Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/Kvupqf0IdGXJrHOQRMVtvcwdGWo.roa
File: Kvupqf0IdGXJrHOQRMVtvcwdGWo.roa (raw, json)
Hash identifier: j4/7h+JbHyZ5zrhJw2II9WELlCGdBAzNwkIwDa7ImJo=
Subject key identifier: 2A:FB:A9:A9:FD:08:74:65:C9:AC:73:90:44:C5:6D:BD:CC:1D:19:6A
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0F40
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/Kvupqf0IdGXJrHOQRMVtvcwdGWo.roa
Signing time: Tue 27 May 2025 10:08:47 +0000
ROA not before: Tue 27 May 2025 10:08:47 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3904 (0xf40)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 27 10:08:47 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=2AFBA9A9FD087465C9AC739044C56DBDCC1D196A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:1a:6c:6e:18:96:43:a2:ba:af:c1:ab:b1:00:
73:b3:f6:9c:04:e4:0c:0c:3c:26:cb:86:ef:03:0c:
a7:f5:a6:57:50:d9:65:2c:26:b3:db:6d:43:ca:47:
77:f7:93:c4:5a:1e:ad:0f:2e:53:cc:50:9c:35:89:
e4:b2:3c:b5:4a:a4:7e:f2:76:63:a8:e9:28:de:a2:
23:dc:b4:af:2b:f2:26:e2:c2:72:81:aa:94:dd:31:
4a:6b:3f:7b:f8:c7:c1:3c:5f:d6:6f:c1:a9:37:2c:
90:64:16:08:28:61:1a:7f:3d:96:f5:0a:6a:59:76:
95:b5:69:57:ca:37:de:b4:5f:e2:53:9b:cf:df:4d:
06:87:e3:c8:b8:82:e0:51:90:4f:67:00:f2:ac:0d:
00:4f:0c:1a:b9:07:13:a7:57:8f:be:47:47:76:0f:
13:f1:8f:34:9d:52:b4:86:df:af:bc:83:84:65:db:
e7:fa:b9:47:75:66:33:6d:6d:56:01:9e:cf:0f:33:
1e:3d:89:8f:4b:e8:bf:8d:c6:22:7c:47:6b:43:f4:
ec:84:20:83:67:f5:28:f7:bb:4b:3d:4e:09:19:f5:
de:29:f9:70:64:d1:7c:d0:2e:c5:8e:4a:2d:e4:f9:
42:3b:34:8f:fb:ca:ca:d0:2b:04:7d:ad:87:ad:ef:
41:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:FB:A9:A9:FD:08:74:65:C9:AC:73:90:44:C5:6D:BD:CC:1D:19:6A
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/Kvupqf0IdGXJrHOQRMVtvcwdGWo.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
11:75:7d:57:06:df:f3:e4:2a:7e:be:5c:d0:92:ba:ef:8e:8f:
e5:ff:42:4e:22:a8:9a:a2:00:7c:59:a5:37:74:5b:4d:65:e0:
28:b3:62:db:dc:7c:57:ac:e6:a1:5f:a2:58:90:43:77:63:0e:
90:4c:97:94:85:98:90:48:ff:ce:20:2a:f0:18:1b:cb:29:da:
8e:e6:68:5e:04:03:8f:a7:0c:89:c4:57:d8:2d:7e:45:f8:23:
9c:9d:33:88:f0:19:6a:f4:bb:10:1f:e8:0b:0a:ad:d5:c6:24:
32:1f:24:53:b9:b3:6e:0d:da:0c:8b:a5:05:c4:4f:b7:57:ae:
cd:57:ce:bb:7e:dd:42:ca:87:a0:ef:f0:a9:0d:fb:da:18:29:
82:10:3f:bd:e9:39:57:39:b9:60:ff:ae:06:28:d6:2f:42:6f:
42:f4:6b:e1:32:21:3b:73:06:bb:81:6d:35:92:04:f5:8a:d5:
83:f4:68:aa:e9:63:65:68:a0:09:bf:82:0d:f5:98:24:c2:87:
e6:bf:3d:51:e2:65:9e:f6:4a:64:ed:50:ca:40:6d:27:50:4a:
7a:b7:59:8d:c3:92:44:31:2d:2d:4f:70:20:f8:e2:a9:a8:a5:
07:35:b8:43:40:89:75:34:77:c4:1a:3c:e7:ac:62:61:7b:58:
b1:69:c6:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 20:28:25 2025 by rpki-client