Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/aROs9kVtv9sJ0lFF9ShVRI9qHHU.roa
File: aROs9kVtv9sJ0lFF9ShVRI9qHHU.roa (raw, json)
Hash identifier: DEGg6vqUfxkIc5+vlqvpMaA6Mn/Ufc5jDFFvGp4rvEg=
Subject key identifier: 69:13:AC:F6:45:6D:BF:DB:09:D2:51:45:F5:28:55:44:8F:6A:1C:75
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 2188
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/aROs9kVtv9sJ0lFF9ShVRI9qHHU.roa
Signing time: Sat 21 Jun 2025 06:41:42 +0000
ROA not before: Sat 21 Jun 2025 06:41:42 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8584 (0x2188)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 21 06:41:42 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=6913ACF6456DBFDB09D25145F52855448F6A1C75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:dc:96:d5:14:ae:d4:b4:a7:30:a5:c5:16:60:
61:07:04:60:56:d0:39:54:62:89:f9:31:87:62:76:
ff:72:b3:5f:96:95:72:b8:0d:49:f3:ab:fb:c6:80:
ff:95:1b:82:64:d1:20:5f:39:c6:5b:02:aa:99:26:
7d:73:6a:03:88:85:e7:62:05:c2:c7:77:e5:bb:20:
1e:e0:66:ae:f2:ae:11:0a:55:d8:d4:4e:64:29:69:
64:35:86:9e:52:6c:23:9f:4b:52:6e:4a:cd:23:16:
5f:03:db:b6:0b:77:94:32:aa:1d:15:69:c4:d4:c0:
6a:6c:92:3a:3f:8b:06:28:92:ec:fd:db:e0:ea:c1:
12:96:db:03:04:3b:ae:4a:d8:8b:6f:bd:5c:8b:16:
55:7f:b7:02:92:ba:1c:f3:40:8b:bc:07:27:35:3f:
b0:41:7f:dc:f7:71:45:1b:dc:05:94:de:88:34:9e:
fa:d6:28:d4:47:29:0f:95:83:81:8a:32:d9:72:3d:
7e:b1:2b:93:40:67:44:7b:37:66:41:5d:1e:94:b8:
fb:a9:f6:72:3d:d4:9c:17:03:b9:3f:fd:d3:b0:ac:
39:46:e4:32:1d:92:c2:f6:26:76:e1:92:43:68:b4:
dc:55:2f:2d:a1:21:93:00:90:e7:e8:56:fe:3c:9b:
5b:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:13:AC:F6:45:6D:BF:DB:09:D2:51:45:F5:28:55:44:8F:6A:1C:75
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/aROs9kVtv9sJ0lFF9ShVRI9qHHU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
91:cf:73:5b:29:0c:3c:c7:b6:51:2e:60:fd:1a:e8:0a:47:bc:
9f:25:b0:14:8c:80:d5:02:03:f1:95:e0:3c:73:8a:93:15:a1:
77:88:a1:a7:8c:66:d6:b3:09:30:d0:de:14:5e:32:22:ae:6e:
0d:a8:96:68:2c:7c:d4:30:ce:e4:1e:9d:10:ed:b4:28:01:40:
8f:f3:1c:7f:e8:97:36:96:df:60:fd:70:72:85:99:1d:c8:2f:
40:a5:b9:64:20:16:b5:70:6d:7e:80:bf:28:5a:d6:a8:52:5b:
fd:be:4e:7a:c3:09:0e:a7:a9:d3:70:91:0c:71:22:2b:5a:e5:
01:46:b6:8b:8e:3c:ad:18:31:d6:25:fb:86:0f:15:be:cc:1f:
9a:cf:10:9a:6a:d0:95:40:27:85:c6:6f:f0:a1:d2:ae:bf:9c:
d9:03:55:9c:b2:30:79:3a:c8:8a:f8:9c:f6:12:ba:39:7f:35:
1c:58:f3:15:55:7f:4d:e0:8c:0f:84:0d:cc:67:b3:67:c8:f6:
97:8f:3a:0c:35:17:df:a1:cd:bb:dd:50:ab:74:df:d9:87:09:
cf:47:e3:5d:52:26:14:cb:95:ae:59:89:ad:a1:9f:d9:ae:f7:
98:e3:c7:b7:00:cf:0c:9b:ac:d9:09:a2:75:ab:d9:b7:6f:99:
e8:b3:d0:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:51:35 2025 by rpki-client