Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/npnVfBjtNMtKKqz-LeolWiigeKU.roa
File: npnVfBjtNMtKKqz-LeolWiigeKU.roa (raw, json)
Hash identifier: N+F3TKIrNLyLVjSGvzNrodiKBOBZhfOCVSBcGk0Xuss=
Subject key identifier: 9E:99:D5:7C:18:ED:34:CB:4A:2A:AC:FE:2D:EA:25:5A:28:A0:78:A5
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0E18
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/npnVfBjtNMtKKqz-LeolWiigeKU.roa
Signing time: Sun 25 May 2025 21:08:54 +0000
ROA not before: Sun 25 May 2025 21:08:54 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3608 (0xe18)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 25 21:08:54 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=9E99D57C18ED34CB4A2AACFE2DEA255A28A078A5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:09:db:24:7b:d4:5f:3e:13:a7:f2:9d:e0:1c:
36:ea:49:a6:d2:3b:03:29:68:16:fd:1b:db:ae:ab:
02:62:79:8c:89:55:1f:8d:53:98:77:38:4f:0c:aa:
44:66:38:2d:85:00:00:41:29:f1:53:38:d8:ad:a4:
d7:de:09:f0:4f:a4:e4:37:d9:89:ab:31:5b:ea:e1:
89:bf:2d:13:a8:b2:28:50:6e:5e:06:84:11:dd:6f:
30:95:17:c8:27:49:19:e5:86:b8:8c:d0:b9:11:b8:
fb:fc:08:a1:09:56:72:38:67:f3:12:14:bd:ad:0a:
dc:28:b3:42:dc:1a:b0:44:80:1c:61:de:39:d1:54:
d3:c0:8c:d4:09:6d:b9:7a:02:b1:95:ce:bb:c2:7c:
73:63:bc:8d:76:8e:df:6e:52:c5:de:09:72:72:4d:
df:28:9d:eb:80:d0:ee:bb:c3:a7:db:d0:38:02:91:
5f:1e:86:bc:3b:1e:61:d6:e7:64:5d:a5:92:0d:45:
a6:fe:52:52:cb:35:ce:28:de:73:52:da:3a:18:fd:
5f:9b:98:5e:b0:da:01:f3:d5:d9:f2:f0:09:8f:0a:
dd:06:ad:93:31:1c:9d:01:c3:a1:8b:a8:98:e4:02:
ac:b2:50:26:d9:fc:00:7c:96:3b:3e:96:fd:3e:93:
3f:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:99:D5:7C:18:ED:34:CB:4A:2A:AC:FE:2D:EA:25:5A:28:A0:78:A5
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/npnVfBjtNMtKKqz-LeolWiigeKU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
5f:01:5c:cc:70:2a:c9:58:35:33:10:90:f6:95:dc:d0:03:54:
49:44:52:15:4c:3c:fa:a2:ec:87:ed:a3:50:d7:00:15:e2:5c:
74:b1:0d:e8:08:62:fd:f7:7a:df:5f:6b:61:41:44:34:cf:86:
d9:55:5f:44:84:d4:35:1c:f2:18:c8:a9:6e:f4:e9:aa:ac:db:
70:39:a5:13:d4:a1:b9:a4:a2:a0:7b:fd:b5:f0:b7:94:7f:b0:
ca:33:9f:e1:f9:73:f9:97:39:73:58:0c:c9:a5:23:5d:29:75:
fa:5a:dd:27:bc:62:8d:69:ae:0a:2e:4d:98:6c:6f:8e:76:4c:
df:e2:ef:b8:6c:4f:2f:db:3e:79:23:8c:aa:57:dd:0b:d5:a6:
42:f5:55:51:ca:c2:d8:de:70:f1:f9:e0:bd:de:1e:3d:fd:27:
02:40:96:5b:b7:ca:53:64:c8:2a:24:82:4b:3c:97:2b:98:92:
3f:88:d8:03:fc:dd:07:3c:0d:e3:87:57:62:ce:ca:82:ec:67:
04:cf:39:67:a9:81:0b:30:6a:2a:0e:97:ea:b6:f3:76:f9:3e:
2f:99:b8:6f:91:f6:ee:25:d3:d0:a5:1c:19:b9:18:2f:8c:e4:
cc:1e:ee:af:ae:5c:de:63:37:c4:bc:f5:fb:dd:78:21:4b:06:
3a:24:41:de
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICDhgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy
NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA1MjUy
MTA4NTRaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKDlFOTlENTdDMThFRDM0
Q0I0QTJBQUNGRTJERUEyNTVBMjhBMDc4QTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDoCdske9RfPhOn8p3gHDbqSabSOwMpaBb9G9uuqwJieYyJVR+N
U5h3OE8MqkRmOC2FAABBKfFTONitpNfeCfBPpOQ32YmrMVvq4Ym/LROosihQbl4G
hBHdbzCVF8gnSRnlhriM0LkRuPv8CKEJVnI4Z/MSFL2tCtwos0LcGrBEgBxh3jnR
VNPAjNQJbbl6ArGVzrvCfHNjvI12jt9uUsXeCXJyTd8oneuA0O67w6fb0DgCkV8e
hrw7HmHW52RdpZINRab+UlLLNc4o3nNS2joY/V+bmF6w2gHz1dny8AmPCt0GrZMx
HJ0Bw6GLqJjkAqyyUCbZ/AB8ljs+lv0+kz8lAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUnpnVfBjtNMtKKqz+LeolWiigeKUwHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK
ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv
TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni9ucG5WZkJqdE5NdEtLcXot
TGVvbFdpaWdlS1Uucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
fakwDQYJKoZIhvcNAQELBQADggEBAF8BXMxwKslYNTMQkPaV3NADVElEUhVMPPqi
7Ifto1DXABXiXHSxDegIYv33et9fa2FBRDTPhtlVX0SE1DUc8hjIqW706aqs23A5
pRPUobmkoqB7/bXwt5R/sMozn+H5c/mXOXNYDMmlI10pdfpa3Se8Yo1prgouTZhs
b452TN/i77hsTy/bPnkjjKpX3QvVpkL1VVHKwtjecPH54L3eHj39JwJAllu3ylNk
yCokgks8lyuYkj+I2AP83Qc8DeOHV2LOyoLsZwTPOWepgQswaioOl+q283b5Pi+Z
uG+R9u4l09ClHBm5GC+M5Mwe7q+uXN5jN8S89fvdeCFLBjokQd4=
-----END CERTIFICATE-----
Generated at Sun Jun 22 03:55:20 2025 by rpki-client