Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/QicwHY6zvZXiTkO7FkUIEJBIwmY.roa
File: QicwHY6zvZXiTkO7FkUIEJBIwmY.roa (raw, json)
Hash identifier: GFdmpo7M6irxJCzwSDgLwlqFavX8oiR+uhLte/PNG4M=
Subject key identifier: 42:27:30:1D:8E:B3:BD:95:E2:4E:43:BB:16:45:08:10:90:48:C2:66
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1FE0
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/QicwHY6zvZXiTkO7FkUIEJBIwmY.roa
Signing time: Wed 18 Jun 2025 14:32:10 +0000
ROA not before: Wed 18 Jun 2025 14:32:10 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8160 (0x1fe0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 18 14:32:10 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=4227301D8EB3BD95E24E43BB164508109048C266
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:19:e2:d5:ee:6f:99:53:c4:b0:36:04:76:36:
9e:12:6a:a8:ed:19:d4:91:9f:30:12:19:27:9f:09:
4b:5b:d3:e0:a7:f0:d8:6d:73:4b:18:c4:7b:ef:d0:
b2:46:f5:32:7c:a5:78:f1:ac:51:2c:a1:3a:cf:af:
38:fd:b4:3b:35:a4:f8:1b:91:96:da:01:d8:80:c1:
c5:e5:22:d5:10:6e:d5:bc:0e:0c:ec:15:58:13:8b:
7c:80:b8:66:42:a3:5c:c8:fd:9e:f5:67:ab:8b:f0:
e2:23:32:a7:5a:9a:b1:fc:ee:a6:53:3a:62:d0:96:
55:35:f4:e7:2c:7b:cc:ab:dd:c0:78:25:a4:18:07:
c5:08:46:d2:54:02:e8:3a:3a:37:40:69:2e:ca:81:
19:e1:66:73:fa:97:c9:b4:ea:44:24:62:6e:39:06:
92:39:91:ed:e0:62:9d:ef:97:36:f0:54:e0:c9:d6:
5c:9a:37:a8:4c:ac:12:aa:95:d6:4a:bf:4d:ea:ea:
c3:44:7d:97:27:1c:f7:e7:43:3d:08:9e:66:06:b0:
1a:19:d4:7f:0e:24:82:2e:9f:e5:7b:eb:d6:30:e4:
f0:ed:15:54:6c:97:ca:12:3a:39:ea:7c:b4:82:04:
73:23:22:29:49:df:b3:91:de:05:51:b0:99:eb:fa:
25:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:27:30:1D:8E:B3:BD:95:E2:4E:43:BB:16:45:08:10:90:48:C2:66
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/QicwHY6zvZXiTkO7FkUIEJBIwmY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
38:1f:1e:53:2e:0f:08:aa:dc:c9:0f:00:d3:5f:a7:a9:54:50:
67:50:d3:6f:2c:ac:65:de:74:37:1c:21:f1:d2:c4:c3:0a:c2:
9d:ad:bb:d1:9b:61:6c:90:39:29:5a:43:66:f5:44:1f:e0:58:
af:7d:4e:58:3c:31:67:e2:da:f6:96:33:73:91:83:1a:2b:74:
05:7e:3f:a3:43:81:38:ff:f9:97:64:60:74:2e:70:4c:a6:4d:
7f:54:3c:ec:35:b1:60:68:42:a1:c4:aa:a9:b9:26:c5:e2:86:
4d:cf:ff:d6:1d:3f:e7:42:80:dd:31:f0:11:af:a2:42:ea:58:
32:11:a3:50:b6:da:1b:1e:97:a8:1c:35:fa:b6:f8:40:cd:3e:
5f:f5:d8:13:10:25:87:e3:8c:b0:d2:cf:88:9f:26:77:49:ea:
cf:a7:59:ac:e8:3c:ca:45:95:55:80:6c:9d:72:18:e5:a2:c0:
08:9f:22:cc:df:4c:6a:a3:4a:bc:34:94:37:62:b1:16:88:b4:
a4:e5:ab:cf:77:bc:3a:08:17:ad:f8:eb:4f:81:3b:48:2c:fa:
b6:e1:41:46:70:46:1c:22:e9:96:3e:c5:ef:1f:78:01:3e:d4:
19:fd:2d:aa:ca:cc:53:a0:b8:f3:ca:78:7a:4e:b0:a6:74:14:
51:20:4d:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 23:36:52 2025 by rpki-client