:68:5e:a8:a3:50:36:25:24:b8:c0:02:20:ae:64:22:
dc:c0:1c:9d:7c:cf:f5:f2:27:04:76:83:a7:c6:af:fe:03:5c:
d2:7f:b1:e9
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICDgQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy
NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA1MjUx
ODM4MzVaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKDNDNTc5QzJEQUExODNG
QUFDNTFEMUIxQTZDRTZBQjZFOTBFRTRFMDAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCg3XaYO/QYluBX+ksV2CadqjO+Ivmlxkfcu8YoJxfoHLNrGp1d
BVbC4qjQl010Y/KnKx/WC1jghJciQrlRn+FJCLRJKAJgKA3waMH+nBmgXJ1RCXry
CrdfrCNmIp+eTrGJObaKu17qqjsYqo9FglphmzKeySNaCIItiBWeohO8G7nTnzIj
vpCObVrle1IN73PT4ocbH8wjQN6i9gILHIrSv4dXTTNVaCKy4rmsdrrcvR7AXJB2
kDVDBfu2XCYb+ZJ7gIOtVHUUwz8O6j1Fa6SYuFhg+1XPJizcI76qC5V5+6zBP1cX
fZByf9u2lSX8/cKr+Ukw2mo+e7treLX6dw+TAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUPFecLaoYP6rFHRsabOarbpDuTgAwHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK
ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv
TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni9QRmVjTGFvWVA2ckZIUnNh
Yk9hcmJwRHVUZ0Eucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
fakwDQYJKoZIhvcNAQELBQADggEBAJWI6tbmhdTlvGM30DANT9iYu+tAIpcIVI7u
WgX1kxjoLeEZq+pGiY5+tG+npg+PFINNiErp4Anxh1r9XaqD29LD8/ohXOpPg6xW
CNTO2nAkEKJmZm4fPYlVIsGcrDdMIn7uyMrqXPAkBpHY5WVnEZn+Nazvh2p8zTYH
KM2N37sIlPSmW+RCICgIKp4lQReH6cbLfaqQzwc0IeAeBmHZ+PwP5Raj14Fzl02L
0lUOH+y4DfuOnoYWjhM7cMoLcrSe/6Pm0LGDm1oYvaNAewDeRWPSjMhM3u2QJ5AX
2WheqKNQNiUkuMACIK5kItzAHJ18z/XyJwR2g6fGr/4DXNJ/sek=
-----END CERTIFICATE-----
Generated at Sun Jun 22 02:30:57 2025 by rpki-client