Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/jaYfOYsOgZ18VHWHp2MSB34XcGo.roa
File: jaYfOYsOgZ18VHWHp2MSB34XcGo.roa (raw, json)
Hash identifier: pIVlvLYjvRXSHobHjCguh5DAtcmdG1lobflyC2SsnRA=
Subject key identifier: 8D:A6:1F:39:8B:0E:81:9D:7C:54:75:87:A7:63:12:07:7E:17:70:6A
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1470
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/jaYfOYsOgZ18VHWHp2MSB34XcGo.roa
Signing time: Tue 03 Jun 2025 08:09:15 +0000
ROA not before: Tue 03 Jun 2025 08:09:15 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5232 (0x1470)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 3 08:09:15 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=8DA61F398B0E819D7C547587A76312077E17706A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:88:5e:88:d1:8c:90:fa:68:d4:7a:8a:d4:1f:
3c:40:4c:a5:b4:15:07:cf:64:34:35:f4:2f:98:84:
b0:ac:98:b0:4a:76:57:b9:29:d8:2f:5b:65:fd:01:
48:ea:80:e3:5c:97:71:9e:81:2a:aa:5d:1a:a3:5b:
08:02:00:3c:58:b3:94:db:26:38:b7:e6:bd:8a:d7:
be:f2:18:ec:6f:8a:07:40:3d:a1:9d:1f:ee:4a:da:
a7:a5:eb:c6:e7:55:57:05:b0:84:36:47:80:83:66:
9e:78:8b:35:dc:d0:1a:71:cb:cd:2f:85:27:9f:72:
0b:65:98:0a:e6:0b:74:3e:92:2c:da:5a:02:6a:2d:
b7:8d:b5:20:f9:a0:1e:07:17:19:7c:25:e1:49:61:
96:a2:13:e0:21:a5:d5:24:52:24:13:b8:c6:00:59:
c1:cc:95:6d:8a:17:fc:20:5a:b4:9b:5c:ba:0f:19:
38:50:e9:a4:cc:b0:2b:97:b0:73:0a:94:9c:cb:f0:
44:33:7b:9a:ec:7f:c6:54:fb:68:78:d2:76:d7:f2:
f1:f4:b3:0a:4d:99:ca:2f:e2:b2:1c:4b:f8:0e:90:
c2:1e:e1:e9:eb:51:6a:b7:fc:f4:e2:10:35:fb:b7:
91:4a:b9:e6:2f:37:6d:6d:9c:09:35:65:ee:ce:eb:
06:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:A6:1F:39:8B:0E:81:9D:7C:54:75:87:A7:63:12:07:7E:17:70:6A
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/jaYfOYsOgZ18VHWHp2MSB34XcGo.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
72:68:e5:40:fc:23:2e:85:4e:d7:99:aa:f1:da:68:a6:14:45:
6a:dd:c8:a4:27:7c:e2:52:9d:e5:96:ea:27:cc:fb:39:18:a2:
59:25:2b:b4:37:40:27:51:9d:7b:22:88:c4:9c:96:db:4d:e8:
81:75:a2:90:d3:af:ac:77:5c:a9:a0:a5:85:00:ae:37:0e:c6:
f1:4e:d8:24:06:d5:56:9a:33:61:45:6b:4a:64:c2:25:1c:0b:
46:72:60:b5:3d:8d:07:06:a3:78:0f:b3:65:7e:24:1c:63:db:
83:4b:ad:ea:c3:f5:8c:a5:a0:87:5f:d9:07:e0:ac:4d:1d:e4:
21:68:18:c9:8b:64:44:8e:86:76:d1:d4:96:89:f6:91:ef:fb:
c5:35:a2:99:f6:85:f8:24:25:65:ba:cb:c3:e3:f8:ab:d1:10:
34:e8:8a:9e:ec:17:89:c2:40:2e:08:df:de:d4:92:83:38:46:
dd:2e:af:ab:ad:4e:10:dd:91:a0:a7:cd:b8:2c:c8:6d:54:d2:
8f:39:c7:85:e9:b8:33:4e:42:3d:6b:e0:e6:4d:60:10:da:88:
17:f6:de:1f:d8:ae:ea:17:6c:90:08:8d:6f:6e:ea:1b:69:d9:
d3:eb:66:05:da:0e:ea:ff:6a:6a:bd:5b:b9:75:a8:cb:e5:b1:
87:65:b5:83
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICFHAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy
NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA2MDMw
ODA5MTVaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKDhEQTYxRjM5OEIwRTgx
OUQ3QzU0NzU4N0E3NjMxMjA3N0UxNzcwNkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDjiF6I0YyQ+mjUeorUHzxATKW0FQfPZDQ19C+YhLCsmLBKdle5
KdgvW2X9AUjqgONcl3GegSqqXRqjWwgCADxYs5TbJji35r2K177yGOxvigdAPaGd
H+5K2qel68bnVVcFsIQ2R4CDZp54izXc0Bpxy80vhSefcgtlmArmC3Q+kizaWgJq
LbeNtSD5oB4HFxl8JeFJYZaiE+AhpdUkUiQTuMYAWcHMlW2KF/wgWrSbXLoPGThQ
6aTMsCuXsHMKlJzL8EQze5rsf8ZU+2h40nbX8vH0swpNmcov4rIcS/gOkMIe4enr
UWq3/PTiEDX7t5FKueYvN21tnAk1Ze7O6wYDAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUjaYfOYsOgZ18VHWHp2MSB34XcGowHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK
ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv
TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni9qYVlmT1lzT2daMThWSFdI
cDJNU0IzNFhjR28ucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
fakwDQYJKoZIhvcNAQELBQADggEBAHJo5UD8Iy6FTteZqvHaaKYURWrdyKQnfOJS
neWW6ifM+zkYolklK7Q3QCdRnXsiiMSclttN6IF1opDTr6x3XKmgpYUArjcOxvFO
2CQG1VaaM2FFa0pkwiUcC0ZyYLU9jQcGo3gPs2V+JBxj24NLrerD9YyloIdf2Qfg
rE0d5CFoGMmLZESOhnbR1JaJ9pHv+8U1opn2hfgkJWW6y8Pj+KvREDToip7sF4nC
QC4I397UkoM4Rt0ur6utThDdkaCnzbgsyG1U0o85x4XpuDNOQj1r4OZNYBDaiBf2
3h/YruoXbJAIjW9u6htp2dPrZgXaDur/amq9W7l1qMvlsYdltYM=
-----END CERTIFICATE-----
Generated at Sat Jun 21 05:52:28 2025 by rpki-client