Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/ICcM2LOzsqIVq3cj1qNsKtjC1gQ.roa
File: ICcM2LOzsqIVq3cj1qNsKtjC1gQ.roa (raw, json)
Hash identifier: 98YEHWVrrJMM1DJIWPN+BQ7UhnHPSxnGAXx+F607NJw=
Subject key identifier: 20:27:0C:D8:B3:B3:B2:A2:15:AB:77:23:D6:A3:6C:2A:D8:C2:D6:04
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 230C
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/ICcM2LOzsqIVq3cj1qNsKtjC1gQ.roa
Signing time: Mon 23 Jun 2025 07:11:51 +0000
ROA not before: Mon 23 Jun 2025 07:11:51 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8972 (0x230c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 23 07:11:51 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=20270CD8B3B3B2A215AB7723D6A36C2AD8C2D604
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:7a:39:2c:f0:a6:81:ef:ef:9e:08:b6:06:0c:
62:41:e9:93:cc:e8:ed:4a:15:b4:3d:8a:36:5a:d3:
77:a1:09:69:30:97:b0:15:ca:9f:e7:82:22:e8:d0:
aa:c0:1a:fb:62:c9:28:86:9a:56:4c:af:f7:92:bc:
40:fa:82:30:44:26:d6:8c:87:66:79:eb:8f:45:a3:
21:db:16:0f:9f:d7:df:1a:48:2b:06:e9:29:f4:a4:
5e:07:4e:4e:e3:d5:66:0e:a8:ef:6c:c5:60:b0:33:
5b:8c:98:08:ce:27:88:34:8d:1c:0d:8a:ea:d3:7e:
5a:dd:7d:a1:6e:d7:69:29:eb:81:78:fc:94:3f:82:
e1:5e:2a:58:c0:a8:fd:12:5b:32:94:59:fc:7c:75:
7d:41:bc:67:ec:2b:a8:ac:75:0c:29:e3:07:ce:ed:
e9:2f:7d:f3:6f:45:aa:2a:ff:43:3c:d7:f4:bc:1f:
c7:7f:10:aa:bd:ec:13:80:4d:5f:1d:37:e2:d3:67:
db:43:f5:fd:bb:5a:4c:21:8a:03:b9:93:84:e8:dd:
aa:7b:f0:49:58:dc:cb:25:12:e3:de:62:35:70:41:
3b:9a:f4:0d:a2:ef:63:2e:40:20:99:13:4f:79:86:
96:c2:0d:4e:aa:e0:37:c1:cb:db:a7:40:27:2a:cd:
51:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:27:0C:D8:B3:B3:B2:A2:15:AB:77:23:D6:A3:6C:2A:D8:C2:D6:04
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/ICcM2LOzsqIVq3cj1qNsKtjC1gQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
59:d8:83:35:7d:a2:ec:e1:d2:64:b4:e9:5c:12:09:c3:05:64:
80:d7:8e:31:b4:41:8e:a6:1f:ba:72:e5:d2:1e:0b:0f:92:a3:
e3:e3:d3:73:51:f0:bc:82:a3:9c:a0:6c:d9:d2:99:19:c1:1c:
0a:e4:91:d9:c1:90:3a:f1:1e:44:5b:12:f8:b9:27:f7:37:9a:
65:a1:70:c1:91:66:24:a5:bb:a9:44:bf:12:8a:a4:2f:4b:75:
c7:0d:b9:79:70:2b:81:54:5a:34:37:ee:d5:2b:1a:01:e1:a6:
3a:d3:90:76:f6:20:a8:d0:f0:0d:14:9c:c0:49:86:b1:96:86:
c9:c7:c4:8d:44:16:64:9b:06:8a:32:47:3b:c3:45:b3:23:22:
71:21:51:bf:7e:0d:ea:49:f1:55:f9:c7:c4:ae:7b:32:73:f3:
a7:85:f6:ad:dd:89:f6:ce:98:a2:5b:d5:32:a9:79:54:8c:a8:
e3:bc:bc:0b:ce:0b:ac:78:30:48:23:96:cb:be:3e:ba:9d:2e:
ea:f2:6d:cf:ca:f7:da:41:ff:38:c4:30:f4:8a:5f:0d:dd:0a:
88:87:13:c8:0b:ff:ad:01:2c:36:cb:c5:2e:23:9e:75:07:d8:
74:e5:ae:d7:f6:6e:1f:ab:9c:85:da:8f:d2:2b:8f:a7:b8:85:
eb:4e:42:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 23:35:34 2025 by rpki-client