Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/YRJykGABkd_KHJWaC47G6HCN4ec.roa
File: YRJykGABkd_KHJWaC47G6HCN4ec.roa (raw, json)
Hash identifier: U/AdLoLHZRBRp/sLQycqlSgcvdPetcoT/vBdiWUlySc=
Subject key identifier: 61:12:72:90:60:01:91:DF:CA:1C:95:9A:0B:8E:C6:E8:70:8D:E1:E7
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 2154
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/YRJykGABkd_KHJWaC47G6HCN4ec.roa
Signing time: Sat 21 Jun 2025 00:11:42 +0000
ROA not before: Sat 21 Jun 2025 00:11:42 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8532 (0x2154)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 21 00:11:42 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=61127290600191DFCA1C959A0B8EC6E8708DE1E7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b5:e2:1c:5b:3d:8c:04:cf:48:47:47:81:34:
ce:5d:c0:7c:86:0c:58:17:7f:41:8b:e5:1f:18:82:
3e:fc:12:4e:b2:57:7c:91:e5:6d:39:40:6a:61:e6:
5f:40:07:15:f7:8d:b2:28:e1:82:bc:55:ef:6c:cb:
b9:b3:30:ac:c1:50:92:f8:70:8f:b6:90:98:81:96:
f9:33:3b:ab:b7:a5:8a:8e:57:64:7e:a0:0e:ec:5f:
d5:81:3a:3d:b8:1e:93:ff:69:6b:b6:fa:d1:fb:5c:
f7:b5:82:66:d1:68:49:0e:4e:c1:5c:90:34:20:a8:
46:56:71:3c:90:a8:c9:4b:d9:62:84:32:4b:15:4e:
c9:43:43:15:fe:7a:ff:34:05:5d:bd:cb:7c:58:59:
27:f9:f3:42:45:cd:d8:0a:f0:8c:1a:c4:8c:c4:df:
83:07:35:80:72:90:1e:e1:47:31:53:f6:4c:60:99:
af:bd:d3:a5:07:33:db:c3:62:94:55:43:c1:a7:77:
2c:ff:12:c7:b3:30:ae:50:2b:52:21:51:06:ee:c8:
9e:04:85:bb:25:37:7f:63:cc:1d:ba:e2:9a:a7:18:
32:69:8b:3e:eb:e1:89:51:a4:de:10:2a:ef:0c:60:
bf:31:5c:11:7e:91:b9:22:8c:55:28:3d:54:97:e8:
b0:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:12:72:90:60:01:91:DF:CA:1C:95:9A:0B:8E:C6:E8:70:8D:E1:E7
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/YRJykGABkd_KHJWaC47G6HCN4ec.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
95:25:a9:78:82:43:10:db:ef:f2:00:9b:a6:73:67:bd:4b:92:
5f:f7:86:d8:88:6d:06:a2:a1:7a:6e:57:f5:59:36:be:fd:28:
cb:bc:29:ab:08:c7:08:8d:0c:e7:f3:aa:59:39:be:83:d4:13:
2e:72:7b:0b:d6:bb:7b:6c:95:7e:c8:f4:e5:96:45:d3:ff:da:
2f:ad:c7:fe:d7:e0:9e:1d:dc:51:77:66:ef:97:88:40:24:c0:
42:f7:dd:03:a5:64:c2:d4:c2:13:4f:7d:7b:b4:07:37:71:c0:
4e:c7:d6:f1:9d:c7:bb:0b:d0:10:d7:a5:59:ee:ad:de:1d:da:
08:9f:10:26:d2:f0:fd:40:11:fd:aa:a4:f1:b1:17:57:3b:bd:
07:80:11:65:5d:98:78:a3:0b:e5:e2:25:12:5e:5a:20:33:d8:
8b:b7:a8:59:d8:05:d7:94:e3:3a:a6:1a:2a:81:0d:af:70:27:
2c:08:18:d1:34:36:25:d8:2f:ec:19:f1:bc:d9:72:43:9d:fe:
f8:da:d9:f7:ed:ed:39:93:b6:19:14:7d:ad:56:d6:02:08:46:
7f:41:e7:3f:82:3a:9f:a2:66:ed:96:9c:df:ea:bc:6e:21:42:
ee:72:1e:8f:77:9a:fa:58:55:49:bc:6d:96:6b:8f:f8:a1:11:
42:78:31:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:55:52 2025 by rpki-client