Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/TNPCfDOfoAtYf5mTi5AgcuI8D3k.roa
File: TNPCfDOfoAtYf5mTi5AgcuI8D3k.roa (raw, json)
Hash identifier: uJD7fGYSxKqIsUu/CwyaMmbC0RpNaGPYz0ivvO+rdHU=
Subject key identifier: 4C:D3:C2:7C:33:9F:A0:0B:58:7F:99:93:8B:90:20:72:E2:3C:0F:79
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1C64
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/TNPCfDOfoAtYf5mTi5AgcuI8D3k.roa
Signing time: Fri 13 Jun 2025 22:39:54 +0000
ROA not before: Fri 13 Jun 2025 22:39:54 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7268 (0x1c64)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 13 22:39:54 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=4CD3C27C339FA00B587F99938B902072E23C0F79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:a4:8b:70:0e:30:2e:e7:f1:ea:68:b4:3e:65:
11:62:9c:b5:42:fa:68:93:ac:d6:d9:7a:30:60:fd:
d4:e0:b3:63:a4:f0:dc:85:40:7a:c5:ea:2d:e9:6e:
50:bc:9d:51:a3:31:d5:49:1e:29:c8:a2:5f:fd:45:
b4:0c:9c:e3:e6:6d:45:1e:12:87:a7:c2:df:af:e9:
6d:90:08:88:8e:bb:61:c1:98:96:42:20:4b:71:b2:
cf:6f:2a:12:7d:b2:e9:cf:cd:7b:06:d5:42:a8:84:
4c:bb:ad:07:28:58:8d:ac:e4:88:c6:46:74:f1:38:
d6:cc:4e:30:d9:0f:45:4e:83:b9:f1:47:0f:7d:37:
57:83:30:d5:1c:2b:f9:4e:47:86:af:58:17:a9:35:
54:cf:27:32:5b:f5:8d:8c:ed:66:f1:f8:6f:80:67:
af:19:53:c9:88:30:85:9e:16:28:01:20:d6:f2:11:
ac:87:95:95:5a:4b:24:d2:4b:f6:bb:d7:b3:1e:80:
e2:8d:40:98:c7:e9:f1:17:d5:91:67:4a:3a:6d:ae:
7f:e9:45:bc:db:03:1c:3b:63:91:39:e9:12:c5:f8:
c2:62:63:41:ad:80:21:54:ae:c2:39:61:f8:2b:ea:
4d:de:b6:e1:55:6c:3a:b0:a0:95:e1:2b:3f:0b:cc:
9d:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:D3:C2:7C:33:9F:A0:0B:58:7F:99:93:8B:90:20:72:E2:3C:0F:79
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/TNPCfDOfoAtYf5mTi5AgcuI8D3k.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
45:cf:e8:43:5b:ac:cb:b5:0a:7a:76:0e:f4:0f:90:2a:2c:ef:
52:36:d5:93:7c:0c:52:14:95:47:a7:79:39:c6:63:6f:2a:8e:
7e:1f:a6:47:95:57:07:24:2d:29:98:a2:65:14:c9:d2:67:26:
56:ad:73:a2:a9:53:6f:49:28:d8:af:03:87:95:6f:11:ce:ae:
d3:ad:28:1e:09:8e:6f:48:ff:69:d4:aa:1a:37:ca:d7:3d:27:
84:5a:a6:f0:00:c8:99:45:8b:38:97:34:2d:43:ce:f1:22:16:
ec:54:e6:ba:77:bf:5d:d6:19:d9:b7:af:65:e6:33:2d:42:24:
29:00:0a:80:85:2c:01:c5:32:ba:e4:53:9b:6e:f1:8a:14:9a:
1a:f7:5a:d5:bf:11:a9:bb:da:7e:6f:19:c2:2b:a9:c6:b5:0d:
d1:ba:1d:50:7b:00:fc:cb:f2:cb:05:c4:e4:30:11:b8:70:d4:
4c:9c:50:df:e1:19:56:e5:69:43:38:22:8f:98:ce:cd:5e:c4:
cc:12:2c:b8:7c:e5:fe:c2:b1:3c:1a:d7:b9:4f:fa:c0:39:69:
13:01:b0:e2:8e:14:c1:18:0d:ad:78:a1:f8:c2:1f:d5:75:f0:
31:e7:00:b8:43:06:c1:3b:b9:08:7a:2b:3f:38:97:77:84:c1:
c9:ae:49:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 02:53:50 2025 by rpki-client