Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/CA5R9DvxUZqwYk9d9k9tKb-TB7A.roa
File: CA5R9DvxUZqwYk9d9k9tKb-TB7A.roa (raw, json)
Hash identifier: GwVShyCDCNh4OCqYVoCV9shnAUf6Lre9oXs/cL6gb/U=
Subject key identifier: 08:0E:51:F4:3B:F1:51:9A:B0:62:4F:5D:F6:4F:6D:29:BF:93:07:B0
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1E54
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/CA5R9DvxUZqwYk9d9k9tKb-TB7A.roa
Signing time: Mon 16 Jun 2025 12:40:00 +0000
ROA not before: Mon 16 Jun 2025 12:40:00 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7764 (0x1e54)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 16 12:40:00 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=080E51F43BF1519AB0624F5DF64F6D29BF9307B0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:97:26:05:44:c7:d1:f6:ed:87:dd:31:82:0d:
bb:01:fd:1b:7c:03:dc:55:fd:83:ed:a0:6d:9b:d4:
f8:d1:28:97:42:0e:38:2f:94:52:5c:5c:e5:2c:46:
80:b2:9e:3e:3f:69:ca:bb:3e:27:27:ad:c0:f6:43:
05:7d:f9:37:cb:9d:a9:1b:1f:f3:18:11:fc:13:86:
f6:fe:da:db:a0:8d:b9:cf:0d:7d:9c:28:3b:0b:e5:
58:d8:80:ac:63:1a:49:e7:b1:fd:f1:7e:c5:09:7a:
3b:46:c9:f0:82:0a:95:61:42:52:5b:96:b6:7d:c3:
58:84:85:a1:df:fe:13:c0:a1:c6:23:3b:96:a3:bf:
91:85:5b:5e:23:da:85:8a:6f:ec:ae:a3:6e:3f:05:
d7:c4:a5:cb:53:03:16:5b:af:09:b2:fb:77:f6:ec:
7a:f5:1e:6a:30:11:8b:98:45:f7:ed:b1:7e:f0:40:
70:46:d1:80:3c:08:ce:9e:7a:dc:d6:5f:5e:08:47:
54:14:25:18:f1:2a:23:e3:04:83:12:33:c1:ee:08:
f3:f5:a2:1c:32:ef:56:af:47:e5:7b:14:3b:46:14:
a9:94:3f:9f:13:8a:6a:dc:58:09:72:0f:75:ce:69:
9a:76:af:6b:5d:2e:9f:4e:28:e5:cd:6b:28:87:47:
8d:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:0E:51:F4:3B:F1:51:9A:B0:62:4F:5D:F6:4F:6D:29:BF:93:07:B0
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/CA5R9DvxUZqwYk9d9k9tKb-TB7A.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
9b:80:1c:d4:cf:c4:84:61:46:fa:96:33:93:ec:d4:a2:a3:01:
4a:0b:59:db:8e:f5:14:53:82:96:cb:5d:3f:7b:2f:06:7f:d7:
9c:b0:83:1c:16:f8:d5:97:b6:00:ea:6e:06:8b:57:ba:a9:d5:
c0:97:e2:67:96:d3:a4:fe:36:fc:c0:48:d0:e3:28:8f:1b:7a:
85:45:cb:d9:6f:70:06:4c:f0:37:2f:b1:a9:14:37:8a:f3:63:
30:e1:db:74:b8:a7:2e:22:bc:c3:69:58:b3:3c:b3:54:a4:e7:
13:ed:fa:9c:65:a5:c4:b2:a1:32:cf:c5:f3:45:3d:84:1d:ff:
02:27:47:f3:f4:95:9d:e5:a9:44:fc:50:bc:97:71:02:b4:c6:
86:a9:5c:ea:36:5d:be:eb:ae:7d:b1:80:3a:17:37:f9:1e:1b:
15:e8:7a:1d:a6:a3:42:60:08:06:c0:67:c1:cb:cf:8f:7d:43:
cb:31:e6:03:bd:65:12:3d:29:d6:06:ea:79:f7:4b:6d:d7:8a:
25:d7:02:de:98:cd:47:d3:a6:2a:2d:26:81:50:0d:0b:23:30:
c5:14:83:f0:5d:3e:61:75:69:a4:8f:9b:3f:2a:2a:53:ec:fd:
0f:a2:ec:28:a4:52:cc:7d:4d:5a:b5:a3:08:4b:53:6c:69:90:
94:f0:79:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 13:41:15 2025 by rpki-client