Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/IGaYnr7gigZZmN5Tc-PvcHjgi04.roa
File: IGaYnr7gigZZmN5Tc-PvcHjgi04.roa (raw, json)
Hash identifier: DDMfCtvZLWHBeR6nSqHECYmCJb/0w6bbxkd+0b1Pt+8=
Subject key identifier: 20:66:98:9E:BE:E0:8A:06:59:98:DE:53:73:E3:EF:70:78:E0:8B:4E
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1D9C
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/IGaYnr7gigZZmN5Tc-PvcHjgi04.roa
Signing time: Sun 15 Jun 2025 13:40:01 +0000
ROA not before: Sun 15 Jun 2025 13:40:01 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7580 (0x1d9c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 15 13:40:01 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=2066989EBEE08A065998DE5373E3EF7078E08B4E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:12:52:46:0c:a9:5c:38:ac:61:65:29:db:bc:
6b:a9:f5:a3:48:23:60:26:ee:2c:5b:29:bc:07:13:
c8:c5:2e:76:db:4c:d3:08:12:7e:6b:e3:b0:e3:d3:
0b:d8:7d:f1:3c:87:7e:64:5a:2e:28:08:26:f0:73:
74:54:cd:e6:ee:56:35:47:9e:fe:de:9f:71:3b:31:
c9:cf:26:0c:7b:0b:1d:f4:f6:f2:24:a2:c5:a9:b0:
a4:6d:1a:47:66:25:4e:a2:2a:3f:65:dd:a5:0e:8f:
9c:33:92:7c:44:9b:37:32:ac:eb:8a:ba:f5:dd:14:
15:0c:2b:a9:96:3d:2a:29:c9:f8:3d:86:23:8d:ac:
f6:60:7a:d8:b8:e0:d9:26:25:3f:84:11:9e:b6:00:
28:6c:c5:f7:58:20:5f:67:b2:4e:63:34:a7:28:65:
4d:c0:74:21:89:2f:bd:e3:3d:5f:13:60:7b:1f:54:
8e:bb:ff:ae:e7:4d:e3:2b:b9:8a:e4:d9:6b:e4:e4:
49:76:bf:cf:8a:b9:13:18:c3:c5:93:34:17:a8:2a:
83:ed:07:6c:9e:26:a2:82:2d:02:e5:7f:6a:6c:49:
c4:eb:b8:d4:3c:e1:54:aa:5a:b6:e7:a2:83:52:af:
db:df:12:d9:3b:5b:aa:38:d4:73:de:19:cf:89:38:
32:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:66:98:9E:BE:E0:8A:06:59:98:DE:53:73:E3:EF:70:78:E0:8B:4E
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/IGaYnr7gigZZmN5Tc-PvcHjgi04.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
ae:04:3b:28:ea:5f:b2:72:d3:84:ea:ef:2d:f6:5d:a9:4e:0a:
1c:8f:e5:c5:3e:95:14:98:5e:a1:91:f3:64:4e:e3:93:b7:38:
1b:5a:bd:76:b2:ab:5e:6b:fa:96:6a:c8:99:b9:62:2f:ee:1a:
24:ca:7f:67:08:0b:fe:5c:fd:a1:39:fa:5e:d4:e8:56:d0:a3:
42:f4:f4:1d:79:a0:45:69:05:e8:ee:a3:6b:26:82:30:11:06:
90:b7:9b:e9:52:a7:39:45:92:3d:03:1c:9f:a3:64:f8:03:8e:
34:d7:8c:65:71:7c:74:0c:88:1f:9a:4d:f1:c1:eb:6a:cd:f8:
be:6e:29:18:bd:2e:e1:3d:1e:a7:29:bd:94:69:0a:84:e4:e8:
b0:a0:e4:81:60:34:1b:34:50:59:3b:45:8d:3e:cd:1b:fe:1f:
5b:d9:06:6a:7d:19:7f:07:7c:cb:43:7e:fd:e7:4d:6d:fd:77:
90:8d:ed:70:ec:37:1b:9f:67:ce:d1:65:25:f8:4f:fd:7a:8e:
26:aa:48:fc:f7:25:4e:95:64:19:82:cb:00:84:f9:8c:e2:72:
5d:3d:83:73:3c:0b:e3:b3:c6:e2:98:07:75:39:7a:5e:44:05:
1c:0d:ae:07:0a:7f:f1:93:e6:9c:44:5d:28:7a:91:da:99:bf:
a5:5d:60:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 23:10:01 2025 by rpki-client