Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/aCX4GCJOaqwXmHIOvuj9_n3MlDw.roa
File: aCX4GCJOaqwXmHIOvuj9_n3MlDw.roa (raw, json)
Hash identifier: 756IV9phuO3MmbA3sf2jrbPcWHwuetIfhsxog5dV9HI=
Subject key identifier: 68:25:F8:18:22:4E:6A:AC:17:98:72:0E:BE:E8:FD:FE:7D:CC:94:3C
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 22EC
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/aCX4GCJOaqwXmHIOvuj9_n3MlDw.roa
Signing time: Mon 23 Jun 2025 03:11:51 +0000
ROA not before: Mon 23 Jun 2025 03:11:51 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8940 (0x22ec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 23 03:11:51 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=6825F818224E6AAC1798720EBEE8FDFE7DCC943C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:d1:4f:fd:c1:e9:eb:25:76:72:86:08:8d:76:
d1:9c:f5:b8:15:3d:e1:4b:13:ac:0b:8a:54:53:8b:
45:76:4d:c6:22:19:e4:c0:36:ca:c6:6e:2f:a9:15:
a7:79:3e:9d:7a:4c:fb:87:a3:9a:b3:bb:a5:8b:c9:
cd:03:87:c1:ba:4c:85:49:d6:c1:f5:99:43:d1:02:
63:39:3e:61:d4:8d:60:39:78:8c:09:ca:36:4f:31:
67:da:d5:03:9c:57:d2:35:11:ad:95:2d:a3:aa:f8:
53:b9:a4:ae:bc:d7:b0:2c:c1:6b:f8:b7:ec:85:10:
d3:b3:d7:aa:16:63:10:9f:eb:f8:91:99:f3:70:dd:
2a:dd:fa:fa:1b:68:47:14:20:ae:cc:dd:64:79:a8:
a1:c0:43:ae:b2:6c:fe:f6:10:6f:01:dc:cb:a0:c4:
d0:e7:5a:df:7e:a2:03:22:62:56:7e:db:79:9c:16:
75:c1:b4:01:b4:05:aa:92:f7:a6:56:80:05:44:88:
5f:ee:55:b7:d8:fd:ab:cd:3f:da:8f:2c:4c:df:fb:
70:1b:a5:60:6f:a9:50:d9:9f:5d:71:42:2a:25:a8:
bc:54:d8:7a:97:5e:8a:65:85:11:ea:36:39:ef:5c:
97:43:dd:b8:6b:24:37:56:92:1c:1b:2e:2c:17:78:
de:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:25:F8:18:22:4E:6A:AC:17:98:72:0E:BE:E8:FD:FE:7D:CC:94:3C
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/aCX4GCJOaqwXmHIOvuj9_n3MlDw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
30:7e:bc:e3:93:30:8a:e0:16:29:7b:4e:45:6c:56:be:20:6d:
0d:07:7e:eb:ac:cc:e1:c5:23:a8:8e:38:26:e5:8d:25:b2:86:
95:a4:b4:75:e0:77:14:06:69:47:df:1f:48:ea:99:31:8e:e3:
bc:5b:a3:e2:4b:14:4c:2c:96:11:f2:2b:d3:50:2a:d1:e7:31:
68:fe:f5:d0:70:fa:41:98:81:3e:6a:20:89:a7:65:c7:d5:27:
96:95:ed:b2:bd:a7:a9:26:4d:d9:ab:b8:30:7a:89:64:8d:54:
02:fe:f0:c7:4d:31:64:1d:8f:84:68:16:44:24:fa:5f:9d:96:
c6:e7:91:42:b8:15:d5:7e:9b:d9:a2:a4:2e:7b:74:c7:e7:82:
20:e8:c9:8f:7b:1d:d8:8a:d7:b0:b8:27:8f:46:8f:91:96:a9:
82:f5:4e:7b:fc:24:c1:24:97:5e:25:03:e9:85:c6:a8:05:48:
71:4e:48:34:24:8f:f4:a4:34:a4:fc:48:e2:2f:0f:42:8f:55:
d2:4f:90:cf:28:c8:69:38:8f:e1:e1:0a:e6:60:b5:7e:5e:75:
1e:57:c5:cd:e1:86:c5:25:96:73:bb:0b:f7:86:e7:8f:38:63:
40:15:c6:62:2f:e0:1e:1c:e4:c8:25:54:a0:f5:b3:74:1e:33:
54:dc:c9:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 19:09:34 2025 by rpki-client