Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/U2UFTSRjFFzn-tpc_q54nAiSLQw.roa
File: U2UFTSRjFFzn-tpc_q54nAiSLQw.roa (raw, json)
Hash identifier: B8/vDE2VsPzsm8jwiV/nU8t4/EVyR9lIXcLi2WBV0zE=
Subject key identifier: 53:65:05:4D:24:63:14:5C:E7:FA:DA:5C:FE:AE:78:9C:08:92:2D:0C
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 2468
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/U2UFTSRjFFzn-tpc_q54nAiSLQw.roa
Signing time: Wed 25 Jun 2025 02:43:34 +0000
ROA not before: Wed 25 Jun 2025 02:43:34 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9320 (0x2468)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 25 02:43:34 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=5365054D2463145CE7FADA5CFEAE789C08922D0C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ae:0b:b8:73:08:92:94:ce:0b:bf:bc:57:d4:
35:37:3d:96:fa:ef:12:2a:b2:88:f4:d3:83:e9:b4:
13:19:ff:62:f0:8b:cf:f1:9b:5f:f1:3c:ef:05:73:
45:0a:f1:02:7c:fd:e7:11:51:f6:9d:8a:1c:1a:4e:
e6:c0:7a:33:49:78:f6:26:3f:0a:73:3b:01:a0:9e:
31:3e:dd:e4:32:1b:ce:23:66:94:55:8b:d7:fb:92:
da:00:98:bf:98:6f:29:e3:6e:3c:eb:3e:ac:d5:0f:
67:78:4b:ca:c7:bb:65:34:eb:8a:25:0b:26:1f:bc:
ec:db:b1:d0:bd:55:ba:36:b3:fa:2f:96:a6:ed:ca:
47:35:22:d3:87:88:33:0e:9d:33:00:46:e1:89:d7:
a0:d1:19:d1:75:b9:55:c7:70:e8:dd:25:e2:8c:a9:
dc:78:63:62:1d:0e:9f:01:2b:0f:4b:be:d4:09:bb:
ac:58:ce:3c:96:16:0f:2e:3e:77:df:02:ac:c0:36:
48:ce:ef:c6:af:9d:db:d9:60:06:a6:83:d1:c5:89:
10:04:ab:09:18:ea:2e:c5:63:03:e4:92:a8:91:97:
c9:cd:30:c8:74:09:2c:e1:19:48:4c:c2:9a:0f:7c:
35:93:4e:78:15:c0:a2:30:a3:e9:78:52:27:88:73:
9d:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:65:05:4D:24:63:14:5C:E7:FA:DA:5C:FE:AE:78:9C:08:92:2D:0C
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/U2UFTSRjFFzn-tpc_q54nAiSLQw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
93:d5:81:84:38:e5:64:4d:61:4d:37:77:3f:c3:4c:47:15:bf:
23:19:d4:58:54:a5:6c:12:4b:79:97:24:ef:70:c3:b5:9b:f8:
9c:cb:05:4e:48:df:f8:05:3b:fd:c7:cd:68:c5:65:b6:6a:1b:
0c:8f:d9:ea:3d:7e:08:03:d7:81:b1:6a:c1:68:2c:5b:30:5a:
ba:09:ed:b4:8d:79:46:12:60:4c:21:f0:7d:a8:d2:40:45:36:
fd:8d:28:a5:ae:29:6e:20:33:a1:5e:ac:a9:83:da:d4:18:cf:
48:01:07:3c:cf:a7:53:3d:87:ff:31:9d:12:ba:5c:a3:58:db:
ce:19:55:be:43:3f:bf:a5:47:0d:a8:f2:b8:0b:eb:81:46:57:
bf:22:9d:60:e2:88:da:74:4c:0a:fc:db:c0:3a:05:3a:b2:26:
14:cb:56:01:cf:9c:af:d6:6e:37:17:31:f5:80:52:b1:5a:24:
8b:ce:50:34:45:7f:90:b6:12:a2:30:e5:1f:97:ec:6a:e3:5c:
74:60:75:b7:70:0a:b7:a7:92:9f:a4:ee:8f:96:4f:98:66:63:
73:9c:4a:b7:09:98:be:2a:64:af:bd:d1:15:b3:23:88:16:79:
ab:32:79:14:e8:f1:cd:9c:78:82:13:ea:cb:aa:46:c4:57:96:
6d:fe:2e:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 13:39:32 2025 by rpki-client