Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/m-wdzRPQ6K_xQBq2mqhoOqeAtQw.roa
File: m-wdzRPQ6K_xQBq2mqhoOqeAtQw.roa (raw, json)
Hash identifier: /Y5bePerXqFiXsMALrEAx0DPJXMSl/e406xTxFQ9m70=
Subject key identifier: 9B:EC:1D:CD:13:D0:E8:AF:F1:40:1A:B6:9A:A8:68:3A:A7:80:B5:0C
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1DE8
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/m-wdzRPQ6K_xQBq2mqhoOqeAtQw.roa
Signing time: Sun 15 Jun 2025 23:10:02 +0000
ROA not before: Sun 15 Jun 2025 23:10:02 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7656 (0x1de8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 15 23:10:02 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=9BEC1DCD13D0E8AFF1401AB69AA8683AA780B50C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:8b:20:5e:e6:7a:e5:52:ba:7a:6d:fc:03:e7:
9d:dc:09:6f:44:81:84:12:93:20:86:35:2a:a8:1b:
ab:32:ce:f0:f6:71:08:68:60:17:26:1c:6e:b0:3f:
de:b0:11:5c:3b:4c:00:3e:8a:c0:9c:94:09:34:9b:
53:04:34:7c:9e:25:d1:9f:38:47:53:1c:04:a5:1c:
4e:a9:43:22:df:ab:74:64:5b:a2:37:bd:3c:3e:89:
4f:2a:e4:7d:0d:4c:e7:84:9b:5f:de:63:9f:5c:2f:
49:bf:a9:d1:16:cf:49:a6:02:ec:37:73:e1:f5:03:
48:ff:c2:23:9e:f4:76:d8:c6:67:b4:54:a9:59:e8:
61:ed:57:18:f0:d3:09:ad:3c:70:4f:7c:c7:85:ea:
5f:a6:12:22:7c:cc:74:7c:35:f6:28:5f:12:d8:90:
f1:7f:ba:dc:7e:e3:85:60:ea:99:32:40:52:ec:1e:
7b:52:31:36:90:bc:56:e1:d7:cf:42:59:4e:cc:c0:
1e:22:25:8d:97:d8:80:0d:d9:1d:75:8c:6e:3c:b8:
40:42:a5:05:1d:b0:6b:56:1f:ce:45:d5:ea:1a:d5:
bc:13:8f:f3:54:0e:3b:8e:50:00:e9:1f:a4:f4:30:
ec:dc:28:f4:f9:83:19:d7:a6:59:98:b9:38:4c:6f:
da:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:EC:1D:CD:13:D0:E8:AF:F1:40:1A:B6:9A:A8:68:3A:A7:80:B5:0C
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/m-wdzRPQ6K_xQBq2mqhoOqeAtQw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
74:d2:0e:94:0b:ce:ed:37:84:27:37:a0:08:53:bb:cc:d6:27:
7e:13:45:7e:8a:46:bb:c5:48:60:02:f0:42:8f:b2:6a:d2:c4:
8b:3a:88:26:51:4c:5d:d1:67:f8:32:4f:31:e3:82:d5:34:20:
80:c1:8c:66:db:88:aa:32:ee:e1:f2:ec:21:4d:3b:23:b5:39:
ca:f6:19:b7:37:e7:34:76:1d:cb:c5:64:9a:f9:ad:7d:1d:dc:
70:f1:59:82:17:83:fd:37:d0:6f:3f:18:92:9f:f3:f9:11:77:
f4:9d:d4:14:45:44:1b:2a:2d:1a:00:2a:62:ea:e6:83:f9:85:
fe:53:3a:60:52:52:db:55:34:ab:e1:b1:d6:e7:bd:c4:3f:54:
b9:86:1d:75:8d:5e:9e:88:01:95:cb:d6:c2:86:38:60:49:78:
58:73:f2:9d:8e:c8:e0:1c:e1:be:2a:5a:df:58:5e:06:3f:b1:
50:9d:94:60:fe:61:ea:36:bf:ac:c8:1b:32:94:ea:14:63:0d:
50:77:5d:d7:21:2e:46:f7:97:84:f7:bc:ee:f5:dc:f4:25:3b:
3f:69:f9:e4:18:ee:e6:95:e6:ff:99:27:95:0e:ef:e8:59:f8:
21:50:fb:54:a9:cd:93:77:f5:c4:e8:b9:c5:c5:db:25:95:ef:
cf:d1:45:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:44:57 2025 by rpki-client