Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/Ubc78jwIQCfZy-08omgm6xky81s.roa
File: Ubc78jwIQCfZy-08omgm6xky81s.roa (raw, json)
Hash identifier: MYM879XZmz091w1M+vdAsukjMWEngMgAu9CfmIxoeJo=
Subject key identifier: 51:B7:3B:F2:3C:08:40:27:D9:CB:ED:3C:A2:68:26:EB:19:32:F3:5B
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 200C
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/Ubc78jwIQCfZy-08omgm6xky81s.roa
Signing time: Wed 18 Jun 2025 22:44:27 +0000
ROA not before: Wed 18 Jun 2025 22:44:27 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8204 (0x200c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 18 22:44:27 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=51B73BF23C084027D9CBED3CA26826EB1932F35B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:3e:1b:4a:95:93:fb:d4:01:c3:50:ef:19:1d:
b4:38:e1:07:b4:59:c4:5e:8c:a5:ff:e6:0c:0e:de:
9c:8a:6b:b5:0c:55:62:37:44:39:6a:2c:d9:6a:3e:
46:3e:90:ed:c1:35:99:de:0c:52:7d:73:24:dd:2e:
e9:cd:19:be:93:36:49:dd:d0:01:47:4a:b5:28:8f:
f8:ee:bf:b4:fc:ff:5f:08:dc:ca:c6:f8:8b:18:70:
99:6f:5d:f3:09:c9:53:f1:75:98:26:16:dd:26:55:
d7:69:25:c9:30:4a:06:b1:84:ae:98:a3:c5:14:27:
a1:42:87:c6:9d:67:b2:8b:19:3d:71:cc:76:40:24:
36:79:12:0d:61:87:d7:2e:22:e4:73:f2:87:00:56:
ba:89:46:ec:57:ff:ed:08:f2:ff:3d:a2:72:d3:ae:
ae:25:62:57:06:30:0c:69:b7:0c:8f:f3:a8:7c:6e:
d1:c1:5b:0c:0f:7d:2d:a0:c6:be:2c:b4:f6:ae:3d:
9f:d3:6f:7d:75:01:59:a0:ee:c8:15:58:37:58:3d:
c7:3b:4e:28:a2:c8:1c:c2:1a:59:4c:6e:3e:d7:25:
53:1a:e2:cb:1d:dc:69:bb:fd:6a:57:97:64:2e:6d:
cd:d7:4e:08:cf:a3:4e:ba:03:27:0b:ee:f2:d6:de:
58:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:B7:3B:F2:3C:08:40:27:D9:CB:ED:3C:A2:68:26:EB:19:32:F3:5B
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/Ubc78jwIQCfZy-08omgm6xky81s.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
8b:a2:c3:01:90:a6:68:6b:ab:51:af:0e:97:8a:bc:18:26:74:
7c:34:6c:db:9d:f6:77:55:1a:e3:e1:95:6c:bd:f4:ba:03:07:
17:d4:b2:99:0f:08:83:24:46:5e:69:db:26:ab:40:21:0d:90:
87:25:6e:31:27:1f:8b:19:31:e2:dc:d6:89:92:38:9e:36:b6:
f5:b8:c0:b0:f2:9d:17:3a:31:d3:a0:d6:da:6f:ab:f1:31:ac:
db:90:3a:25:ea:0c:51:ba:07:ff:20:ec:82:a2:51:7b:b6:4c:
4c:b1:e8:5c:f5:d9:d2:05:fc:e3:fd:99:0b:d9:b8:9c:20:83:
2a:6f:c7:1a:a6:43:69:03:82:dd:ef:4f:e3:dc:94:7f:50:cd:
06:82:60:17:a0:d6:7b:ff:d2:f6:37:71:57:b3:fa:3d:68:9f:
63:14:c6:41:b4:53:e0:c1:23:0a:13:53:b7:c9:ae:9a:6f:00:
59:e2:e0:5e:28:35:af:4a:39:fd:0c:60:b0:fd:1c:21:61:55:
57:4a:3d:fd:bc:cb:7d:20:05:15:74:a4:53:bd:72:4a:40:e2:
de:3c:f1:53:35:55:6b:bb:b5:5f:21:83:fa:fc:b3:59:e5:da:
77:57:0c:c3:42:09:1f:cb:6b:77:a6:b5:19:00:f1:79:08:6c:
95:df:83:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 19:07:20 2025 by rpki-client