Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/mskz7snfSiCiWXpg_qfxApC_1og.roa
File: mskz7snfSiCiWXpg_qfxApC_1og.roa (raw, json)
Hash identifier: gJoZ1c1Q0eY2UzV1s5o0KTxnKrKWGoOmO2HjJhd/M+Y=
Subject key identifier: 9A:C9:33:EE:C9:DF:4A:20:A2:59:7A:60:FE:A7:F1:02:90:BF:D6:88
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 2278
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/mskz7snfSiCiWXpg_qfxApC_1og.roa
Signing time: Sun 22 Jun 2025 12:41:49 +0000
ROA not before: Sun 22 Jun 2025 12:41:49 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8824 (0x2278)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 22 12:41:49 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=9AC933EEC9DF4A20A2597A60FEA7F10290BFD688
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:6b:94:d8:dd:21:22:06:06:80:1a:b2:49:f0:
73:be:78:69:59:aa:c4:0e:f0:24:b0:55:a6:ff:5c:
a3:73:9a:b4:51:e4:df:6e:77:8e:9d:02:8e:ef:c4:
2c:96:1c:34:d9:c6:65:04:5e:f2:0c:22:17:91:6e:
f9:b1:06:ae:0d:60:dd:c0:37:ff:52:2e:54:27:e6:
16:a4:01:12:1f:3a:61:db:61:ef:97:b0:9c:63:62:
34:00:34:9e:d0:ac:f8:52:1f:83:ea:c1:cf:c6:d4:
05:51:87:fa:83:01:40:8b:00:01:a6:97:3d:35:f8:
df:36:44:76:1e:01:6e:f6:20:0a:25:53:a2:a6:17:
e3:45:c9:f4:6e:c5:41:cf:cf:a2:5d:82:f3:84:8a:
06:d4:35:30:7a:5d:3d:15:1a:ad:4f:5a:25:d4:98:
95:9e:14:29:cc:ac:c5:e2:90:21:d0:60:ae:bf:c6:
45:85:fe:5b:00:0a:0a:20:e0:09:74:f6:88:fb:ee:
dc:50:fc:37:80:44:81:73:f8:e6:e0:3d:34:81:8e:
87:a8:c9:74:21:67:fd:7f:1f:84:84:90:db:af:18:
91:fd:c7:35:29:40:47:29:e6:f0:8c:f4:c0:3a:80:
8e:1a:cf:e4:4b:8b:8f:4b:0a:4d:24:fc:8e:85:cb:
59:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:C9:33:EE:C9:DF:4A:20:A2:59:7A:60:FE:A7:F1:02:90:BF:D6:88
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/mskz7snfSiCiWXpg_qfxApC_1og.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
10:40:31:26:2e:64:6f:12:26:e1:52:5a:f2:66:fe:14:f7:e8:
de:32:4d:4e:ea:d4:d5:bf:51:b2:d4:7b:5e:1e:63:77:c3:aa:
68:57:99:63:c8:44:c0:82:6e:c3:8b:69:99:21:2f:00:34:04:
27:e0:2a:d0:8b:a1:4b:2c:e0:ab:2e:04:58:1e:20:75:6b:eb:
0f:44:8d:d9:9a:6c:63:8b:84:26:b5:e0:64:27:91:74:32:03:
15:8e:b0:a5:1a:9a:96:42:6f:e1:95:28:61:29:71:2b:9d:1f:
b9:bb:cf:56:76:c9:50:fb:85:ff:1e:c8:85:92:f1:44:0d:8e:
59:1e:85:4c:ec:05:4f:52:cf:9a:79:47:a8:57:9c:67:67:a8:
09:b1:53:cb:35:da:52:47:b6:d7:8f:01:42:07:af:d9:c3:48:
9d:b1:a7:b6:0d:d5:09:f0:43:71:bf:9a:b9:9e:f9:4e:6f:41:
ca:db:fb:7f:49:68:a2:ba:45:b8:e7:00:5e:a8:4c:1c:8e:f7:
be:05:97:37:20:43:58:fb:82:de:8b:1e:69:e7:ef:5b:ed:06:
30:97:0e:0d:f3:08:30:33:09:f0:11:16:22:92:8e:13:a2:39:
3f:26:b3:aa:43:e8:7e:21:fb:b5:49:f2:32:e5:a3:05:5c:ae:
4b:57:b9:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:44:52 2025 by rpki-client