Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/mkVkJZsl_SdNZ8BjiC-ssIk1WYQ.roa
File: mkVkJZsl_SdNZ8BjiC-ssIk1WYQ.roa (raw, json)
Hash identifier: 3oGJj+5R7QuGRXHV4GKVvDsHvB/RFcLlbRcSgjHol3A=
Subject key identifier: 9A:45:64:25:9B:25:FD:27:4D:67:C0:63:88:2F:AC:B0:89:35:59:84
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1354
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/mkVkJZsl_SdNZ8BjiC-ssIk1WYQ.roa
Signing time: Sun 01 Jun 2025 20:39:12 +0000
ROA not before: Sun 01 Jun 2025 20:39:12 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4948 (0x1354)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 1 20:39:12 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=9A4564259B25FD274D67C063882FACB089355984
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:10:42:94:db:b9:f7:83:30:e3:54:fd:46:fc:
c7:b4:d6:2f:86:6e:ae:85:d2:75:db:cf:98:47:fb:
4b:c5:ab:94:f9:11:f0:81:7a:ea:5e:a6:04:98:01:
d6:34:b7:68:fd:53:58:88:5a:80:09:b7:fb:5e:80:
fe:58:e6:f5:80:5f:e5:84:f3:87:e4:af:66:1b:ee:
7c:bc:ab:97:f6:33:aa:8a:66:e9:02:47:75:2b:23:
05:b2:6a:b8:39:e5:cb:35:b3:bb:02:a7:41:eb:e3:
a4:8d:bf:90:d8:07:22:b8:66:c1:75:de:4b:8c:9a:
d9:97:02:bc:17:53:d8:37:f2:93:c7:e6:b8:19:7b:
12:99:72:46:00:8a:4b:67:80:de:c9:18:2f:f4:12:
c0:14:eb:9a:44:d3:54:0a:88:5f:a9:5c:ac:9a:0a:
92:44:df:91:d3:b9:57:63:28:66:08:4d:7b:d2:30:
69:4a:7e:0b:14:96:c7:b1:4b:fe:4e:c8:1f:8d:19:
b1:d6:2c:f4:83:75:a7:9b:4e:d6:01:af:55:76:4b:
5b:83:8c:81:66:ec:40:bd:e4:69:0e:02:eb:8d:ad:
4a:6a:0c:5a:2f:66:de:25:ee:68:70:40:39:52:7d:
47:e7:0b:09:81:51:57:66:46:dd:be:e6:48:ab:25:
38:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:45:64:25:9B:25:FD:27:4D:67:C0:63:88:2F:AC:B0:89:35:59:84
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/mkVkJZsl_SdNZ8BjiC-ssIk1WYQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
54:60:b8:1c:3b:07:84:4b:51:af:72:7c:cb:5c:9b:e3:90:7b:
e2:c7:7c:c6:3f:dd:99:92:48:b7:ca:db:f9:f7:a0:0c:e8:b4:
94:f7:2f:3b:1b:88:b9:af:36:8e:3e:cf:af:01:89:b9:e8:ae:
13:19:52:84:be:10:83:6c:33:70:1c:29:7f:db:a5:78:2b:b2:
11:bf:f5:19:fc:a5:db:c8:d9:03:2b:9c:ff:84:6c:f2:26:5b:
47:8b:08:29:d3:ec:7e:9e:97:a0:0c:e3:83:37:69:4d:da:7f:
20:88:0f:4f:99:ea:ca:b9:9d:9f:2e:68:b1:b9:22:56:e5:c1:
ef:52:e7:6e:cf:49:79:11:70:46:5d:65:3b:47:b4:c5:2e:25:
a8:b7:e2:15:ce:68:d5:b6:36:da:37:3e:c7:8e:03:c3:35:42:
2c:7d:b1:36:67:96:cd:83:ae:7a:2d:2f:5a:1d:d2:d1:4b:d9:
9c:f1:09:91:5f:34:14:72:9c:69:d9:c4:19:7c:89:b3:c5:dc:
1a:d6:9a:7a:13:b3:fd:60:2d:a4:02:40:24:b9:93:91:23:e4:
75:08:d8:0e:ef:c2:a9:69:fc:a8:d7:69:28:59:2e:95:4d:d1:
3e:96:78:59:85:dc:50:a9:e1:92:17:a2:47:7e:0d:5f:40:41:
bd:83:6f:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 01:09:57 2025 by rpki-client