Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/4My7DXU-ry94Ni0-q46ja3MXW9s.roa
File: 4My7DXU-ry94Ni0-q46ja3MXW9s.roa (raw, json)
Hash identifier: Q/5zIV1CnUD5JuFH+n5Ts78ZaNvQZ8ma/bJOMENHkxg=
Subject key identifier: E0:CC:BB:0D:75:3E:AF:2F:78:36:2D:3E:AB:8E:A3:6B:73:17:5B:DB
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1EE8
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/4My7DXU-ry94Ni0-q46ja3MXW9s.roa
Signing time: Tue 17 Jun 2025 07:10:03 +0000
ROA not before: Tue 17 Jun 2025 07:10:03 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7912 (0x1ee8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 17 07:10:03 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=E0CCBB0D753EAF2F78362D3EAB8EA36B73175BDB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:bc:84:e7:f6:f5:13:8f:2c:2a:f4:6f:0a:1d:
47:22:cc:9a:d4:53:50:93:c8:8a:6e:5e:b1:cd:c4:
75:6c:68:aa:0d:ab:e7:0e:a4:a2:9f:98:93:8e:a6:
51:98:fe:a0:f5:4e:88:44:86:56:1c:52:d1:86:e4:
e6:2c:ae:d0:d6:20:9d:30:81:7d:22:ae:40:6f:e0:
ef:3d:7e:03:67:29:84:fe:61:ae:05:be:42:5a:9a:
65:d8:35:63:57:ac:8f:3a:1f:3c:9d:11:af:9e:f1:
17:43:ac:04:1e:08:d9:d5:54:6f:80:2b:a4:d0:5f:
a8:45:7d:f6:72:7f:f9:5b:cb:05:92:30:ab:df:07:
f2:1a:4c:60:71:78:a0:9c:44:5e:31:bf:0c:14:4e:
58:91:85:fe:9e:67:90:98:b8:cc:d2:1e:79:2b:38:
55:60:de:69:91:1b:4d:f6:c5:b9:24:2d:af:5d:0a:
ba:4b:29:ce:26:31:9f:2a:ce:17:c3:7b:bc:b3:63:
5c:1e:ef:d4:d8:6f:15:d8:3b:5c:f1:46:59:b2:02:
fa:8a:ba:4b:d6:e6:f0:a9:1c:b3:bf:b0:bd:a0:31:
81:60:81:4b:72:f0:7b:cc:17:f6:a6:c8:8b:55:b8:
7b:9d:d5:3e:a2:d4:c9:55:a9:57:3e:62:7a:0c:84:
d5:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:CC:BB:0D:75:3E:AF:2F:78:36:2D:3E:AB:8E:A3:6B:73:17:5B:DB
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/4My7DXU-ry94Ni0-q46ja3MXW9s.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
58:6a:71:11:37:e0:b5:76:90:bd:30:14:2a:a3:a3:3c:e4:7b:
98:f7:59:b7:a3:77:61:d1:0e:03:ac:4d:77:2e:dd:ca:a2:00:
64:6b:71:a5:c8:80:05:bb:a4:fc:ac:68:10:2c:b2:26:3f:43:
a1:e4:1d:b5:14:d9:80:f8:f2:68:a3:03:c1:31:62:e1:23:1f:
02:af:e4:7f:31:ec:07:eb:11:f8:ee:7c:a1:a1:c2:80:d6:5f:
35:74:96:4f:6f:d7:ca:b4:d9:bc:94:2f:93:6a:76:c1:3f:50:
d7:27:4c:f5:c9:b0:79:bc:e2:4a:bd:ae:0f:9e:8e:c1:ee:0c:
4c:36:bd:27:d0:b9:b4:79:43:a0:db:b2:5c:c6:05:61:f1:4e:
62:92:6c:6e:26:8e:d2:d5:f0:b8:5a:75:41:a0:aa:7c:0b:0b:
13:10:25:59:8d:ef:51:08:7a:4e:9f:79:61:4f:7e:0c:58:1d:
e2:e9:30:9a:a5:38:22:3f:e8:7f:a1:72:9e:3f:b8:c5:0d:3e:
5c:05:a8:64:d0:27:c6:3b:ca:36:fe:bd:bc:ce:cb:e5:db:38:
d3:27:32:fe:4d:c2:90:c0:93:fa:3e:72:f4:f0:72:03:9b:20:
41:12:b1:61:22:27:58:ec:76:a7:a5:11:e2:43:20:60:78:f1:
5e:32:69:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 23:18:33 2025 by rpki-client