Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/_71sdcDb7-U_lsO9MtIFDgerY9U.roa
File: _71sdcDb7-U_lsO9MtIFDgerY9U.roa (raw, json)
Hash identifier: dqvdfyFKb57LQjQfrYyhJLhA0ElSS4cTxG3V+XEuFfA=
Subject key identifier: FF:BD:6C:75:C0:DB:EF:E5:3F:96:C3:BD:32:D2:05:0E:07:AB:63:D5
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1F28
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/_71sdcDb7-U_lsO9MtIFDgerY9U.roa
Signing time: Tue 17 Jun 2025 15:10:08 +0000
ROA not before: Tue 17 Jun 2025 15:10:08 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7976 (0x1f28)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 17 15:10:08 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=FFBD6C75C0DBEFE53F96C3BD32D2050E07AB63D5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:15:ac:39:c6:02:4c:4a:e2:4c:82:72:b0:ce:
ea:4f:2f:2d:24:26:5a:7a:c7:db:e9:53:2e:81:b7:
d7:73:c6:6d:77:54:ad:ee:9d:e2:66:a2:bc:09:c1:
66:72:41:9d:56:09:84:8f:a2:e3:f0:ef:87:d0:28:
f9:8a:34:cb:ef:39:56:1b:56:d6:8e:f7:e9:a3:fd:
6c:df:78:a0:87:f9:45:a7:8a:07:a9:a4:7e:3e:95:
67:34:ee:ce:db:83:21:47:6a:99:58:84:26:5e:81:
41:37:4a:8a:64:2e:cd:02:b4:65:71:bb:3f:99:88:
c3:a5:38:64:06:ad:f1:00:a9:15:9e:9b:78:d0:49:
8a:63:62:27:e5:26:e1:97:60:e5:15:09:74:e0:c6:
5e:ca:d8:5a:16:6b:e5:41:d9:0a:ed:3b:19:62:6d:
96:32:47:0c:49:53:e9:98:11:c0:5f:81:fb:2f:d1:
a9:14:e0:02:c1:2b:32:d2:ba:90:c1:eb:12:29:23:
ee:28:67:fc:e9:2f:fe:7e:a7:2f:54:ac:b4:63:ac:
c7:2f:41:39:a4:15:2e:72:69:d0:1c:7e:eb:17:a5:
da:9e:54:83:74:55:78:e3:b4:4b:7f:77:78:2b:98:
53:58:b9:4f:56:8c:59:92:65:61:d3:35:b5:9e:b9:
4c:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:BD:6C:75:C0:DB:EF:E5:3F:96:C3:BD:32:D2:05:0E:07:AB:63:D5
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/_71sdcDb7-U_lsO9MtIFDgerY9U.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
3a:19:f9:ba:59:3c:e6:76:c2:c2:89:08:a2:bf:75:85:41:5b:
97:e9:b0:1d:d7:a6:93:c5:13:18:03:ce:5e:6a:2d:0d:d1:5e:
5b:72:b9:74:63:82:39:48:5e:b9:b9:ce:fb:91:26:0d:c9:7a:
9b:ee:57:e8:7f:ef:11:63:cf:b7:ea:cd:02:52:49:01:6e:6a:
9b:80:08:aa:84:ae:ec:f9:28:23:88:54:29:8c:f3:fc:65:45:
35:f2:11:84:c9:02:b4:21:2e:26:ae:5f:37:87:39:95:65:4a:
6b:7e:27:55:19:0a:56:9e:7a:07:9d:24:60:67:f8:e7:e8:e8:
91:c9:4b:3c:50:d5:c8:34:d1:39:3a:0f:80:7f:70:15:78:3c:
38:8f:ce:f2:4e:a4:84:07:33:6b:37:fb:93:f6:df:b9:01:d8:
97:1f:08:2a:4d:f3:d5:cc:c5:46:dd:16:52:25:56:55:d8:d0:
93:f9:5b:9a:64:ff:be:d2:be:43:68:38:2f:49:03:13:03:a1:
4e:99:3e:90:da:c5:98:5d:61:d5:27:16:05:e4:cb:af:96:a1:
85:5d:e9:97:40:35:d7:fa:a6:49:66:a0:9e:a8:b3:2e:d4:1e:
e1:3f:14:87:e2:48:53:44:50:dc:fa:b3:4c:1a:ad:cb:c9:1c:
d3:02:43:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:36:02 2025 by rpki-client