Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/RLau2fJU1MgOPQvZZJzpZEqSu8c.roa
File: RLau2fJU1MgOPQvZZJzpZEqSu8c.roa (raw, json)
Hash identifier: 9VvIhutEmxE0ksTQV1+dlAeJhlpZ0iQswgBolYcYRHg=
Subject key identifier: 44:B6:AE:D9:F2:54:D4:C8:0E:3D:0B:D9:64:9C:E9:64:4A:92:BB:C7
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 2460
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/RLau2fJU1MgOPQvZZJzpZEqSu8c.roa
Signing time: Wed 25 Jun 2025 01:42:08 +0000
ROA not before: Wed 25 Jun 2025 01:42:08 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9312 (0x2460)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 25 01:42:08 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=44B6AED9F254D4C80E3D0BD9649CE9644A92BBC7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b0:cc:c2:9e:69:68:d8:25:fe:6f:95:95:80:
44:e6:6b:21:b1:63:1a:1d:4f:0b:60:5a:d6:95:29:
a7:6c:0d:69:51:cc:90:ca:61:b0:ef:11:37:d6:35:
8b:5e:2e:27:12:d3:1b:e3:73:db:f8:67:34:1e:e0:
99:f9:6b:7e:aa:73:f0:a6:47:a9:74:cf:75:7d:b1:
1a:fa:9a:4f:27:d4:a8:42:d8:a0:3c:40:6d:19:e5:
1a:50:dc:44:46:88:83:f9:f0:02:8e:9d:3e:52:67:
2e:07:26:30:1b:78:48:09:f7:3b:91:e9:66:8c:56:
76:7b:d4:0f:63:dc:27:ac:38:22:59:e8:b5:a4:94:
8a:01:2b:0f:8a:22:18:62:b7:93:b3:4c:13:12:c8:
b1:2a:f0:28:24:29:92:fe:9a:58:8c:1c:29:29:d8:
43:19:ef:16:88:c4:49:97:8f:6c:be:bb:ba:0c:74:
75:0f:53:d0:44:4b:81:fd:0f:f4:55:a4:7e:57:0c:
54:2b:36:bc:89:4c:3a:2d:eb:d4:71:e5:76:c8:4a:
e9:f4:b4:b6:bd:0b:ba:e4:af:57:a9:65:90:c2:de:
70:bb:d7:54:ed:df:00:23:e9:1e:a7:16:ed:17:6e:
9d:39:51:82:20:12:66:fc:4e:64:32:27:ea:b9:db:
01:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:B6:AE:D9:F2:54:D4:C8:0E:3D:0B:D9:64:9C:E9:64:4A:92:BB:C7
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/RLau2fJU1MgOPQvZZJzpZEqSu8c.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
38:1a:ee:78:2a:a5:df:0e:23:e1:dd:2b:93:53:8d:c7:44:5b:
1c:6c:6e:ad:04:58:0c:64:35:71:8d:59:e8:fb:38:71:9d:aa:
40:5c:f4:de:6e:f9:b6:b5:be:15:b8:e7:df:2c:f3:de:00:b3:
00:3c:f8:2d:fe:d1:dc:01:41:48:ca:b1:8f:06:c5:b7:13:38:
c9:90:47:63:2d:d4:36:b1:c6:af:75:f1:5a:73:ec:e7:f2:18:
dd:bf:e6:a5:78:02:0c:07:7d:a8:ff:32:c8:73:bc:56:26:b4:
0e:50:2c:6c:1d:16:2e:ad:ef:92:51:47:1b:07:57:72:03:75:
df:dc:82:a9:91:ef:43:cb:1a:64:50:30:b4:f8:7e:02:9b:06:
b0:a6:90:20:cf:1a:ce:f4:f2:8e:f2:b1:ac:a3:0c:b3:20:1e:
9a:18:95:d9:87:f5:30:72:d0:c8:ee:38:bf:a5:e1:52:f0:b1:
a4:e6:0f:5e:b3:31:a8:79:60:98:e9:9e:3a:1b:49:85:8c:6a:
71:67:67:e4:17:49:92:de:82:4e:fb:86:0b:9f:60:e7:ae:91:
04:54:6a:3f:6e:c3:0a:ab:e2:25:26:64:2c:fa:c0:fe:12:ca:
3c:93:b4:19:6a:9b:e2:a5:56:63:dc:5b:8a:95:be:b9:7f:61:
1c:6e:fd:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 13:41:21 2025 by rpki-client