
Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/RcOwFMGwo9zavLcfnAUCgHrhJjQ.roa
File: RcOwFMGwo9zavLcfnAUCgHrhJjQ.roa (raw, json)
Hash identifier: BQkCWRY9nEe95poC7aD/cCEf1usWnifEeGuMl3vGfpI=
Subject key identifier: 45:C3:B0:14:C1:B0:A3:DC:DA:BC:B7:1F:9C:05:02:80:7A:E1:26:34
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1824
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/RcOwFMGwo9zavLcfnAUCgHrhJjQ.roa
Signing time: Sun 08 Jun 2025 06:39:34 +0000
ROA not before: Sun 08 Jun 2025 06:39:34 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6180 (0x1824)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 8 06:39:34 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=45C3B014C1B0A3DCDABCB71F9C0502807AE12634
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:97:78:3d:4c:98:85:c0:9e:22:c1:93:c4:be:
cb:c5:3a:5c:00:5f:28:cf:54:b9:33:4f:9d:d5:63:
99:25:39:05:24:fa:65:14:4e:b0:5c:70:d5:21:d4:
28:a8:f9:79:51:16:62:ee:e4:37:2e:04:f6:6f:8d:
0d:82:78:8d:a2:72:70:db:80:07:fa:0e:f4:92:c7:
3d:ce:6c:19:c3:d3:b0:6b:e5:2a:53:87:2e:bd:4c:
9d:0e:fb:72:f2:ab:e0:b4:9e:64:82:b4:b6:10:a5:
d3:a1:1f:4e:23:8b:b2:44:e8:a5:09:22:4b:34:20:
38:40:d1:03:1f:e9:ef:23:32:37:b7:43:66:72:ed:
15:64:47:94:0b:6b:61:03:f2:ca:e0:c3:51:4c:86:
80:54:50:06:3e:70:6d:3e:1c:26:74:e5:06:69:53:
69:3f:5c:7b:7d:dd:aa:9c:62:c5:d4:cb:82:85:40:
46:a1:8f:19:0a:f5:28:63:37:54:98:4f:d8:9c:c6:
25:c7:45:4b:1f:e4:23:01:75:2e:f1:19:2c:a9:d6:
78:9e:e1:84:86:bc:4a:a5:f5:1e:04:38:97:59:ca:
db:ef:ec:56:09:e3:af:7a:c4:97:65:63:f7:4e:57:
84:f9:c6:94:45:9e:81:87:a6:fe:14:49:48:a6:13:
32:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:C3:B0:14:C1:B0:A3:DC:DA:BC:B7:1F:9C:05:02:80:7A:E1:26:34
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/RcOwFMGwo9zavLcfnAUCgHrhJjQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
0c:8f:92:4e:8b:25:b9:a5:5a:67:f3:4a:d4:53:d9:bf:12:17:
90:28:0e:88:1f:c6:94:6c:34:64:52:a4:02:32:30:84:ee:9d:
29:39:4e:fb:de:6b:6c:d6:13:3b:ed:aa:9e:72:ef:d6:67:d6:
fb:c0:34:ff:27:e2:0a:49:36:3a:0f:33:08:fe:20:30:31:ad:
19:2d:f7:ae:51:bf:97:a4:09:25:98:82:f6:24:40:51:4b:8d:
c5:f5:50:9c:e3:54:23:ff:2c:9d:07:d9:ce:aa:eb:bf:51:f9:
32:03:8b:64:98:9a:c9:b4:48:88:4f:f3:c7:f7:dc:b9:86:3a:
09:79:a1:c6:fe:86:d9:0b:79:a3:06:6f:8f:03:9f:f2:d4:7c:
32:9a:ba:98:c3:36:a3:e4:da:e3:af:b5:e8:fb:11:cb:d3:7e:
77:f8:c6:25:ad:c1:b3:c4:92:6b:5d:cf:00:67:7b:ae:6a:f3:
4d:04:5a:4e:35:45:ba:6e:a6:89:c5:a9:7b:1c:e9:26:bb:ae:
70:db:29:1c:7e:eb:0e:b2:b4:a1:4e:b9:da:8c:64:a6:5f:31:
f7:b0:7e:a0:89:e0:a0:cb:a2:3c:d4:37:d3:28:82:a3:70:6e:
de:d7:8e:4c:72:6d:d0:2d:bc:40:a0:a3:ea:9a:e0:bc:ba:d3:
8a:fb:83:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 03:35:52 2025 by rpki-client