Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/-cQ1seIlT8I73Du3FdUTQ6RVh4E.roa
File: -cQ1seIlT8I73Du3FdUTQ6RVh4E.roa (raw, json)
Hash identifier: 5OjwZ51ysMsqCrfS+kL8tieVnsMr1Ankgkf+EZiYkJY=
Subject key identifier: F9:C4:35:B1:E2:25:4F:C2:3B:DC:3B:B7:15:D5:13:43:A4:55:87:81
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 15D8
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/-cQ1seIlT8I73Du3FdUTQ6RVh4E.roa
Signing time: Thu 05 Jun 2025 05:09:23 +0000
ROA not before: Thu 05 Jun 2025 05:09:23 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5592 (0x15d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 5 05:09:23 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=F9C435B1E2254FC23BDC3BB715D51343A4558781
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:cc:7a:ff:38:02:65:74:61:d4:a6:d0:6a:be:
44:44:4e:d5:84:82:2a:db:e1:90:47:e5:a3:87:c5:
9d:67:35:f0:99:50:67:c6:3a:3e:76:8a:a0:76:4c:
a3:2b:7b:d4:bb:8a:03:1a:2b:6b:3b:b8:a9:a9:53:
90:d2:b8:69:93:10:1b:ae:c7:d1:a8:d5:8a:19:8b:
81:a8:ce:96:65:10:d0:15:2b:da:d5:23:fd:bc:83:
62:df:c8:22:77:e0:ee:7c:df:d2:98:d3:6c:a5:af:
a8:1b:5c:9b:a4:ae:bc:12:2e:fe:11:18:81:bc:c4:
89:2b:2e:47:9c:2b:8a:c5:e6:18:31:f0:79:ba:a3:
48:b1:81:98:20:dc:62:10:54:52:a5:ee:dc:6b:5c:
99:9e:cc:73:0a:0c:46:72:2a:5c:23:25:c9:bd:a6:
2b:2d:51:c0:44:12:7b:78:4f:7a:30:c9:0b:f7:6f:
f2:02:cc:eb:cd:56:32:e4:3b:23:1b:a4:f5:61:50:
36:f0:d0:1e:64:1a:24:da:6a:20:30:ea:aa:81:f6:
87:2a:39:77:7c:0b:5f:6f:6e:9b:d3:be:db:67:ae:
19:5b:ad:5d:d7:a3:4e:ab:ce:ea:39:89:f0:40:f1:
80:19:0c:a6:ad:86:be:09:71:bb:cd:d5:8a:8d:64:
ba:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:C4:35:B1:E2:25:4F:C2:3B:DC:3B:B7:15:D5:13:43:A4:55:87:81
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/-cQ1seIlT8I73Du3FdUTQ6RVh4E.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
91:94:6e:42:2b:46:b5:57:2c:1d:06:17:80:e2:3e:14:a8:2b:
e4:63:53:a8:bf:e9:79:ba:d4:81:61:b8:6f:3c:ac:fc:84:fa:
84:51:0a:40:10:d7:fe:fe:8f:ce:88:3b:c0:bb:f5:06:f4:3c:
cc:a5:14:58:7d:ca:12:66:56:c1:9d:7c:6b:99:f7:90:3c:3a:
b4:21:b0:48:a9:2e:8e:7a:e3:9a:23:e1:46:50:60:13:7b:e2:
87:65:ba:f9:d1:56:2c:d4:90:16:b2:0a:5c:64:02:35:1d:fb:
f5:df:ef:44:9e:cf:04:26:a2:3a:cb:b3:7a:08:9a:1b:3e:7a:
3a:7e:9c:a4:36:ad:9c:39:6d:fd:ec:aa:6a:52:80:c2:6a:d5:
30:45:56:6b:f1:38:6a:b5:41:85:51:3f:98:d9:fa:82:7c:bd:
06:58:5b:74:2d:8a:1e:c4:8c:30:b5:6d:b4:24:5a:8a:41:ef:
1b:d8:20:59:2a:a4:d3:8b:7a:5a:ef:81:13:48:6f:e7:84:19:
18:97:f5:e9:8e:79:53:0d:73:dd:28:51:93:7b:49:64:2d:25:
2e:67:2c:cd:36:3d:54:fa:ed:5e:7d:c0:6d:12:c4:78:f8:5b:
a0:ea:79:c6:81:06:78:7a:83:43:88:89:f9:6d:1b:b5:30:d0:
32:68:21:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 13:23:34 2025 by rpki-client