Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/b9FpV3GydxdD9nY3RZRA866FtVk.roa
File: b9FpV3GydxdD9nY3RZRA866FtVk.roa (raw, json)
Hash identifier: tSSapH9dsnTtw/qeImpz4ApEI0v9zDnVgR9rhDBm6lE=
Subject key identifier: 6F:D1:69:57:71:B2:77:17:43:F6:76:37:45:94:40:F3:AE:85:B5:59
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 22A4
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/b9FpV3GydxdD9nY3RZRA866FtVk.roa
Signing time: Sun 22 Jun 2025 18:12:01 +0000
ROA not before: Sun 22 Jun 2025 18:12:01 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8868 (0x22a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 22 18:12:01 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=6FD1695771B2771743F67637459440F3AE85B559
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:86:50:af:d8:e9:b2:c9:35:58:73:38:f9:1d:
35:27:79:f0:22:d8:4d:e2:8a:3c:a8:d9:06:b8:5a:
4e:bc:31:2f:46:35:be:9d:a3:77:e4:3e:20:2a:3e:
55:23:ba:f4:a2:3a:38:d6:d9:50:74:d8:31:52:65:
c2:e9:8d:d4:8f:45:e1:47:82:f1:a2:4f:68:ec:48:
c5:ff:1a:a6:98:9a:78:04:0e:ef:4f:d8:a9:a0:ad:
c7:ee:bf:20:68:87:61:d3:0f:59:39:2c:fe:f1:0b:
dc:b6:2b:9c:db:53:02:03:e7:84:f0:50:36:b6:3a:
e7:5e:2e:01:bc:c4:60:c7:fd:11:81:11:6b:64:1f:
df:0b:15:9a:6e:82:61:ca:d8:34:e0:58:03:bd:d1:
f8:5e:b8:8b:6d:78:20:93:b5:04:62:60:62:2d:f6:
a7:46:ae:75:86:1a:fe:07:6d:f2:e7:11:27:0e:f3:
f0:ee:b4:53:ec:49:5c:3b:97:d3:fb:25:e4:ea:d0:
ee:cb:a3:f8:17:db:3b:06:98:d3:ca:21:bf:c2:3d:
4d:20:8e:32:d6:0d:e6:9d:79:2c:bd:90:05:47:25:
a3:d1:6f:bf:d3:4a:9c:2f:58:93:b6:b7:c9:a1:14:
94:49:8a:ce:6b:67:bf:39:17:dc:9b:9b:72:70:e4:
21:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:D1:69:57:71:B2:77:17:43:F6:76:37:45:94:40:F3:AE:85:B5:59
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/b9FpV3GydxdD9nY3RZRA866FtVk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
6e:8b:15:61:ed:b3:10:06:e0:b3:79:d4:f1:8f:ff:f1:c4:aa:
7b:1e:46:00:20:0a:0b:86:a5:39:0c:ae:78:d6:45:47:49:9f:
45:1b:71:55:a8:72:a3:13:63:6b:e2:4c:12:c4:ba:15:c5:cb:
b8:70:1e:1e:05:a1:30:f4:f2:ce:48:27:eb:fa:c4:c0:19:d1:
db:73:0c:5d:60:75:a0:eb:1d:0f:75:b6:f1:47:7c:fa:1a:5f:
fd:25:13:fd:b1:58:b4:73:b3:ec:92:fa:eb:fc:bd:94:ae:64:
e1:7d:f3:e6:9f:3f:06:6a:bf:b9:e1:d5:d5:40:3c:b9:3d:02:
a3:83:52:d4:e7:97:e2:02:a5:7f:4a:83:0a:16:e5:9a:94:8d:
82:a2:83:8f:83:3e:4d:f2:76:ab:68:19:81:55:e3:93:7a:46:
2e:ba:f8:2c:33:2a:05:a3:25:9b:e9:95:7f:f5:f1:f3:7d:d8:
fe:96:a2:f6:ea:e6:69:b9:27:ad:08:9c:ee:5f:28:97:79:74:
29:50:1e:a3:bc:61:a8:8f:46:c6:39:9e:e0:73:b3:a9:96:88:
f5:3f:4a:7b:a1:2b:f7:41:04:cb:f8:a6:1e:d3:c3:1a:18:80:
56:f9:83:04:d3:f5:29:1a:11:6d:6d:ef:ea:a8:5b:52:72:55:
85:1b:4e:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:38:47 2025 by rpki-client