Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/EqmyZGEurwuqphVXnvMWopZQ_MU.roa
File: EqmyZGEurwuqphVXnvMWopZQ_MU.roa (raw, json)
Hash identifier: fetyO9G4BKO+19g235Zx+8oBvhvdQe6q9peSvUVbsrw=
Subject key identifier: 12:A9:B2:64:61:2E:AF:0B:AA:A6:15:57:9E:F3:16:A2:96:50:FC:C5
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1744
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/EqmyZGEurwuqphVXnvMWopZQ_MU.roa
Signing time: Sat 07 Jun 2025 02:40:16 +0000
ROA not before: Sat 07 Jun 2025 02:40:16 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5956 (0x1744)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 7 02:40:16 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=12A9B264612EAF0BAAA615579EF316A29650FCC5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:39:99:a9:00:70:31:a0:3f:b0:e4:75:d1:f1:
6f:ce:ad:d4:21:28:2f:bd:f5:3b:32:0b:0d:25:c0:
ec:1d:14:27:70:07:24:84:e4:4e:22:ab:62:f6:05:
49:0d:fa:c0:e7:d8:4c:65:18:79:51:8d:de:f2:27:
45:e9:c0:07:96:06:a0:73:66:ff:26:27:62:e2:30:
4d:95:93:f3:0d:b6:4b:93:59:04:9f:75:b0:bf:8d:
86:f8:9b:df:a9:3c:e7:11:2a:c1:e4:d4:46:13:ab:
79:52:b4:72:e8:72:e4:38:02:4a:ca:eb:22:13:86:
be:a1:65:7a:e1:e0:ca:cc:eb:b6:7a:79:86:f4:47:
19:cc:ad:b0:00:89:e9:c2:b9:14:ea:1e:6c:d1:82:
42:6d:d5:11:4f:2a:fa:e7:a6:02:fe:77:a2:4c:48:
ed:61:42:57:5b:84:40:f6:27:e7:46:58:8c:df:b5:
1c:cd:69:72:ed:33:24:ee:c2:72:74:45:48:c5:f3:
9b:f1:55:fd:dd:70:4a:ad:c7:8c:32:d9:6d:de:99:
8d:b3:45:44:b8:fc:d1:f6:2d:76:7b:e3:1d:37:ce:
66:ea:4b:04:cb:47:be:5d:99:fb:c9:69:1e:0a:14:
4d:75:7b:70:21:6f:9f:73:b8:c8:e2:5b:73:0f:92:
f9:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:A9:B2:64:61:2E:AF:0B:AA:A6:15:57:9E:F3:16:A2:96:50:FC:C5
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/EqmyZGEurwuqphVXnvMWopZQ_MU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
9e:fa:11:3f:60:79:d8:77:53:9f:a7:be:46:9a:01:28:9e:43:
da:78:23:45:4a:77:fa:f9:43:dc:f2:f9:d8:98:cd:a9:98:5d:
d8:60:cd:5e:cd:ef:a8:37:54:fe:9b:cf:51:93:14:fd:f0:d8:
e7:49:fb:37:63:6c:ae:cd:84:dc:f8:fb:1e:76:80:1e:5c:6d:
2f:7a:04:e4:2b:c2:ca:2b:ba:8d:dd:26:8c:10:c9:99:2d:09:
93:4d:de:00:61:ea:04:53:dc:ae:db:f2:6a:f5:fc:b5:ec:31:
a7:6a:7e:70:89:4f:5c:12:b1:03:d7:a1:5f:51:44:38:bc:bc:
ab:a6:e9:5c:90:cb:c6:f4:4f:4c:08:bd:48:97:ec:7b:10:3d:
e0:bd:31:d4:6b:9e:6e:99:77:86:2f:c0:38:f0:9b:38:5a:73:
15:e5:dc:99:23:ec:34:68:bc:c2:a4:4a:27:59:fc:81:86:1e:
60:6b:7f:ae:59:6b:74:57:4e:3a:91:c8:ce:c1:ae:d8:24:9b:
06:86:17:71:4d:73:f3:36:9b:7b:96:e6:b9:28:69:dc:75:55:
96:c8:ee:6a:99:dd:85:f3:d6:4f:b8:4f:ed:f4:b5:93:f3:19:
11:0a:53:0c:e5:77:d6:1d:a4:12:83:bb:a3:c0:a8:4b:99:11:
cc:d0:3b:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 18:23:50 2025 by rpki-client