Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/b1UuGxYK5m0tXQQxmFHv1T9Ge3A.roa
File: b1UuGxYK5m0tXQQxmFHv1T9Ge3A.roa (raw, json)
Hash identifier: eOw0YmprZYYTB/JXFUCC7KHvi0cQc1U3jjstfEtsQ9I=
Subject key identifier: 6F:55:2E:1B:16:0A:E6:6D:2D:5D:04:31:98:51:EF:D5:3F:46:7B:70
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1EC8
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/b1UuGxYK5m0tXQQxmFHv1T9Ge3A.roa
Signing time: Tue 17 Jun 2025 03:10:03 +0000
ROA not before: Tue 17 Jun 2025 03:10:03 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7880 (0x1ec8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 17 03:10:03 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=6F552E1B160AE66D2D5D04319851EFD53F467B70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:63:bc:e2:d9:5a:77:ca:0a:20:ed:fe:b1:19:
44:74:94:9c:8e:f2:7e:f4:4b:a4:97:13:01:74:ca:
ad:89:52:eb:c4:d4:f9:ca:67:65:bc:b5:80:69:9b:
a4:f4:1d:c9:0b:a2:e9:33:2b:dd:ec:c8:ad:d9:b7:
42:a1:23:1c:fe:b4:6f:34:8b:b0:92:4c:56:ba:65:
b2:b3:8a:4e:95:c4:9e:96:4d:44:ad:bc:6f:4d:57:
3a:04:93:8a:6e:a7:81:50:be:00:72:22:80:9f:b3:
09:50:5a:52:97:e9:4b:6e:92:c2:79:2c:3c:e7:ca:
b0:99:a9:0d:27:ab:d3:db:7b:f0:65:59:51:a4:29:
73:87:7f:34:63:7b:52:8c:eb:d9:3c:c3:bf:dc:9d:
b0:1b:a3:75:0e:35:d4:fb:57:5e:d5:0c:d3:94:a0:
0f:2b:12:db:15:64:bd:ca:d7:48:c8:a9:12:90:59:
ce:d6:bc:6d:c8:c4:27:aa:82:f3:96:8b:9e:d2:d1:
61:96:d9:5b:12:87:97:f4:c1:a5:a3:76:48:07:6e:
c6:23:9b:b6:a4:68:b9:bc:66:5d:92:8f:fe:4f:6e:
4e:0e:8b:07:4f:ea:38:a2:c8:ac:8b:e5:ef:38:cd:
12:3a:fe:cb:79:3b:ec:0a:61:1d:ea:34:fd:bd:82:
b9:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:55:2E:1B:16:0A:E6:6D:2D:5D:04:31:98:51:EF:D5:3F:46:7B:70
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/b1UuGxYK5m0tXQQxmFHv1T9Ge3A.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
36:2c:91:61:42:93:15:9e:a1:af:72:91:cf:a9:51:9e:59:0d:
27:32:eb:68:af:97:14:b9:d7:98:c1:f4:12:1b:67:3b:88:ed:
02:58:40:b0:6c:43:14:e2:ce:a8:bf:07:f7:31:8c:84:6d:c5:
c6:ea:35:db:b9:ec:18:0c:a6:d3:93:70:a9:92:65:ad:6e:95:
bb:33:c4:f4:02:07:3d:87:4d:25:af:84:72:7d:c4:f3:2f:9d:
f9:66:2c:be:fa:3d:c2:af:e6:d6:3a:6b:13:97:7c:39:6e:c8:
35:7a:d8:8a:ff:1f:8d:4e:c9:75:ce:04:d0:54:70:82:af:42:
75:98:0e:57:27:e5:de:0a:ef:a9:3a:cb:f0:c0:79:f4:34:39:
0d:df:65:d4:ec:98:24:8b:3b:b2:11:92:fe:15:8c:9a:22:b7:
82:1a:f0:fe:0f:2a:f7:3c:8e:c1:a5:77:2f:fc:98:33:fb:31:
4f:9c:f7:78:f2:d9:49:92:c5:0f:24:c7:32:aa:27:84:68:dc:
5d:e2:0d:c1:02:00:03:f8:86:29:3d:c7:c7:b4:a4:c7:02:fa:
db:4d:02:6d:0b:20:d1:74:f3:d5:7c:05:fa:a9:c3:dc:68:41:
f3:53:e6:fd:0d:6b:82:a9:f6:cc:80:31:33:20:1c:75:e9:48:
9a:79:21:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:37:05 2025 by rpki-client