Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/4YvJPAMnd4jCZEhcyBZHxRScBIM.roa
File: 4YvJPAMnd4jCZEhcyBZHxRScBIM.roa (raw, json)
Hash identifier: gfSnPpz2lwKSdrdSrIdtKbr59+i5r4pK74sztJCKNoM=
Subject key identifier: E1:8B:C9:3C:03:27:77:88:C2:64:48:5C:C8:16:47:C5:14:9C:04:83
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 22B8
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/4YvJPAMnd4jCZEhcyBZHxRScBIM.roa
Signing time: Sun 22 Jun 2025 20:41:50 +0000
ROA not before: Sun 22 Jun 2025 20:41:50 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8888 (0x22b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 22 20:41:50 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=E18BC93C03277788C264485CC81647C5149C0483
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:2f:4c:78:84:92:1a:d0:75:40:ae:20:eb:40:
d7:81:b9:07:15:01:96:b3:61:41:82:6d:2e:35:b9:
c0:38:25:7e:9f:53:c5:8e:ca:b4:4f:99:02:5d:e0:
3d:23:3d:f8:08:8d:63:90:a9:6a:93:21:41:13:27:
55:da:bc:47:f1:82:b6:a8:be:54:2c:ee:5a:a5:0b:
e0:f3:0c:31:11:66:aa:6c:86:a4:10:f7:24:62:f7:
60:87:3f:06:9d:62:fb:13:a0:51:05:b2:35:ba:04:
43:78:f0:e3:66:f0:17:01:4f:42:d4:c2:a7:2e:c2:
88:b8:72:26:7b:51:ad:ed:07:58:0e:78:02:ca:b0:
7d:cd:00:7d:93:e8:e9:23:ff:6e:a3:bc:ed:c4:6a:
9d:e5:d0:b5:40:3f:03:dd:0b:bd:e8:69:35:fa:5a:
58:33:f7:d5:fe:f1:a7:5e:41:de:19:91:03:77:2f:
c1:79:6e:73:7b:2d:d3:0c:a6:7b:f8:ec:e6:db:21:
72:50:36:44:ca:f4:bf:54:11:db:93:08:db:c7:41:
4b:7f:6a:ac:d9:d8:76:a3:da:9c:71:26:84:ed:b1:
f8:e4:77:25:35:11:b2:16:f7:89:e6:48:6f:8a:b2:
4e:fb:53:de:b5:5b:b3:01:bc:67:75:22:73:db:a4:
45:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:8B:C9:3C:03:27:77:88:C2:64:48:5C:C8:16:47:C5:14:9C:04:83
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/4YvJPAMnd4jCZEhcyBZHxRScBIM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
7d:7a:bb:17:52:73:99:2c:24:83:c0:71:82:75:7f:30:36:b9:
06:7b:41:e1:76:b7:7c:2e:06:b8:15:8c:37:21:e5:08:ab:1a:
17:94:fe:64:4a:e0:e6:9b:55:33:de:9e:02:35:b8:9b:e9:9c:
9f:be:2e:de:00:55:08:12:4b:88:db:54:dc:09:22:04:b5:92:
41:25:e8:d4:47:e1:15:e5:54:5e:a6:29:5a:dc:77:11:11:26:
c6:b5:bc:5b:c8:39:c1:b9:b8:2c:41:ea:7c:8f:bd:3f:8c:fa:
43:b8:09:ae:ea:f9:4d:33:2c:0f:41:ec:bd:46:e1:ac:c1:7e:
68:d3:c9:d7:4a:79:ff:99:14:b4:99:46:13:43:ce:7e:85:e3:
fe:17:e2:3d:95:25:40:e5:d1:6d:74:13:30:69:33:d8:95:00:
a7:86:b9:dc:e4:5b:1e:f5:25:f6:14:b9:ea:5b:10:fb:09:d8:
14:a3:a3:9e:b6:a6:1a:d2:e0:06:1c:68:87:de:2b:b1:d1:eb:
5e:84:4f:42:9f:87:63:91:4a:7e:6b:df:5f:2e:98:19:78:7e:
5f:e9:dd:34:c8:ef:09:5e:c7:16:9d:b6:85:85:16:90:7e:ac:
aa:13:68:3f:2b:03:4d:d0:d7:8e:70:c7:4d:80:9a:5d:b5:d3:
8f:e8:5f:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 08:08:52 2025 by rpki-client