Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/WcsGmJWECOQVof4byGnnhryO3SE.roa
File: WcsGmJWECOQVof4byGnnhryO3SE.roa (raw, json)
Hash identifier: 1CA7X1+xFN9/LMiMSMp/BKcEcsyWT+61rEo+mh+UvJI=
Subject key identifier: 59:CB:06:98:95:84:08:E4:15:A1:FE:1B:C8:69:E7:86:BC:8E:DD:21
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1988
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/WcsGmJWECOQVof4byGnnhryO3SE.roa
Signing time: Tue 10 Jun 2025 03:09:40 +0000
ROA not before: Tue 10 Jun 2025 03:09:40 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6536 (0x1988)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 10 03:09:40 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=59CB0698958408E415A1FE1BC869E786BC8EDD21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:05:20:d7:42:e0:1d:56:af:6c:7a:2a:1b:28:
e6:bf:73:d6:90:ff:48:d1:8e:82:a9:5f:db:2a:d4:
d4:27:fe:82:30:db:32:ad:87:e1:d9:b8:6f:71:e4:
3d:24:3c:5c:2a:54:02:d1:04:b0:25:d3:57:6b:cd:
b9:87:0e:92:19:13:a1:b4:ba:83:d3:f5:59:55:ef:
83:a3:52:c8:3c:5c:46:f3:46:c8:e1:81:ca:35:c8:
34:4e:3b:34:69:d3:d2:78:17:04:d0:57:84:10:c7:
57:9f:2e:38:58:81:61:db:62:90:a2:66:3b:26:56:
69:8a:e6:3c:42:9f:6f:b5:ee:7b:30:18:1f:27:59:
b7:7b:63:2f:31:3a:a8:72:7d:69:b5:e4:45:fe:82:
22:50:93:a3:b1:54:92:9c:00:69:a1:47:ec:85:60:
86:22:a0:bf:14:72:90:33:18:ad:ea:8e:32:17:92:
d3:f6:4e:0a:df:a0:48:ed:0a:e9:5e:12:c2:b6:bd:
a9:a1:78:93:cd:01:f9:a7:df:cd:76:cc:96:a9:b5:
d1:66:e5:01:d7:44:a5:67:07:4c:ea:f8:06:05:d2:
53:65:05:d5:2f:c7:68:c2:6e:f9:b5:16:ee:f2:58:
78:2d:35:2f:cf:de:35:10:3b:73:2e:b6:4f:40:2e:
36:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:CB:06:98:95:84:08:E4:15:A1:FE:1B:C8:69:E7:86:BC:8E:DD:21
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/WcsGmJWECOQVof4byGnnhryO3SE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
9d:ec:2e:2b:70:68:d4:b0:49:7d:bf:26:96:b4:11:99:e5:27:
1e:c6:f8:f6:d2:08:c5:79:a3:9e:b1:af:4c:a9:7d:1e:94:5b:
6e:8c:29:bc:64:60:e0:9a:bd:58:97:f3:15:fd:67:78:fc:1a:
c5:df:86:5f:2d:2a:0c:27:c3:f3:76:a2:d1:28:17:ba:7c:21:
ec:8f:a6:b5:e2:f2:fe:e8:3f:4b:be:d2:fd:d5:6e:ec:cc:fb:
fd:30:50:fe:28:5c:14:20:8c:dd:08:be:72:a9:4f:29:8a:7a:
37:ed:22:a0:03:1f:29:5a:1e:86:b7:ea:c8:53:94:e1:da:88:
f2:e2:b9:79:1c:15:e1:e3:9b:c1:df:13:89:ed:12:6b:b8:75:
67:e9:23:ae:27:95:93:b6:76:83:25:18:5e:87:56:69:ad:97:
08:af:a4:da:11:d1:86:aa:28:33:28:93:64:88:81:40:99:03:
7a:c2:06:6c:f7:bf:a5:88:83:8d:d6:4f:fd:25:bd:63:af:dd:
2c:1d:23:28:b1:d8:9a:6c:15:5e:d9:0c:0a:e1:ca:c9:70:74:
9b:26:3e:88:93:da:5b:6e:ad:56:95:5c:b4:50:fb:13:9e:5f:
27:28:c2:79:83:f9:08:5e:f6:c1:74:e1:57:94:1f:12:47:e3:
a3:d7:29:98
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICGYgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy
NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA2MTAw
MzA5NDBaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKDU5Q0IwNjk4OTU4NDA4
RTQxNUExRkUxQkM4NjlFNzg2QkM4RUREMjEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC5BSDXQuAdVq9seiobKOa/c9aQ/0jRjoKpX9sq1NQn/oIw2zKt
h+HZuG9x5D0kPFwqVALRBLAl01drzbmHDpIZE6G0uoPT9VlV74OjUsg8XEbzRsjh
gco1yDROOzRp09J4FwTQV4QQx1efLjhYgWHbYpCiZjsmVmmK5jxCn2+17nswGB8n
Wbd7Yy8xOqhyfWm15EX+giJQk6OxVJKcAGmhR+yFYIYioL8UcpAzGK3qjjIXktP2
TgrfoEjtCuleEsK2vamheJPNAfmn3812zJaptdFm5QHXRKVnB0zq+AYF0lNlBdUv
x2jCbvm1Fu7yWHgtNS/P3jUQO3Mutk9ALjbdAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUWcsGmJWECOQVof4byGnnhryO3SEwHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK
ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv
TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni9XY3NHbUpXRUNPUVZvZjRi
eUdubmhyeU8zU0Uucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
fakwDQYJKoZIhvcNAQELBQADggEBAJ3sLitwaNSwSX2/Jpa0EZnlJx7G+PbSCMV5
o56xr0ypfR6UW26MKbxkYOCavViX8xX9Z3j8GsXfhl8tKgwnw/N2otEoF7p8IeyP
prXi8v7oP0u+0v3VbuzM+/0wUP4oXBQgjN0IvnKpTymKejftIqADHylaHoa36shT
lOHaiPLiuXkcFeHjm8HfE4ntEmu4dWfpI64nlZO2doMlGF6HVmmtlwivpNoR0Yaq
KDMok2SIgUCZA3rCBmz3v6WIg43WT/0lvWOv3SwdIyix2JpsFV7ZDArhyslwdJsm
PoiT2lturVaVXLRQ+xOeXycownmD+Qhe9sF04VeUHxJH46PXKZg=
-----END CERTIFICATE-----
Generated at Sat Jun 21 13:36:37 2025 by rpki-client