Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/DEulEt7RQrB_9gy1TULSGlfiUcY.roa
File: DEulEt7RQrB_9gy1TULSGlfiUcY.roa (raw, json)
Hash identifier: CbyFtZvVV+0nqzBrDRkeOuESe6q3wtxjZkWr59S61cc=
Subject key identifier: 0C:4B:A5:12:DE:D1:42:B0:7F:F6:0C:B5:4D:42:D2:1A:57:E2:51:C6
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1324
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/DEulEt7RQrB_9gy1TULSGlfiUcY.roa
Signing time: Sun 01 Jun 2025 14:39:08 +0000
ROA not before: Sun 01 Jun 2025 14:39:08 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4900 (0x1324)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 1 14:39:08 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=0C4BA512DED142B07FF60CB54D42D21A57E251C6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:60:ce:e0:c7:dc:5e:eb:e9:30:68:f6:70:d9:
26:3d:fe:e9:18:28:64:00:af:b7:2f:c4:a3:7a:44:
ad:45:92:42:b0:b2:ba:d6:20:91:d2:96:ba:44:03:
23:14:1d:e8:20:5f:c7:e8:f9:81:07:74:70:fd:2b:
5a:fe:45:1d:1b:4b:ca:8c:c6:09:28:20:cc:cb:0e:
47:b7:74:28:e1:a7:b6:5a:2c:45:1d:45:5c:b1:b9:
0d:73:4d:41:31:51:6d:95:cb:8d:b9:d3:73:39:26:
b8:44:67:11:5c:fd:d9:e2:80:ac:b1:50:29:91:bf:
43:72:06:cc:ab:08:19:a6:37:32:79:7f:80:5b:7f:
33:1a:b7:35:7d:a4:64:d3:6b:a7:25:20:07:ba:50:
aa:8a:b6:64:66:9d:dc:90:81:cf:16:db:6c:c3:d6:
b7:91:4c:29:5d:c1:f5:1e:2e:3e:da:0d:83:66:db:
8d:c7:eb:43:d9:fc:ab:d8:28:b4:24:aa:16:56:67:
3b:3f:30:9c:68:63:06:71:7f:ef:d1:4c:bd:01:af:
ec:a3:03:a5:27:48:85:86:b2:ad:fb:c2:80:bd:c0:
64:52:88:08:4e:e3:a6:b5:9e:30:57:8d:0c:0a:e7:
cc:af:0a:fb:ae:3c:a2:a7:72:8b:d1:7d:6d:29:f0:
cc:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:4B:A5:12:DE:D1:42:B0:7F:F6:0C:B5:4D:42:D2:1A:57:E2:51:C6
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/DEulEt7RQrB_9gy1TULSGlfiUcY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
a1:ff:ff:36:f1:52:bd:a0:e4:2f:b5:a9:6d:e5:9e:79:d1:7d:
b7:43:99:9f:23:e7:fb:f3:75:88:8d:3a:56:da:1a:ff:dc:51:
a6:47:49:ed:b7:3e:2d:e0:35:56:ab:b8:05:07:1f:d3:30:0a:
9e:c3:c1:b0:83:c0:5e:d6:22:09:40:d8:e4:fb:03:4f:8c:24:
9b:f1:f6:b8:f2:14:8b:aa:33:20:72:9e:7a:49:85:0e:09:7e:
dc:d7:5c:ba:bc:a1:c1:33:36:94:c2:07:98:4f:3c:08:d2:8b:
87:20:bf:8a:d6:e3:8c:d0:43:bc:3e:c2:81:cb:9e:35:40:8b:
4a:12:39:4f:bf:16:20:0c:71:bc:78:77:07:d3:30:c9:a8:2c:
5e:52:2c:78:fa:78:85:8e:29:a5:6d:80:95:1c:d3:70:68:81:
e0:8a:b5:a9:f9:48:10:2d:a1:13:9d:2e:22:ef:6e:ce:5c:1c:
f6:ff:4b:a5:31:bc:11:56:fc:26:7d:a7:55:cd:be:b3:41:43:
45:88:b6:de:21:c9:f4:0d:6f:0e:db:ea:f5:03:e0:44:40:f3:
2f:67:9f:d1:de:b1:c5:28:d2:a5:1c:5f:f7:1a:43:86:78:2d:
3a:2f:63:d3:17:5d:63:da:af:71:9b:4e:ed:bc:af:8a:ed:55:
ca:a4:2d:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 04:05:29 2025 by rpki-client