Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/7DoTK-qtlGOcuEmVYUEFqctiebk.roa
File: 7DoTK-qtlGOcuEmVYUEFqctiebk.roa (raw, json)
Hash identifier: H+i+BQuu0IrVV1RcViVfo6UwQh8+BCNg3Z7G2tIVFK0=
Subject key identifier: EC:3A:13:2B:EA:AD:94:63:9C:B8:49:95:61:41:05:A9:CB:62:79:B9
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 216C
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/7DoTK-qtlGOcuEmVYUEFqctiebk.roa
Signing time: Sat 21 Jun 2025 03:11:49 +0000
ROA not before: Sat 21 Jun 2025 03:11:49 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8556 (0x216c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 21 03:11:49 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=EC3A132BEAAD94639CB84995614105A9CB6279B9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f1:ea:5f:59:6c:3c:e8:ae:4a:27:5b:c5:c4:
d1:33:48:73:c0:a5:2f:e3:14:a8:c2:26:c1:88:24:
85:85:d3:45:9e:92:03:bd:a3:cd:74:18:df:cf:76:
b3:76:53:b0:b3:c3:99:04:1e:0e:49:06:9e:ef:3e:
09:0a:e0:65:46:45:51:49:a8:33:8c:5d:4a:45:ec:
e6:75:40:ee:22:14:61:e0:7c:68:e1:fd:31:86:22:
fb:da:07:d4:21:48:51:8d:23:37:78:a7:07:59:0b:
2f:a5:2f:0c:bf:27:48:d0:02:66:99:ad:72:d4:39:
a9:f0:30:71:d9:04:fa:96:8b:9a:25:08:0b:5c:33:
d0:75:f8:c2:91:bd:27:ea:55:43:97:ba:27:fb:79:
cb:d2:0f:6f:79:08:10:8c:ce:2f:64:f2:e1:81:94:
c4:6f:04:03:56:0b:35:9f:9f:fa:2c:65:a5:a5:63:
a6:d6:63:7e:56:1f:8c:5d:a1:94:fc:e2:f4:43:5a:
00:9e:bf:6a:36:bc:2b:41:f1:6f:7c:22:64:48:b9:
af:b3:47:9a:42:e9:8c:19:8b:7f:02:5c:65:3d:77:
47:46:1c:82:ab:5a:4f:db:17:56:47:17:53:3e:54:
b3:2b:25:2e:12:af:73:2e:e6:09:9f:c9:86:f3:7f:
2b:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:3A:13:2B:EA:AD:94:63:9C:B8:49:95:61:41:05:A9:CB:62:79:B9
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/7DoTK-qtlGOcuEmVYUEFqctiebk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
8a:85:03:80:a9:36:aa:20:05:b1:a4:7a:4c:f7:82:2b:24:10:
26:de:df:b2:53:e0:42:f5:e1:d9:3e:cc:07:41:75:2c:6c:5f:
d6:d9:66:79:f1:11:25:fa:7f:04:bc:37:86:ed:6c:34:08:45:
86:97:76:06:f2:e6:ea:4a:16:c7:b2:5f:ad:30:f7:5e:18:0e:
af:a7:4f:b9:6c:5e:10:ff:e7:88:92:74:57:6f:ba:46:fd:51:
82:d2:fc:eb:9d:5f:4d:7c:f8:19:2c:df:60:49:43:3c:79:df:
23:91:a3:75:e9:e5:ff:d2:cf:1a:e7:bc:5a:3d:c0:cf:bf:ac:
19:40:6c:45:06:df:7f:e3:64:4c:0e:3a:16:ad:85:a0:7e:35:
2e:c6:a3:c6:43:e6:59:e6:9f:90:a0:46:f6:65:fb:b7:e4:91:
1e:87:4c:1e:7c:e7:42:10:ed:29:50:97:2d:e4:15:fb:da:0e:
37:0a:64:8f:cc:84:7d:03:be:4b:a1:00:80:dd:7b:51:f7:67:
d8:da:48:06:89:9c:1d:1c:65:2c:46:27:fe:13:ba:fa:33:f4:
cc:4c:30:d2:cd:20:c0:0b:5a:26:1e:15:7d:82:f9:5b:72:f1:
2d:57:66:ed:a2:19:47:4b:43:8c:af:bd:00:fa:5a:72:9e:c1:
2c:57:11:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 08:00:40 2025 by rpki-client