Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/Pk7PBG5cq8dWfX38HPfH7BbWvhk.roa
File: Pk7PBG5cq8dWfX38HPfH7BbWvhk.roa (raw, json)
Hash identifier: T5a0APa7gAS+N/NEfk+sxo39Kw8dhzcobpAale/SsGs=
Subject key identifier: 3E:4E:CF:04:6E:5C:AB:C7:56:7D:7D:FC:1C:F7:C7:EC:16:D6:BE:19
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 2064
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/Pk7PBG5cq8dWfX38HPfH7BbWvhk.roa
Signing time: Thu 19 Jun 2025 13:01:17 +0000
ROA not before: Thu 19 Jun 2025 13:01:17 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8292 (0x2064)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 19 13:01:17 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=3E4ECF046E5CABC7567D7DFC1CF7C7EC16D6BE19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:14:c8:e7:a4:c2:a9:d4:bd:b9:b1:28:58:1b:
c5:3e:c9:67:c7:db:2a:8c:4e:82:a7:3d:a7:93:6f:
5c:ad:ba:35:0e:77:8d:10:09:92:92:f8:8b:39:b4:
1d:78:4f:f8:cd:38:db:81:57:0b:2a:82:5f:99:54:
25:92:d5:4e:2e:3e:24:79:3c:26:be:e4:db:51:e0:
ff:05:7d:de:b9:9b:84:08:05:3a:7c:6d:ca:e4:45:
4f:86:bc:40:cb:e5:2d:a2:a2:9a:e9:78:94:b3:dd:
f6:b7:bc:56:22:e3:10:91:16:38:d3:9c:7c:c7:6a:
2b:57:7a:5b:34:d1:29:2e:21:bc:4d:af:15:85:09:
51:b0:61:0a:22:c6:5a:7b:43:fd:c2:49:04:0c:fa:
b3:e2:d1:c9:8c:ac:b1:63:95:c8:18:3a:0d:50:71:
2a:bb:9c:c3:ae:b1:2a:d9:b7:19:b0:3b:d6:36:16:
f2:5d:99:a3:15:4b:6f:d4:c2:f8:8e:68:d0:41:6e:
f3:3e:b0:db:8e:51:bc:d0:16:2b:c9:12:5a:58:4f:
67:f6:14:e4:17:c9:5c:1d:80:71:8d:f7:c4:7b:ae:
9e:d2:a9:88:3b:a7:50:5d:7b:62:e4:2b:88:a9:6e:
27:6e:49:a5:45:5d:dc:d8:8a:bd:17:9f:5f:b7:5e:
f0:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:4E:CF:04:6E:5C:AB:C7:56:7D:7D:FC:1C:F7:C7:EC:16:D6:BE:19
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/Pk7PBG5cq8dWfX38HPfH7BbWvhk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
a4:b2:c4:76:be:b3:ed:d4:68:44:d3:1e:79:41:0f:7a:49:1f:
cf:ad:55:b2:ca:09:eb:3c:f3:15:df:b3:93:b6:be:28:33:53:
06:5c:a6:f4:fc:da:6c:e6:5d:4c:46:b1:02:06:ea:d6:fe:b7:
52:18:8a:33:90:54:0a:ae:57:c2:5d:c8:0d:5f:d6:16:ef:05:
95:b5:37:95:6b:b8:75:37:19:a7:82:38:5e:38:0a:aa:78:08:
38:e6:a7:c6:88:46:14:a4:b8:0b:f9:4f:bd:5c:68:e7:c2:d9:
f2:7d:09:df:90:57:df:2e:db:fe:07:41:b9:d5:93:55:b2:95:
94:b6:31:7a:21:63:5d:94:16:84:59:87:ab:5b:e0:93:fe:d3:
e7:38:3b:b8:15:10:d9:c0:27:89:3e:5c:bd:5f:48:2d:29:79:
82:51:41:c3:e1:cb:8e:21:73:6a:45:df:2f:20:bb:d9:8e:b0:
6d:dc:87:7d:66:e0:94:7b:8e:01:a2:e4:4d:ad:e9:02:eb:e4:
f9:95:bd:aa:dd:f5:bd:c0:66:a3:28:e6:f1:5b:bc:82:a6:62:
00:e8:c9:9e:de:8e:a0:f5:f1:8b:94:58:6a:72:22:d6:1b:e5:
a0:f2:34:d7:f8:53:7e:ea:3b:8d:7e:76:d1:88:94:39:61:9e:
30:24:f2:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 19:09:00 2025 by rpki-client