Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/aHRrJAha1nlfhSvQYm1aWGDLv0A.roa
File: aHRrJAha1nlfhSvQYm1aWGDLv0A.roa (raw, json)
Hash identifier: kigjr90pyMI/uIykD+YqykNfkbbANXz+OEBurDycOVU=
Subject key identifier: 68:74:6B:24:08:5A:D6:79:5F:85:2B:D0:62:6D:5A:58:60:CB:BF:40
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0578
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/aHRrJAha1nlfhSvQYm1aWGDLv0A.roa
Signing time: Wed 14 May 2025 09:08:02 +0000
ROA not before: Wed 14 May 2025 09:08:02 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1400 (0x578)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 14 09:08:02 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=68746B24085AD6795F852BD0626D5A5860CBBF40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:83:a7:40:3c:12:49:40:9d:61:bb:a0:81:2e:
85:9c:65:f8:89:13:b5:30:9a:ee:34:12:37:a5:85:
59:dd:1f:66:c4:76:32:cf:bd:22:30:43:88:79:37:
f3:09:64:38:0f:77:d7:54:1a:ab:1d:a9:96:c4:80:
13:c4:75:db:f5:37:bd:e4:71:35:04:45:96:f5:a7:
05:16:1a:24:21:45:31:c9:55:d7:50:e3:fb:2d:19:
0c:6a:a5:f8:96:20:b2:78:85:6a:eb:7e:68:ee:75:
f1:36:d3:26:d9:24:84:88:19:5f:0c:94:5a:bc:43:
7a:1f:76:c2:f7:a7:86:2f:19:17:a1:d8:41:75:42:
22:06:85:d7:7e:5b:3d:9c:13:7f:31:14:e7:66:09:
97:82:76:7b:b2:ab:3c:ba:86:e1:a1:99:65:c6:c6:
dc:a2:1b:13:8e:3d:7c:c5:01:e1:4e:6c:b5:b5:bc:
b4:35:ac:f6:97:f5:07:b9:b3:07:67:c7:70:b5:0d:
08:ea:4d:4c:b1:d3:12:76:fa:83:85:16:ab:3a:ac:
35:b3:bb:c3:c2:2c:3c:29:9b:3d:43:bd:ff:09:c8:
3e:d5:e4:ef:9d:53:db:17:cb:b6:67:d2:af:ca:96:
cf:91:2d:4f:9d:e2:ad:51:df:12:d0:f3:c5:92:af:
31:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:74:6B:24:08:5A:D6:79:5F:85:2B:D0:62:6D:5A:58:60:CB:BF:40
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/aHRrJAha1nlfhSvQYm1aWGDLv0A.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
61:e7:03:ef:a1:86:2e:1a:64:56:0a:ab:97:9a:08:72:f1:4e:
c1:95:30:62:ed:af:a7:e3:89:3a:fa:46:a9:1e:83:22:c8:df:
a6:e9:07:02:a8:90:8b:a4:f3:88:5a:41:e9:46:33:88:86:7b:
0e:fd:19:82:c7:80:f5:89:99:c7:f8:4d:37:45:c1:79:94:cd:
7f:31:23:58:6e:9a:68:aa:02:40:75:f3:c1:33:aa:cc:72:b6:
aa:91:ef:2e:a8:b2:46:ba:ac:66:b9:fc:4e:6c:ff:79:c6:af:
a0:fe:cd:e3:d6:6d:93:25:13:a4:3a:9b:7d:9e:9d:6b:d4:59:
ad:79:bc:e2:e5:4d:d9:69:05:db:07:14:07:24:12:0e:97:03:
aa:a7:d6:80:02:a5:85:20:12:b0:30:62:43:79:b8:b0:50:65:
2a:ba:a0:49:15:c0:94:9c:7e:68:49:14:0c:28:f5:08:2f:05:
5e:6f:59:41:06:b3:f5:04:42:68:9b:04:7d:14:d7:c9:c2:de:
87:85:bd:a6:0f:1b:03:d6:cd:96:3e:cb:b9:8a:84:02:6a:ed:
29:56:42:91:2b:e2:d2:90:10:eb:ae:50:4b:0c:93:6f:27:75:
6d:5c:c3:17:27:9b:89:ca:46:16:34:ca:2f:94:1e:92:2a:49:
86:e6:8d:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:42:12 2025 by rpki-client