Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/U9Ndm9zTQvNb3QnLYsgDbajHcUM.roa
File: U9Ndm9zTQvNb3QnLYsgDbajHcUM.roa (raw, json)
Hash identifier: erScmmN7MwbBKun+3t/APPYn9CWNR70Fz1mg28dMS58=
Subject key identifier: 53:D3:5D:9B:DC:D3:42:F3:5B:DD:09:CB:62:C8:03:6D:A8:C7:71:43
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 20B0
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/U9Ndm9zTQvNb3QnLYsgDbajHcUM.roa
Signing time: Fri 20 Jun 2025 01:40:09 +0000
ROA not before: Fri 20 Jun 2025 01:40:09 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8368 (0x20b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 20 01:40:09 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=53D35D9BDCD342F35BDD09CB62C8036DA8C77143
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:7c:93:aa:c1:5a:78:fc:5e:28:47:e7:c7:2b:
eb:15:49:7f:32:cc:e0:44:75:0d:e0:07:41:e0:32:
c1:39:02:e5:6d:92:50:3c:da:60:30:73:fc:9a:5f:
e9:65:8c:9a:e7:ab:78:30:a0:fa:46:ea:83:05:ca:
92:10:81:8f:27:1d:e2:29:c8:da:1b:4f:ac:ff:6c:
b9:77:3f:03:e3:03:e2:36:5c:f6:51:6a:7e:bc:80:
b8:2a:90:1f:1c:3d:72:81:12:e0:1e:72:f6:5a:84:
07:bd:79:12:79:47:39:d4:ef:ef:07:8c:c7:16:3f:
76:3d:82:5c:d2:4d:f6:80:e6:81:3b:49:26:f2:a4:
cc:5c:2e:22:5c:ed:b0:9c:7d:e4:84:a8:97:93:e2:
90:2b:e6:7f:50:3e:27:4a:c5:f7:1b:51:7f:ee:0d:
b9:83:f6:a4:3e:32:59:29:28:76:73:e6:b5:6b:56:
41:67:13:0a:d0:21:bb:38:70:70:80:9b:94:f2:5e:
28:44:c7:b6:a9:1b:da:96:ec:fe:a8:0b:bc:b2:13:
9e:3a:2b:83:de:91:fd:72:d3:02:61:67:6c:d9:54:
1a:d0:73:a7:56:25:25:90:64:d0:15:51:c6:c5:af:
8f:87:4a:11:c9:08:52:9b:cd:80:8c:75:06:b1:87:
de:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:D3:5D:9B:DC:D3:42:F3:5B:DD:09:CB:62:C8:03:6D:A8:C7:71:43
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/U9Ndm9zTQvNb3QnLYsgDbajHcUM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
5b:8c:a8:ee:81:88:25:3b:87:80:75:29:4b:ed:fa:be:f9:49:
63:0e:ca:8a:54:d1:55:06:b0:c2:48:c6:f6:ce:75:22:92:e6:
bc:1f:76:6f:eb:39:0d:12:8c:7c:54:13:64:56:a2:82:16:e3:
ca:2d:7d:3d:91:bd:a2:a3:58:98:02:54:8a:37:1d:c8:fe:2f:
62:34:76:7c:b6:bc:34:f7:97:2a:fc:1c:d9:ec:b1:f5:03:27:
9a:df:f8:24:f2:38:83:c2:a0:e0:1a:b4:32:c2:8d:97:8e:75:
a6:ba:60:fa:38:4a:d1:85:99:bc:02:b4:97:0d:96:d3:e3:d8:
d8:d2:0c:6f:07:c1:56:ef:3d:ec:7b:79:97:c2:65:0f:e5:07:
56:96:da:ff:47:8b:0f:89:bc:5e:18:ae:19:28:98:03:60:45:
0b:ff:e4:19:cc:30:03:1a:a7:12:ad:f6:23:1d:1b:35:46:a6:
76:01:f1:1f:ba:00:07:de:18:97:7d:27:f2:99:d2:c9:3f:ca:
11:cf:56:2d:7b:38:a6:4d:c6:de:67:16:44:42:de:71:66:09:
9d:10:ed:b6:4a:b0:95:6f:10:57:50:73:d3:fc:b1:ad:08:b5:
53:25:e5:e0:23:2b:d3:d2:b4:57:70:6e:31:29:77:72:cc:c0:
0d:1a:a8:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 08:18:33 2025 by rpki-client