Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/O1aTWsR_KbuSwY9QqzbBfvLnwz8.roa
File: O1aTWsR_KbuSwY9QqzbBfvLnwz8.roa (raw, json)
Hash identifier: Ygg2uTS+ji+ewdeBVi9/UbwOY9vLtmrPQokBS4SVuIg=
Subject key identifier: 3B:56:93:5A:C4:7F:29:BB:92:C1:8F:50:AB:36:C1:7E:F2:E7:C3:3F
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1EC0
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/O1aTWsR_KbuSwY9QqzbBfvLnwz8.roa
Signing time: Tue 17 Jun 2025 02:10:03 +0000
ROA not before: Tue 17 Jun 2025 02:10:03 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7872 (0x1ec0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 17 02:10:03 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=3B56935AC47F29BB92C18F50AB36C17EF2E7C33F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ec:a7:b6:ef:70:bb:0f:b1:79:5e:96:23:16:
85:4a:64:ea:f8:f9:0e:cd:41:75:0c:db:3c:46:c5:
c8:73:74:15:d3:f4:c4:01:7e:12:10:63:10:b1:87:
67:6d:48:ba:85:08:53:48:94:f1:26:a9:d5:f3:f9:
e4:09:cc:61:06:97:b0:fd:f7:af:80:11:6a:a1:45:
a7:fc:36:fd:2c:7a:a1:25:90:6c:4c:e9:54:e2:9a:
10:e1:5a:f0:fd:33:86:16:f2:3c:59:92:a8:cf:2c:
05:86:88:ec:48:f8:af:a1:88:b3:e3:8a:35:79:09:
41:11:b1:24:d8:19:cc:d5:5c:3f:4f:31:ec:4f:d4:
fc:1a:79:15:de:54:0d:0c:20:9a:ba:c9:c3:45:ed:
1a:3d:8c:1a:59:d8:99:1f:93:5e:b8:6d:ce:3a:97:
57:3d:b1:3d:23:80:c1:5a:e5:d8:42:7f:f3:15:9f:
f1:32:55:c5:5a:f9:21:8f:43:20:13:44:81:68:57:
af:c9:b6:f2:6d:dd:37:87:b2:c6:a0:02:a5:07:5b:
c2:cd:2c:2e:2e:9f:6f:92:7a:dc:d2:e0:28:ac:88:
b4:b9:28:27:ad:16:7a:ab:a0:8b:d5:b4:21:68:70:
77:9f:a1:d4:5b:75:a7:61:34:cd:1e:68:aa:8d:18:
f1:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:56:93:5A:C4:7F:29:BB:92:C1:8F:50:AB:36:C1:7E:F2:E7:C3:3F
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/O1aTWsR_KbuSwY9QqzbBfvLnwz8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
3e:a9:60:73:e6:77:69:e6:36:ab:4b:8c:ec:a3:49:14:53:59:
09:f3:1a:3a:70:75:2a:f3:5a:ab:f8:89:be:10:1b:13:17:e3:
00:a5:67:c1:e4:76:72:48:d9:15:db:c1:14:ee:9b:77:91:80:
c4:68:c6:0f:96:9d:05:6b:eb:bd:bd:74:2c:8e:9f:76:f5:d3:
7b:93:d6:0c:ed:b8:bc:71:3a:5a:94:d2:ca:24:44:21:ce:3a:
33:2f:f6:bf:9e:80:73:2d:d4:43:7c:f9:d2:4c:94:13:0f:30:
b3:fc:5e:6d:4e:78:84:47:cf:63:8f:1d:25:02:62:8d:cc:33:
c7:4b:94:4a:99:5d:21:b0:22:25:63:10:00:34:bf:20:b0:bf:
59:68:83:ec:63:8c:5f:17:61:7c:d4:da:fe:97:84:37:2d:8d:
08:77:1c:b2:d3:22:8e:b5:14:0f:50:64:6a:56:32:2a:6f:a4:
3a:ea:33:55:87:a6:40:45:4a:6d:98:20:d3:87:29:72:3e:50:
1a:3a:b5:06:49:88:a6:a3:59:f2:24:a3:46:09:f2:6c:f7:01:
2e:fb:c9:2e:f7:f1:ac:79:55:56:75:24:77:ec:f9:94:61:02:
2c:b6:12:0b:5f:c6:29:36:a3:8b:d4:d5:28:10:9a:ca:78:cb:
63:35:59:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 13:22:10 2025 by rpki-client