Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/nrsneqQkmBYsor59UpUyAOr68kM.roa
File: nrsneqQkmBYsor59UpUyAOr68kM.roa (raw, json)
Hash identifier: fAfF3lNq69mD7uJDq7mLNBjLFf11RGcii2TvcQGVfmY=
Subject key identifier: 9E:BB:27:7A:A4:24:98:16:2C:A2:BE:7D:52:95:32:00:EA:FA:F2:43
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 12BC
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/nrsneqQkmBYsor59UpUyAOr68kM.roa
Signing time: Sun 01 Jun 2025 01:39:07 +0000
ROA not before: Sun 01 Jun 2025 01:39:07 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4796 (0x12bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 1 01:39:07 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=9EBB277AA42498162CA2BE7D52953200EAFAF243
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:2f:96:91:3b:06:e6:31:32:b8:57:f9:c9:0f:
7d:e9:0c:32:33:a6:a7:9d:77:a3:7b:1e:d1:b2:10:
a9:25:8d:d8:00:99:72:52:68:f5:aa:49:c3:b5:a1:
cf:07:a8:0e:66:15:5b:50:ff:64:cf:97:67:a0:60:
e6:a2:35:4a:9b:47:4c:ee:62:42:86:15:a1:5e:6d:
53:29:2f:0c:33:54:c3:de:87:a8:71:37:28:9f:d8:
c3:4d:8b:43:a3:c8:28:51:09:84:70:84:30:12:20:
af:a0:93:38:ee:18:3d:bf:40:e0:8a:c7:6f:73:06:
9b:ae:1e:ff:65:cb:af:88:99:cf:c8:26:44:d8:ac:
35:29:14:61:6b:ea:3b:05:77:f1:19:4f:b4:45:4c:
eb:5f:d0:58:68:78:24:df:de:71:39:a4:7a:b4:a1:
18:47:ff:e3:c5:93:b0:92:23:e1:82:5d:dd:3e:cf:
0f:89:c4:dc:db:cd:cd:6d:37:17:d9:c4:54:ef:ad:
02:9c:ce:82:9d:79:71:1e:94:ba:0b:6c:a6:9a:6d:
79:cb:5c:a1:d6:78:00:80:9c:bb:cc:c1:ec:0b:38:
d3:19:57:d0:77:c6:63:c6:23:3e:f6:03:b2:be:91:
81:20:8c:38:be:29:e9:24:b5:d2:84:8a:15:81:69:
b8:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:BB:27:7A:A4:24:98:16:2C:A2:BE:7D:52:95:32:00:EA:FA:F2:43
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/nrsneqQkmBYsor59UpUyAOr68kM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
1d:90:08:d9:cc:39:3a:d8:7a:3a:3e:25:65:4d:f8:ca:b0:2a:
cb:34:9d:96:ea:f3:e6:39:a1:2c:cb:06:66:95:9b:c2:45:c9:
42:86:67:e7:1f:eb:04:9d:0c:c4:a7:6f:17:e8:0c:43:b0:10:
3d:9d:33:01:6b:cd:70:6c:77:ac:61:4c:0b:88:9c:97:bd:88:
5d:32:57:dc:c5:08:55:c0:a2:b6:c5:97:b2:b0:d6:96:53:c0:
51:bd:14:6f:ea:d1:7b:7a:90:cd:9f:db:98:b5:8e:44:6b:43:
dd:a3:7b:5f:19:90:1f:76:90:0d:67:ac:a6:f0:36:1a:16:f7:
87:30:c5:4e:bf:1c:25:3b:4f:8b:2d:06:b9:3f:a1:02:90:81:
0e:48:73:87:ae:da:00:a4:ef:3f:c1:1d:83:bf:b4:8f:c2:32:
39:5a:77:0e:9d:27:70:52:15:17:3f:a0:8e:90:a3:08:dc:41:
12:dc:02:5e:2a:92:e0:9d:1e:ed:55:3c:29:fe:ea:9b:d5:dd:
72:5c:b4:cb:33:bd:c0:24:a3:2f:41:5b:1a:22:89:43:3e:77:
ff:1f:86:7b:a3:76:10:fc:80:c2:c9:d8:f2:f3:dc:ce:e4:8d:
24:f5:95:41:2d:c9:ca:42:ea:f2:2c:24:02:9c:de:2b:bb:fe:
ee:cb:e5:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 01:10:27 2025 by rpki-client