Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/Aqqq3WwDptL1sdS17LMOWqfdoSc.roa
File: Aqqq3WwDptL1sdS17LMOWqfdoSc.roa (raw, json)
Hash identifier: DxulyKeYVZywiPKmxTySP7ldZ5BqymscFOG0V0P8PpI=
Subject key identifier: 02:AA:AA:DD:6C:03:A6:D2:F5:B1:D4:B5:EC:B3:0E:5A:A7:DD:A1:27
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 2000
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/Aqqq3WwDptL1sdS17LMOWqfdoSc.roa
Signing time: Wed 18 Jun 2025 19:44:40 +0000
ROA not before: Wed 18 Jun 2025 19:44:40 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8192 (0x2000)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 18 19:44:40 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=02AAAADD6C03A6D2F5B1D4B5ECB30E5AA7DDA127
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:5d:c4:48:b4:86:50:7c:4c:d1:88:12:0d:ef:
ea:5f:42:da:72:fa:15:90:72:30:35:c4:2d:9d:3e:
c1:c4:71:f2:ca:65:1f:ad:05:27:58:b2:a0:ae:a1:
13:a7:e5:8f:cd:db:d8:55:c7:d8:0a:a2:e6:ea:e0:
15:56:d1:fe:a1:62:08:86:f9:4c:a9:90:c5:eb:53:
73:b1:24:9f:6b:f0:76:31:ce:f3:8c:84:93:e0:14:
5f:ee:75:43:8f:e3:7e:c1:dc:7d:72:a4:81:fd:03:
5a:db:b2:11:b3:46:0d:67:61:85:3a:53:7d:de:58:
40:2f:41:13:16:83:0b:3d:4e:c2:6b:f3:8a:98:42:
f5:24:1d:05:f9:54:e1:d0:91:76:c1:8e:40:c7:7d:
f1:99:0f:78:d2:4c:ec:9c:c6:50:5f:e5:5d:99:77:
3b:3e:96:23:4a:a4:33:15:ff:7c:39:f9:e6:75:69:
38:8b:09:5d:fc:74:1f:8f:f9:e9:ca:e8:65:f5:1a:
5d:77:76:8a:5b:53:46:2e:0f:d6:87:cf:b8:dd:aa:
ef:db:11:45:0f:05:2a:d4:a0:cd:8f:a2:fb:2b:b1:
28:20:80:b8:7f:cd:76:8e:e8:9c:8e:fd:5f:62:4c:
e5:e4:5e:14:ab:e3:1b:00:14:de:f8:91:8f:e0:d0:
15:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:AA:AA:DD:6C:03:A6:D2:F5:B1:D4:B5:EC:B3:0E:5A:A7:DD:A1:27
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/Aqqq3WwDptL1sdS17LMOWqfdoSc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
89:c1:95:f2:e6:13:8a:be:a0:29:9a:9a:17:ea:71:58:ae:cc:
39:51:fe:b8:15:31:c9:60:1d:28:57:19:0f:55:29:30:4e:32:
99:c1:4a:55:ae:20:08:e0:d7:6f:ff:11:41:8b:7a:e3:88:94:
40:ad:87:58:11:c7:6b:0e:e9:83:f6:ae:73:ba:67:03:43:cb:
0c:77:70:a5:31:73:ad:45:d3:11:a3:79:d0:5e:6b:68:35:0d:
15:be:4b:52:07:69:90:ac:0a:6b:96:d5:35:62:b5:24:81:c8:
ba:8a:49:81:b6:e2:3d:a8:21:65:0e:06:40:b1:c9:aa:6a:d9:
4c:79:29:d7:7b:95:7a:5c:64:d0:3f:63:60:ba:3e:30:46:b4:
d8:f4:87:60:38:ba:99:f7:0b:54:79:01:2f:b2:3e:e4:40:ae:
9d:2c:b1:42:4a:b5:0f:80:50:a5:c3:a9:e0:d9:3f:92:1c:82:
d2:e8:02:b0:67:f8:ef:69:fd:e6:7f:44:44:8e:77:fa:cd:39:
10:d8:be:70:1d:59:9d:5a:54:4e:0c:e4:18:63:54:5c:e7:0d:
94:9a:3b:c6:e6:28:56:0f:dd:2a:e5:f9:3e:b3:66:5d:c6:1d:
49:60:e0:0a:b6:0a:32:79:0e:21:d6:f2:db:cd:f7:0e:27:c8:
7d:6a:33:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 23:43:54 2025 by rpki-client