Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/c6JWZPw8BEWyqoVd-l7M06gk_cY.roa
File: c6JWZPw8BEWyqoVd-l7M06gk_cY.roa (raw, json)
Hash identifier: 0dpU8ZjnVnTfoKvC8pVt8xzTA+I3x+GXjn4IbXfhNi8=
Subject key identifier: 73:A2:56:64:FC:3C:04:45:B2:AA:85:5D:FA:5E:CC:D3:A8:24:FD:C6
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1C84
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/c6JWZPw8BEWyqoVd-l7M06gk_cY.roa
Signing time: Sat 14 Jun 2025 02:39:53 +0000
ROA not before: Sat 14 Jun 2025 02:39:53 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7300 (0x1c84)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 14 02:39:53 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=73A25664FC3C0445B2AA855DFA5ECCD3A824FDC6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:2f:92:cd:22:e7:23:a2:b8:9f:e5:7c:d0:62:
8e:12:a5:a0:43:1d:8c:87:d3:40:5a:38:eb:46:d1:
f5:6e:e8:9f:b2:16:e7:92:5f:4a:3b:df:a9:ca:ab:
90:99:4d:ea:d3:90:03:66:f2:df:25:e3:93:f4:cf:
bd:00:df:7f:04:48:16:77:d8:50:62:48:cc:36:6e:
19:13:f3:44:96:a1:aa:2d:b0:88:c0:06:6b:81:fe:
86:d6:19:0b:d5:1c:e3:64:9e:f2:6f:a2:4b:98:86:
cc:31:22:4a:da:11:62:72:98:63:bf:89:f4:69:4f:
5f:84:03:39:8a:43:28:f0:73:35:7a:38:02:5d:ec:
20:f5:f4:1a:c2:d5:14:25:86:bc:dc:6d:88:71:18:
1e:1b:66:6f:b6:86:86:9e:4c:c9:20:a4:9d:a1:57:
31:f7:55:62:b8:4f:62:66:8c:c4:ca:51:84:c8:08:
45:1b:cc:d0:d3:37:f3:70:2e:5f:38:29:bb:cd:8b:
48:88:01:7f:79:c5:3b:48:8b:09:fc:a2:07:70:e3:
35:d0:51:ab:66:79:21:86:b0:5c:ad:24:32:ec:12:
0a:35:ad:e1:fd:b9:8b:58:d4:cb:5b:13:20:8f:93:
04:4c:d5:6b:b5:29:0b:19:e9:da:5d:29:5d:c2:6c:
69:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:A2:56:64:FC:3C:04:45:B2:AA:85:5D:FA:5E:CC:D3:A8:24:FD:C6
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/c6JWZPw8BEWyqoVd-l7M06gk_cY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
28:9a:83:28:4d:c8:c9:45:61:1f:fc:2b:9c:6d:cf:4f:43:e0:
76:ad:4c:37:87:26:24:99:02:0c:6f:f8:a8:81:60:a2:16:39:
8f:00:ae:fe:af:33:32:89:62:db:84:fa:9b:54:91:81:66:16:
9e:58:17:17:66:cb:7d:e4:ef:de:fd:f3:1d:09:7f:82:e2:3a:
b2:bb:78:b7:32:69:90:78:e3:9d:16:38:47:b3:74:90:d9:e3:
37:ea:d5:a2:3b:ad:0d:d2:0e:d9:d5:14:56:a8:10:87:b2:e6:
b9:f3:0b:10:b2:47:bb:3f:8e:5a:54:6c:0d:48:a6:ac:93:67:
a5:a4:e8:73:ab:18:9a:a4:6a:a6:ce:b1:db:dd:63:e2:cc:fd:
52:e5:df:72:c2:f8:48:33:03:86:49:a6:86:2a:05:2a:34:55:
96:19:48:44:fd:ff:03:08:bd:e4:d5:37:89:65:c4:e8:bd:45:
65:aa:bb:e2:95:a5:fe:22:0c:4f:46:7d:b6:4c:21:b2:7a:42:
d6:f5:a3:fe:1d:b9:86:a6:f8:59:f2:3a:2b:06:86:d0:8d:44:
c5:c6:45:88:9a:ff:d8:16:42:e1:8f:36:a2:2c:7b:ae:0f:27:
72:34:e9:13:58:c7:41:be:c7:1f:e3:75:58:55:33:3a:56:80:
5b:db:66:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:51:26 2025 by rpki-client