Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/5rpVxQL6J9dW6kWRT-wUY-QQv00.roa
File: 5rpVxQL6J9dW6kWRT-wUY-QQv00.roa (raw, json)
Hash identifier: wo870ZU6XTHQa9s0efgmGfsXCdNiMXQbThpxpgufLiI=
Subject key identifier: E6:BA:55:C5:02:FA:27:D7:56:EA:45:91:4F:EC:14:63:E4:10:BF:4D
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 2348
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/5rpVxQL6J9dW6kWRT-wUY-QQv00.roa
Signing time: Mon 23 Jun 2025 14:41:53 +0000
ROA not before: Mon 23 Jun 2025 14:41:53 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9032 (0x2348)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 23 14:41:53 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=E6BA55C502FA27D756EA45914FEC1463E410BF4D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:87:c9:6e:50:d4:87:3c:4d:7f:32:e8:a8:8a:
ca:2c:cc:0f:10:4e:b4:61:a4:33:58:55:01:5a:31:
19:74:6d:92:2d:8d:66:89:e7:29:bf:46:84:e8:73:
f1:13:84:33:dd:c3:94:b6:f8:57:11:46:63:18:54:
08:f4:81:86:75:cc:86:f6:07:1e:8c:d7:d0:2d:07:
3f:9c:9d:67:d1:a5:bb:14:c8:db:6f:70:e4:26:81:
63:cb:65:19:3e:bb:4a:a6:c2:17:16:4d:bc:39:9b:
8f:6e:bb:dd:5a:08:7a:2a:6f:7c:0e:ca:9e:db:41:
d2:c4:ed:41:fe:2a:d0:7b:3d:78:d5:0b:88:1c:cc:
b4:ed:c5:01:b0:c4:39:cc:18:7e:5a:b0:c5:62:6f:
d0:a1:b5:50:e2:02:e4:9d:55:3f:b0:45:30:29:27:
21:29:3d:e1:3e:75:1c:b8:e2:66:c2:77:aa:e9:93:
f9:4b:36:73:72:9e:68:ba:ba:ac:9e:6e:d3:a8:20:
f3:c2:4c:7e:93:3f:2a:75:6a:9e:5d:d3:a0:32:8b:
7a:a4:e4:11:f6:e7:62:44:e1:02:e6:74:fe:6e:e0:
e6:2a:d6:36:0a:fd:e5:39:fc:dd:d4:ac:4b:7f:4b:
90:e1:0b:aa:4b:a9:b1:76:69:3e:d1:3f:9a:57:52:
4a:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:BA:55:C5:02:FA:27:D7:56:EA:45:91:4F:EC:14:63:E4:10:BF:4D
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/5rpVxQL6J9dW6kWRT-wUY-QQv00.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
8b:dc:b3:71:b7:79:c9:1f:bd:64:01:4e:ab:d6:56:a0:86:8b:
f8:3b:7a:d9:0d:1d:f5:7b:55:21:11:3d:5b:87:a0:60:9a:41:
0c:54:be:a7:06:d7:ab:51:74:51:c5:98:88:b4:ca:1c:fa:44:
7a:da:9f:9c:33:84:f5:61:48:39:83:0e:4f:70:e6:63:12:73:
9d:b9:b0:3d:27:dd:75:dc:59:b5:28:53:a1:c9:7f:1f:1a:c5:
e0:5d:f9:9d:23:1d:c4:3e:ff:c7:5d:2f:5c:5b:11:d8:3c:9b:
34:fe:46:f5:d2:7c:60:ee:b1:a5:b4:19:ad:c6:d9:76:be:d3:
e0:53:1c:4a:44:02:6f:4f:f2:f6:cb:b6:6a:71:17:d9:ef:c0:
35:fe:20:98:81:57:a0:42:8e:2f:6c:aa:2d:7f:86:4c:10:8b:
93:1d:0d:8b:cd:9c:c9:8c:bc:11:c3:38:12:06:5a:2d:2b:5f:
00:aa:34:76:9b:60:70:47:8d:b8:16:58:87:1a:d3:b7:6a:b6:
d3:75:a5:d1:82:52:23:13:d3:ad:7e:b5:36:02:8c:83:76:b5:
41:5f:e4:ce:56:d7:a0:c6:0b:c1:46:17:b8:b9:5a:e0:97:28:
9a:21:12:8e:28:33:ed:d4:60:de:03:45:0f:91:0f:ca:75:d1:
ef:63:63:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 19:08:58 2025 by rpki-client