Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/vaCqu-E1i3E-PD-_nTjWg7G-i6s.roa
File: vaCqu-E1i3E-PD-_nTjWg7G-i6s.roa (raw, json)
Hash identifier: isKoQ0FKRRQhvWn/K7e2Fw6qqQtHeQspS+Zo6IUkLaE=
Subject key identifier: BD:A0:AA:BB:E1:35:8B:71:3E:3C:3F:BF:9D:38:D6:83:B1:BE:8B:AB
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 17A8
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/vaCqu-E1i3E-PD-_nTjWg7G-i6s.roa
Signing time: Sat 07 Jun 2025 15:09:29 +0000
ROA not before: Sat 07 Jun 2025 15:09:29 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6056 (0x17a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 7 15:09:29 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=BDA0AABBE1358B713E3C3FBF9D38D683B1BE8BAB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:cf:94:10:23:f6:83:5c:11:11:82:80:88:c6:
23:50:36:0c:b9:20:88:9d:17:c3:e0:5a:74:8f:38:
c9:31:10:f2:cd:44:12:ea:da:1c:18:db:18:97:11:
8b:05:5a:45:46:f3:8b:62:c0:39:71:83:10:ef:e7:
c7:d8:ea:b3:de:d3:80:99:ba:4d:45:14:18:63:be:
42:23:89:f8:aa:de:f6:f5:b6:b6:93:9c:5b:f5:e3:
9b:6d:a3:ee:c1:c5:44:af:8b:0b:85:eb:54:4f:da:
be:12:28:40:f3:a2:f6:c3:5f:2b:2f:3e:49:e8:35:
6b:c7:87:d9:eb:f5:99:0a:03:12:f6:8e:7a:0d:c0:
4f:1f:c1:29:9a:32:39:09:7e:37:97:e5:3e:fa:7c:
0f:95:54:f9:f3:b9:22:22:3a:d3:23:59:30:e6:e4:
d2:b9:b5:39:ea:56:5a:8c:01:d1:9a:16:2d:9a:48:
25:ec:c4:dd:18:fa:f7:83:93:09:88:5d:43:f9:68:
45:18:61:20:96:92:6d:6a:cc:23:df:d1:c6:c2:bb:
8c:4a:cd:b9:30:d3:6f:0d:e0:d8:a9:82:82:7b:1f:
1e:f5:e8:46:53:6a:d2:99:3a:83:ab:3f:76:1d:2c:
9e:b4:12:7f:5a:48:f7:17:e4:0a:eb:2c:76:c1:43:
d3:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:A0:AA:BB:E1:35:8B:71:3E:3C:3F:BF:9D:38:D6:83:B1:BE:8B:AB
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/vaCqu-E1i3E-PD-_nTjWg7G-i6s.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
39:a4:08:48:5b:a4:22:45:6f:ee:72:0e:40:c0:30:e7:e8:52:
97:93:ad:ec:a1:48:33:4e:7a:ef:12:60:a8:18:49:a0:db:45:
58:55:cc:4e:9e:24:85:f6:36:32:8a:7f:c3:72:f5:e6:b3:c8:
2e:06:c6:02:fc:95:6a:e3:e6:9c:bc:86:03:e2:a7:47:f5:e6:
59:35:e7:99:4b:b8:a3:d0:d7:5c:6a:f8:25:aa:db:ef:36:ae:
7b:31:2c:ea:bf:7f:09:c9:aa:16:06:1b:96:ca:2d:a2:c7:50:
38:20:5f:90:ef:7c:59:d7:59:1e:26:a8:d0:1c:38:c0:ae:e1:
63:93:5f:3f:a1:38:ec:1f:49:32:fb:0d:12:aa:fa:ed:62:17:
da:4f:98:d8:a1:89:63:35:cf:2f:53:c2:ab:d6:ac:52:1a:d4:
1a:73:53:7a:07:fa:d3:23:11:aa:5f:2d:24:be:d2:8d:e5:d0:
26:a4:6d:16:fc:1e:f3:28:03:a2:3c:e9:51:5f:4b:ae:01:d8:
cd:5c:b5:70:6d:67:87:11:01:77:83:b1:16:fb:08:5f:3d:e6:
c5:34:c3:b6:1b:49:07:6c:5e:1c:93:94:e7:91:4a:89:fd:af:
93:16:06:fc:4c:d5:bf:d4:f4:fd:ae:87:45:2e:61:40:c5:2e:
ec:43:2c:e3
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICF6gwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy
NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA2MDcx
NTA5MjlaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKEJEQTBBQUJCRTEzNThC
NzEzRTNDM0ZCRjlEMzhENjgzQjFCRThCQUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDTz5QQI/aDXBERgoCIxiNQNgy5IIidF8PgWnSPOMkxEPLNRBLq
2hwY2xiXEYsFWkVG84tiwDlxgxDv58fY6rPe04CZuk1FFBhjvkIjifiq3vb1traT
nFv145tto+7BxUSviwuF61RP2r4SKEDzovbDXysvPknoNWvHh9nr9ZkKAxL2jnoN
wE8fwSmaMjkJfjeX5T76fA+VVPnzuSIiOtMjWTDm5NK5tTnqVlqMAdGaFi2aSCXs
xN0Y+veDkwmIXUP5aEUYYSCWkm1qzCPf0cbCu4xKzbkw028N4NipgoJ7Hx716EZT
atKZOoOrP3YdLJ60En9aSPcX5ArrLHbBQ9MRAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUvaCqu+E1i3E+PD+/nTjWg7G+i6swHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK
ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv
TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni92YUNxdS1FMWkzRS1QRC1f
blRqV2c3Ry1pNnMucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
fakwDQYJKoZIhvcNAQELBQADggEBADmkCEhbpCJFb+5yDkDAMOfoUpeTreyhSDNO
eu8SYKgYSaDbRVhVzE6eJIX2NjKKf8Ny9eazyC4GxgL8lWrj5py8hgPip0f15lk1
55lLuKPQ11xq+CWq2+82rnsxLOq/fwnJqhYGG5bKLaLHUDggX5DvfFnXWR4mqNAc
OMCu4WOTXz+hOOwfSTL7DRKq+u1iF9pPmNihiWM1zy9TwqvWrFIa1BpzU3oH+tMj
EapfLSS+0o3l0CakbRb8HvMoA6I86VFfS64B2M1ctXBtZ4cRAXeDsRb7CF895sU0
w7YbSQdsXhyTlOeRSon9r5MWBvxM1b/U9P2uh0UuYUDFLuxDLOM=
-----END CERTIFICATE-----
Generated at Sat Jun 21 18:32:13 2025 by rpki-client