Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/Rcy-dG_hQCniwlgdM47fb6sCRsw.roa
File: Rcy-dG_hQCniwlgdM47fb6sCRsw.roa (raw, json)
Hash identifier: mKnBKo1hTBK8mDlSou3GnwGgpoAbKEUx7229lXmJB6Q=
Subject key identifier: 45:CC:BE:74:6F:E1:40:29:E2:C2:58:1D:33:8E:DF:6F:AB:02:46:CC
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 04C0
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/Rcy-dG_hQCniwlgdM47fb6sCRsw.roa
Signing time: Tue 13 May 2025 10:10:58 +0000
ROA not before: Tue 13 May 2025 10:10:58 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1216 (0x4c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 13 10:10:58 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=45CCBE746FE14029E2C2581D338EDF6FAB0246CC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:3b:85:8a:46:79:a5:11:77:07:96:2b:54:04:
d2:e0:cf:2a:d9:99:4c:02:62:60:5d:18:ef:df:58:
bb:23:e1:49:a9:b5:5e:b0:f4:4c:95:dc:97:63:9c:
4e:be:40:94:48:21:87:bd:a0:fd:82:21:a0:f3:89:
79:cf:eb:25:0f:84:54:77:25:d8:59:66:1a:01:ac:
f1:1f:60:07:46:67:59:15:5d:6c:67:44:d4:59:9d:
c5:2b:d1:3d:51:52:18:df:4e:ba:0f:8e:a0:fe:e7:
dd:cb:c9:83:99:9d:13:53:d0:c3:01:c2:cb:0a:86:
16:ad:b2:d6:3f:25:23:65:76:b0:fe:67:29:4b:10:
17:43:83:25:03:6b:1b:3d:25:09:64:33:95:79:d2:
57:29:b9:4c:34:24:1e:a9:a5:59:b6:38:d6:07:c1:
74:76:b9:5a:74:68:3c:4b:98:aa:c4:ad:60:7d:c5:
26:f6:81:57:ba:62:1a:b0:a3:1a:85:42:1c:1a:6c:
a2:92:d2:73:40:1c:c0:38:73:33:8a:16:5f:5f:f1:
67:21:2a:65:4c:de:71:60:85:82:af:15:46:47:a6:
0f:f6:e7:5a:2a:14:67:2c:dc:d2:51:f9:30:12:7e:
04:59:b7:d0:2c:36:d1:43:d3:a9:45:2d:e1:cb:20:
ba:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:CC:BE:74:6F:E1:40:29:E2:C2:58:1D:33:8E:DF:6F:AB:02:46:CC
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/Rcy-dG_hQCniwlgdM47fb6sCRsw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
18:1f:89:9a:68:ee:7c:ce:2d:ba:d9:57:10:b2:53:3e:78:a9:
2d:bd:37:5f:64:3e:ae:b6:40:b8:de:ce:e0:11:96:57:bc:c7:
c7:63:6b:e0:d1:65:55:7d:97:b6:c2:c2:ba:85:f2:5b:e8:d6:
ef:66:fb:92:33:67:fc:21:d4:98:29:6e:ef:46:a0:db:66:b7:
b4:34:59:79:fc:ba:c3:5f:50:d5:88:4e:c7:8c:e6:9e:93:5a:
7a:81:5f:a9:51:99:cd:d0:83:60:3f:41:e1:1c:2b:af:43:8b:
c9:0d:ef:a0:16:4d:b4:c9:29:c9:ca:f3:1e:db:7a:17:ce:f0:
30:71:2f:f8:76:68:1a:1a:e0:7b:0b:4c:ba:81:c8:13:25:12:
f4:19:32:e2:6f:18:da:f7:45:4c:f1:55:99:55:3d:0a:6b:5d:
c9:9c:79:59:94:cf:41:7a:ba:5b:fb:c7:a7:e5:73:5a:19:e1:
3c:fe:1d:e8:cd:e8:47:3e:d0:f2:45:a9:59:43:88:1c:ef:8d:
b3:3d:23:c4:34:25:c6:ce:ad:86:13:28:12:cc:5b:7d:65:ef:
d3:37:57:c6:33:11:8a:9a:dc:d6:9f:52:ad:e0:7b:4c:a8:a7:
17:0f:92:82:25:2e:d0:4e:0c:c1:3e:16:09:30:e7:a8:f2:ae:
6d:0e:a2:f8
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICBMAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy
NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA1MTMx
MDEwNThaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKDQ1Q0NCRTc0NkZFMTQw
MjlFMkMyNTgxRDMzOEVERjZGQUIwMjQ2Q0MwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDMO4WKRnmlEXcHlitUBNLgzyrZmUwCYmBdGO/fWLsj4UmptV6w
9EyV3JdjnE6+QJRIIYe9oP2CIaDziXnP6yUPhFR3JdhZZhoBrPEfYAdGZ1kVXWxn
RNRZncUr0T1RUhjfTroPjqD+593LyYOZnRNT0MMBwssKhhatstY/JSNldrD+ZylL
EBdDgyUDaxs9JQlkM5V50lcpuUw0JB6ppVm2ONYHwXR2uVp0aDxLmKrErWB9xSb2
gVe6YhqwoxqFQhwabKKS0nNAHMA4czOKFl9f8WchKmVM3nFghYKvFUZHpg/251oq
FGcs3NJR+TASfgRZt9AsNtFD06lFLeHLILrhAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQURcy+dG/hQCniwlgdM47fb6sCRswwHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK
ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv
TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni9SY3ktZEdfaFFDbml3bGdk
TTQ3ZmI2c0NSc3cucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
fakwDQYJKoZIhvcNAQELBQADggEBABgfiZpo7nzOLbrZVxCyUz54qS29N19kPq62
QLjezuARlle8x8dja+DRZVV9l7bCwrqF8lvo1u9m+5IzZ/wh1Jgpbu9GoNtmt7Q0
WXn8usNfUNWITseM5p6TWnqBX6lRmc3Qg2A/QeEcK69Di8kN76AWTbTJKcnK8x7b
ehfO8DBxL/h2aBoa4HsLTLqByBMlEvQZMuJvGNr3RUzxVZlVPQprXcmceVmUz0F6
ulv7x6flc1oZ4Tz+HejN6Ec+0PJFqVlDiBzvjbM9I8Q0JcbOrYYTKBLMW31l79M3
V8YzEYqa3NafUq3ge0yopxcPkoIlLtBODME+Fgkw56jyrm0Oovg=
-----END CERTIFICATE-----
Generated at Sun Jun 22 09:11:26 2025 by rpki-client