Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/aNQEmvdY3A9lBMKtHC5TGFk5rHQ.roa
File: aNQEmvdY3A9lBMKtHC5TGFk5rHQ.roa (raw, json)
Hash identifier: wMT2IkeJUkwaFGC2twk+rgwCyeRbCHrCLpQ356wAqks=
Subject key identifier: 68:D4:04:9A:F7:58:DC:0F:65:04:C2:AD:1C:2E:53:18:59:39:AC:74
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 2048
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/aNQEmvdY3A9lBMKtHC5TGFk5rHQ.roa
Signing time: Thu 19 Jun 2025 08:08:28 +0000
ROA not before: Thu 19 Jun 2025 08:08:28 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8264 (0x2048)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 19 08:08:28 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=68D4049AF758DC0F6504C2AD1C2E53185939AC74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:79:51:42:80:ab:62:ad:59:c4:44:ce:11:b2:
49:3a:c2:4f:a6:9e:99:a7:b0:5b:bb:21:c8:ff:04:
e9:0c:5b:73:28:8a:f2:08:46:3f:83:b1:6c:ec:38:
6a:78:dc:a9:7f:49:06:52:5d:23:f6:e0:e5:a9:8e:
f1:3e:dd:6a:15:2d:27:bd:fc:e8:84:5f:bc:0d:22:
05:a9:43:7e:ca:11:f3:7d:b4:34:45:87:86:11:da:
ba:ff:9c:79:59:09:c4:51:05:fc:ac:a2:eb:f6:e1:
6c:26:20:26:27:24:f2:57:81:57:5a:4c:c5:2d:80:
ec:ac:d4:8e:52:15:ab:b4:17:b2:3e:97:1c:bb:65:
a3:f9:97:67:5c:01:1e:59:b4:01:13:0a:cf:37:98:
29:33:ee:71:b8:df:2e:e0:2c:3e:34:8a:be:02:5c:
82:af:f0:00:0a:fd:67:94:6f:08:ac:0b:00:75:4b:
f5:b6:e7:88:da:fb:ee:8b:d4:f7:44:b1:79:f0:a8:
e7:b3:ad:83:d8:39:40:50:d2:db:bf:13:41:1a:29:
6d:7a:04:62:a0:be:ff:21:af:aa:91:74:6d:73:45:
80:b9:74:2d:1f:bc:f5:96:e9:0c:6b:d0:4b:2c:27:
85:80:94:d5:e8:74:a6:dd:c4:bf:70:ff:d4:8b:eb:
f2:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:D4:04:9A:F7:58:DC:0F:65:04:C2:AD:1C:2E:53:18:59:39:AC:74
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/aNQEmvdY3A9lBMKtHC5TGFk5rHQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
a1:c2:10:77:3b:76:6b:03:c5:8b:d2:06:84:95:bf:ec:e1:bc:
5a:51:50:42:7d:72:a3:6d:65:19:49:b3:c1:09:30:e1:56:1f:
18:67:c4:1a:5a:81:2e:ca:5e:b9:3d:d5:a4:d4:23:bc:c7:6a:
3e:9c:33:e3:c7:a2:ad:b9:41:1b:26:40:5e:49:d2:c2:9c:34:
f7:db:96:3c:df:ab:1b:cc:4d:20:1a:bb:59:f4:6b:68:fd:93:
af:cd:70:1d:70:1e:9e:c6:ff:e0:0f:30:ab:db:f7:af:98:8e:
93:45:eb:e2:4d:57:7e:28:c6:99:07:ca:cb:69:1a:19:47:dc:
f1:43:a6:65:73:e5:14:85:81:e5:3e:93:73:5f:da:82:2b:fd:
69:65:68:38:34:dd:7d:b4:d2:73:a5:46:f2:85:31:c1:85:9e:
34:8e:28:c6:f8:ec:6e:83:92:60:b0:4c:d9:86:8d:8d:e2:dd:
48:7f:c4:3c:b9:c3:d0:79:f6:03:51:0c:67:1a:61:a3:64:3a:
c7:4a:e9:bf:a3:bf:fa:3a:59:52:3f:8a:96:d9:62:d8:2c:db:
78:ce:72:91:33:37:d7:66:62:d1:37:58:58:bb:23:d4:c7:cd:
34:e0:86:90:5f:11:71:5e:5c:64:48:c5:1a:42:1c:8d:be:bd:
f1:9e:b1:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:45:52 2025 by rpki-client