Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/k6BDu0Hg6wgWgVg895-xSB1YlP0.roa
File: k6BDu0Hg6wgWgVg895-xSB1YlP0.roa (raw, json)
Hash identifier: LJ7B4KKU/GgcMUZl8ZxiZzNHsrzWhecpdJx4Y2avoZU=
Subject key identifier: 93:A0:43:BB:41:E0:EB:08:16:81:58:3C:F7:9F:B1:48:1D:58:94:FD
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0D4C
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/k6BDu0Hg6wgWgVg895-xSB1YlP0.roa
Signing time: Sat 24 May 2025 19:38:31 +0000
ROA not before: Sat 24 May 2025 19:38:31 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3404 (0xd4c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 24 19:38:31 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=93A043BB41E0EB081681583CF79FB1481D5894FD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:b1:0a:96:5f:98:34:4d:99:d7:07:43:9e:2b:
62:1b:4b:8d:52:98:2d:ac:f8:f2:63:0a:f8:81:41:
49:5b:09:bb:7f:a1:a1:89:2e:05:16:b9:7e:bc:31:
8d:7d:a5:13:56:2b:77:1b:39:be:89:d1:76:46:d1:
98:2a:b2:df:81:22:68:3f:40:5a:01:99:d5:03:2e:
39:88:ac:0a:3c:3c:71:38:69:22:16:a4:68:2c:ec:
2f:b7:36:05:5e:b9:ab:52:48:eb:4f:0d:af:85:9b:
53:2f:9d:18:7f:46:c2:ef:b7:fe:7e:ce:45:c7:1b:
3b:9a:f4:f5:a4:e8:ad:95:00:69:c4:55:ea:1b:a6:
f7:ec:80:61:50:26:9c:6a:e7:a9:61:0c:0e:7d:3e:
9e:16:9d:b0:3c:a1:89:ca:2f:00:d7:97:6c:0b:81:
e1:d0:a8:fb:84:d3:9f:09:69:17:80:c3:e4:83:a3:
9b:fe:98:e5:d2:47:51:2f:66:ad:0a:ca:a8:e7:92:
c6:e2:52:e5:ba:bb:dd:00:d1:99:5b:e1:2b:0d:22:
96:91:6a:58:c9:eb:13:b9:89:29:af:1d:44:7d:57:
49:b3:d4:28:84:d9:6b:18:7f:eb:56:da:3c:83:2d:
73:f4:38:57:67:1c:8e:06:86:41:54:49:c2:89:6a:
8e:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:A0:43:BB:41:E0:EB:08:16:81:58:3C:F7:9F:B1:48:1D:58:94:FD
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/k6BDu0Hg6wgWgVg895-xSB1YlP0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
a5:1c:10:78:3a:dd:b9:0d:36:a3:42:9f:a0:4e:b7:82:3a:80:
87:2a:dd:51:21:41:65:2e:3c:2f:e4:19:6a:40:21:74:94:10:
7c:18:94:af:cb:f0:50:44:80:2b:33:cb:aa:ae:59:cf:e1:f3:
6b:0b:a2:bb:6d:39:df:86:9b:1c:4a:eb:86:b4:2c:df:d1:4c:
1f:36:70:c2:a6:4b:d0:e2:58:e4:df:55:64:3b:24:f8:0e:25:
3e:34:aa:38:e8:cb:c9:99:bf:eb:a0:d4:94:c1:0f:04:bc:53:
83:0b:64:98:43:47:bb:34:64:fe:f0:11:2b:d1:03:72:3b:4a:
81:6e:d3:b9:cb:ba:2a:03:c8:fc:b7:16:4e:6e:cb:61:9b:bc:
3c:f5:47:35:f2:cb:db:e8:86:30:2f:62:8a:b5:03:d4:9e:40:
94:78:80:70:a7:3e:c0:eb:b1:93:bd:23:c8:18:fa:11:10:f2:
c2:f1:08:6a:50:87:84:e9:c2:3a:c6:17:b8:b7:13:f0:66:a0:
ef:a2:f5:66:c5:48:e1:2b:58:cd:78:1c:d7:e1:49:69:91:1f:
18:75:ff:a9:b8:ae:2a:bc:71:4f:bc:d9:3a:10:75:22:04:89:
88:b3:1d:6b:bc:3d:70:cc:68:b9:17:03:3c:94:75:2c:fc:82:
4a:75:c6:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 02:12:39 2025 by rpki-client