Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/e2rxl3r0q95o7y1SjK6-TA6e4j8.roa
File: e2rxl3r0q95o7y1SjK6-TA6e4j8.roa (raw, json)
Hash identifier: yisvj2Zs4guIoWPYOQDpmmoz4BJnj8WrnOMtYyQHRfE=
Subject key identifier: 7B:6A:F1:97:7A:F4:AB:DE:68:EF:2D:52:8C:AE:BE:4C:0E:9E:E2:3F
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 180C
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/e2rxl3r0q95o7y1SjK6-TA6e4j8.roa
Signing time: Sun 08 Jun 2025 03:39:37 +0000
ROA not before: Sun 08 Jun 2025 03:39:37 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6156 (0x180c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 8 03:39:37 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=7B6AF1977AF4ABDE68EF2D528CAEBE4C0E9EE23F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:67:0a:1b:23:f7:ac:9a:ab:c6:c7:dc:ec:7a:
df:e7:ab:a5:8f:c9:63:e6:1a:fc:76:1b:4f:38:92:
d0:bd:37:17:33:28:b7:1f:8d:24:1a:ee:5e:a2:1d:
40:d7:79:c8:47:55:a8:8f:97:57:f8:f5:90:9d:e8:
f7:05:6b:c0:3e:fe:d5:9a:29:f5:b5:7e:bc:12:f8:
f9:18:d9:15:87:c0:89:a7:09:6e:fc:af:09:cc:fd:
0b:85:4a:df:5e:26:64:85:fa:95:13:ea:9b:80:2f:
73:3c:41:87:50:eb:29:27:a9:53:0d:4a:bc:3a:b1:
62:70:54:e9:08:9a:42:63:f0:38:d3:de:ca:0b:b3:
0c:fc:75:98:4e:a4:a8:b5:4a:dc:66:a0:44:e8:9a:
cd:98:b8:a2:b9:13:98:98:58:40:d3:05:2c:5e:f9:
78:26:8e:d6:66:b9:0f:b9:2d:f6:7d:18:a2:24:88:
8e:e6:56:e9:6b:39:f3:47:91:8c:33:2d:9e:12:d6:
9b:b9:f0:74:b4:70:66:c1:d7:b4:2f:67:aa:07:8b:
86:3d:c6:4d:19:20:2c:b2:34:63:5a:0d:1e:2e:ae:
e5:fb:65:e8:a4:5f:3c:11:ff:6b:2c:38:72:5e:b4:
20:1f:e5:76:80:b1:07:1d:99:4b:68:a2:b1:52:ed:
0a:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:6A:F1:97:7A:F4:AB:DE:68:EF:2D:52:8C:AE:BE:4C:0E:9E:E2:3F
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/e2rxl3r0q95o7y1SjK6-TA6e4j8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
95:a6:d6:13:0e:7c:89:4f:3b:0e:6f:4e:58:71:1c:ec:e7:ad:
49:1e:3e:d3:83:d0:21:60:00:2c:06:34:8f:06:86:16:6f:41:
05:c5:57:47:39:a4:3c:63:36:8d:8a:4d:6f:7c:9d:a0:e2:63:
93:1b:51:0e:b7:39:c6:21:09:7e:88:41:92:66:c9:4f:a1:90:
09:48:3d:61:ff:85:4d:28:9b:7c:5b:a6:ac:2e:d1:1e:b1:e0:
75:eb:a6:09:5a:6d:24:41:26:bb:a7:c4:0a:93:23:62:c9:e4:
1f:11:0f:4d:f8:77:7d:8b:1e:62:d8:06:f6:f2:fa:23:1c:5a:
5a:71:96:c9:e5:9a:ac:4d:b2:02:88:70:0b:05:b4:54:d6:35:
37:84:fa:9a:cf:e9:69:83:2c:de:a3:0b:2c:d9:2c:4b:7b:32:
b1:b8:6b:50:cf:94:14:d4:8e:1c:a4:89:04:d1:39:21:ad:e6:
69:19:64:7e:82:2a:96:e0:e0:8d:96:70:96:aa:25:b5:18:27:
a9:87:56:69:c5:6d:f5:8f:12:ba:d8:d0:e2:20:a4:ec:cf:65:
bd:db:9d:69:ef:05:b2:cc:d6:8c:01:bb:44:b8:a9:69:a4:f7:
da:7e:d0:ec:83:a2:ce:e4:6a:af:24:9e:d8:6e:f3:c6:86:47:
ac:c1:15:47
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICGAwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy
NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA2MDgw
MzM5MzdaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKDdCNkFGMTk3N0FGNEFC
REU2OEVGMkQ1MjhDQUVCRTRDMEU5RUUyM0YwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC9ZwobI/esmqvGx9zset/nq6WPyWPmGvx2G084ktC9NxczKLcf
jSQa7l6iHUDXechHVaiPl1f49ZCd6PcFa8A+/tWaKfW1frwS+PkY2RWHwImnCW78
rwnM/QuFSt9eJmSF+pUT6puAL3M8QYdQ6yknqVMNSrw6sWJwVOkImkJj8DjT3soL
swz8dZhOpKi1StxmoEToms2YuKK5E5iYWEDTBSxe+XgmjtZmuQ+5LfZ9GKIkiI7m
VulrOfNHkYwzLZ4S1pu58HS0cGbB17QvZ6oHi4Y9xk0ZICyyNGNaDR4uruX7Zeik
XzwR/2ssOHJetCAf5XaAsQcdmUtoorFS7Qp1AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUe2rxl3r0q95o7y1SjK6+TA6e4j8wHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK
ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv
TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni9lMnJ4bDNyMHE5NW83eTFT
aks2LVRBNmU0ajgucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
fakwDQYJKoZIhvcNAQELBQADggEBAJWm1hMOfIlPOw5vTlhxHOznrUkePtOD0CFg
ACwGNI8GhhZvQQXFV0c5pDxjNo2KTW98naDiY5MbUQ63OcYhCX6IQZJmyU+hkAlI
PWH/hU0om3xbpqwu0R6x4HXrpglabSRBJrunxAqTI2LJ5B8RD034d32LHmLYBvby
+iMcWlpxlsnlmqxNsgKIcAsFtFTWNTeE+prP6WmDLN6jCyzZLEt7MrG4a1DPlBTU
jhykiQTROSGt5mkZZH6CKpbg4I2WcJaqJbUYJ6mHVmnFbfWPErrY0OIgpOzPZb3b
nWnvBbLM1owBu0S4qWmk99p+0OyDos7kaq8knthu88aGR6zBFUc=
-----END CERTIFICATE-----
Generated at Sun Jun 22 22:36:35 2025 by rpki-client