Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/_GcaWf1CQm5bcQERpQMdiXPQ43c.roa
File: _GcaWf1CQm5bcQERpQMdiXPQ43c.roa (raw, json)
Hash identifier: 0eZkkPob0AT8LpdJE/O+yomOWwpofopH8tirDmszpXs=
Subject key identifier: FC:67:1A:59:FD:42:42:6E:5B:71:01:11:A5:03:1D:89:73:D0:E3:77
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 21DC
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/_GcaWf1CQm5bcQERpQMdiXPQ43c.roa
Signing time: Sat 21 Jun 2025 17:11:45 +0000
ROA not before: Sat 21 Jun 2025 17:11:45 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8668 (0x21dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 21 17:11:45 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=FC671A59FD42426E5B710111A5031D8973D0E377
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:89:d4:1b:40:99:f2:96:23:d1:63:be:7d:d3:
00:e6:0f:29:c5:0c:27:e1:2b:a3:87:50:5b:f5:d5:
c6:9f:fb:a4:b6:fc:51:ba:e5:93:4b:d0:74:58:2e:
16:1e:27:e5:cb:2b:d2:e2:75:de:5a:a2:a8:96:e4:
e9:b2:4b:d2:38:e7:7c:97:59:7a:e5:10:29:61:b3:
23:a0:41:f5:1d:2d:d5:6b:d9:6e:25:cc:98:f5:9d:
5b:fa:76:82:d7:c8:cd:73:c6:84:d9:1a:5f:c6:8f:
a3:6a:7e:6e:70:58:71:36:4c:a5:7e:da:bf:f2:89:
c1:f1:b8:03:7f:1f:e3:1a:72:b2:a9:a9:d5:e8:67:
2e:17:24:43:cb:5f:a2:e0:82:32:26:6c:0a:fc:a7:
6d:7d:b7:83:c1:5c:e0:3d:7d:16:cb:aa:09:1f:0f:
6d:3b:45:1b:4d:7e:dc:d0:e5:3f:10:9d:ae:e3:ff:
00:d6:18:ac:7c:3c:c2:6e:98:d1:93:52:21:b9:68:
ca:60:d1:f0:af:95:1f:66:53:3f:2e:b9:a2:5f:f1:
ea:a8:fd:0e:02:8c:9c:c4:c6:b4:15:7d:85:87:b3:
09:16:9d:c5:33:cc:43:27:28:7c:10:39:16:e2:3e:
ef:a1:8c:0e:e1:23:bd:76:dd:a7:10:42:f8:3d:92:
46:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:67:1A:59:FD:42:42:6E:5B:71:01:11:A5:03:1D:89:73:D0:E3:77
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/_GcaWf1CQm5bcQERpQMdiXPQ43c.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
2b:34:ae:d4:6a:15:02:51:67:51:03:98:ac:57:bf:5f:9e:8d:
d0:d4:f5:16:0f:e4:b1:0f:b0:d2:8c:28:62:1c:58:b3:fd:0e:
31:17:55:a3:61:67:57:a5:d4:1c:8d:f5:5b:2a:93:ec:df:11:
0d:93:80:ed:8d:e8:a4:0c:ef:6b:53:18:f1:0c:64:59:95:a0:
4e:2b:5b:56:2a:ed:ac:f9:a0:c2:4d:fb:e7:f1:e8:e1:5e:25:
32:66:89:ad:bd:0d:90:d8:4b:5f:98:dd:a9:5b:e4:53:be:21:
67:5b:5e:e6:fc:6b:de:c4:a7:0b:7e:c5:70:20:76:e2:f6:9d:
96:d3:1c:44:7f:93:c0:9d:98:09:a5:a4:0a:ec:a0:f1:db:58:
7a:29:f7:0c:53:62:0b:52:cd:37:35:0c:c3:6f:4e:22:2e:aa:
21:c1:7f:ca:1b:85:a0:a7:9c:ee:12:0f:c2:b3:f5:71:1c:ee:
af:4a:4b:55:73:0c:48:44:25:da:7b:d4:d6:9b:0a:03:fa:56:
8d:ff:7d:87:6f:c0:7a:18:e1:b0:6e:85:28:d0:b3:ed:35:34:
8b:ab:3d:32:67:14:d1:8c:e2:95:4e:5e:5d:09:9e:f0:6f:0b:
0f:80:58:8a:62:e6:2e:69:e2:60:38:91:a7:1b:0c:e0:24:ce:
e3:8d:b3:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:56:00 2025 by rpki-client