Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/nivV5OHiUKDJYIhkFmdQSnIrOcw.roa
File: nivV5OHiUKDJYIhkFmdQSnIrOcw.roa (raw, json)
Hash identifier: ndyQ/Ksfg/6fkTHoLtMWytYmTlhfnet6LpxzKmXbR8A=
Subject key identifier: 9E:2B:D5:E4:E1:E2:50:A0:C9:60:88:64:16:67:50:4A:72:2B:39:CC
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 20A8
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/nivV5OHiUKDJYIhkFmdQSnIrOcw.roa
Signing time: Fri 20 Jun 2025 00:19:50 +0000
ROA not before: Fri 20 Jun 2025 00:19:50 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8360 (0x20a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 20 00:19:50 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=9E2BD5E4E1E250A0C96088641667504A722B39CC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e1:a4:5e:61:40:f6:ad:e2:26:88:29:98:49:
2f:2a:90:9d:c5:34:07:86:90:c8:05:13:71:c6:14:
10:8f:fb:20:84:86:e7:69:42:28:68:e9:9a:f9:c2:
6b:42:11:6b:7c:3d:8b:36:63:01:ce:df:f8:0e:91:
03:a1:b5:d1:5f:44:b0:c6:2d:39:83:92:a7:e5:7b:
f6:fd:f8:d6:dc:63:72:58:86:19:e8:d2:99:16:6f:
56:25:75:75:98:6d:a4:cc:1d:2c:6e:a9:4a:fc:8d:
f3:e7:e1:f3:77:c3:5c:fa:21:0c:b7:21:fb:f0:a9:
28:d1:2f:ae:fa:1c:99:9a:e4:a8:77:96:88:9d:7b:
b2:92:df:55:64:21:35:f2:40:2e:cd:6c:d1:c6:5a:
48:71:37:be:5b:fd:13:56:30:a6:04:61:9d:ad:e6:
67:ce:99:37:51:2a:c4:59:7b:d9:c6:61:2e:74:4c:
1d:99:21:64:ef:b7:af:43:16:cf:23:be:b9:76:c7:
f1:75:d6:cf:78:bc:09:39:8e:c9:1a:59:8d:7b:c4:
df:54:b5:d7:74:76:52:d3:be:8c:2f:b3:2d:d6:25:
b2:80:97:01:47:44:a5:4b:8e:64:73:de:02:af:1b:
01:bd:b9:3e:c6:82:34:a5:f1:34:e8:03:c0:d9:1a:
96:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:2B:D5:E4:E1:E2:50:A0:C9:60:88:64:16:67:50:4A:72:2B:39:CC
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/nivV5OHiUKDJYIhkFmdQSnIrOcw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
47:38:5c:7e:e0:08:26:75:34:c4:62:c8:28:d1:59:35:0b:31:
00:c9:16:df:8a:d2:b2:5f:5d:81:42:99:3a:34:5c:bb:87:00:
c5:75:43:7f:92:57:64:2f:17:0a:d1:ce:c5:83:8a:ed:60:23:
50:a7:94:63:f6:70:88:6d:0e:00:33:db:10:ba:20:00:a4:f0:
6c:9a:38:10:7c:05:50:f8:79:9f:c7:89:a4:de:92:a1:f5:60:
be:20:c0:27:5d:16:ad:70:89:9f:05:d3:f0:06:55:7d:e9:84:
4d:c4:aa:ce:a0:3a:10:c2:4c:a9:b5:d1:cf:20:fd:17:8b:b1:
09:d8:bb:26:b6:a2:dc:ef:9b:df:21:8a:87:12:1f:f1:3d:cd:
21:ab:84:8a:bc:18:f9:53:3f:44:91:d2:a4:a4:84:8a:42:30:
87:9d:f7:6e:d9:07:61:56:f9:66:48:55:8d:82:53:ce:0c:e4:
3d:47:be:ab:de:0c:19:ce:fa:ad:da:12:af:9f:f0:d2:93:9c:
4b:d8:5c:d7:c3:70:9d:f8:bb:1e:1e:83:a2:53:2a:97:49:a4:
d1:f4:6c:92:74:0b:cf:b1:1c:4a:4e:10:7b:42:f7:d3:cd:69:
8e:ff:e7:27:14:8a:d7:6a:ce:24:8b:79:d3:3c:59:b4:ad:80:
b5:24:d8:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:51:37 2025 by rpki-client