Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/pdBNG5F-hDi-DbQKSqFtVb3zjog.roa
File: pdBNG5F-hDi-DbQKSqFtVb3zjog.roa (raw, json)
Hash identifier: s4+PlzLu6QFK+ZOadN0a2wuKxOyj6afwRBDkm0zMGl8=
Subject key identifier: A5:D0:4D:1B:91:7E:84:38:BE:0D:B4:0A:4A:A1:6D:55:BD:F3:8E:88
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 2114
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/pdBNG5F-hDi-DbQKSqFtVb3zjog.roa
Signing time: Fri 20 Jun 2025 16:11:41 +0000
ROA not before: Fri 20 Jun 2025 16:11:41 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8468 (0x2114)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 20 16:11:41 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=A5D04D1B917E8438BE0DB40A4AA16D55BDF38E88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e8:1a:26:09:b7:13:da:77:76:56:91:fd:be:
84:9e:69:86:14:c7:23:b1:ac:3d:24:d9:c0:22:6a:
1c:94:37:a0:7e:bf:8c:e1:9b:dc:2e:a5:76:c9:03:
49:b4:4f:bd:fc:b3:82:3e:31:09:ea:09:fb:1c:b1:
7a:4e:c9:10:ac:56:b6:c3:4e:09:09:2f:59:d5:5c:
f5:c9:cd:68:5c:02:73:d0:66:56:10:bf:4b:e1:05:
47:fa:32:da:29:93:40:73:0c:89:ae:99:2d:88:79:
32:cc:a5:e3:3b:fa:1b:a9:c3:b5:8e:df:32:c6:b8:
7b:1e:b9:1d:d1:9a:8c:10:10:4e:36:40:f7:43:89:
be:4f:33:b1:6e:92:45:e3:59:cd:ab:ed:d3:72:97:
5f:d5:e6:c6:30:95:1c:f1:ba:94:ba:14:ef:f3:f0:
5f:b9:f9:6e:18:84:7b:e7:ef:f4:dc:c5:d5:c5:05:
dc:e4:e4:f8:34:c1:ed:54:cb:33:d9:4f:7a:9e:e3:
14:ed:3a:9d:f5:f1:a4:6f:4a:21:a8:ff:ea:4b:96:
ce:08:d8:70:4f:9c:58:06:f4:ab:0f:4d:b1:df:2c:
ef:34:c4:a6:b0:20:ab:80:f5:af:bd:92:14:69:d6:
9d:5c:ba:dd:45:ca:ef:01:ee:19:19:14:79:d1:2a:
28:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:D0:4D:1B:91:7E:84:38:BE:0D:B4:0A:4A:A1:6D:55:BD:F3:8E:88
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/pdBNG5F-hDi-DbQKSqFtVb3zjog.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
0a:fb:ef:b9:a2:04:fa:ab:f0:76:5c:83:0e:75:ae:eb:1a:ee:
52:85:7d:3d:04:ff:02:05:35:9c:d8:d9:56:83:f5:26:63:69:
c2:26:47:bd:4e:1a:ef:b2:17:28:94:55:23:90:fb:94:5a:10:
b5:33:8a:ba:06:4d:38:5b:eb:94:b5:d9:d6:73:2a:30:11:ae:
cc:8e:79:c1:c3:61:c4:ed:9e:3a:67:7a:df:18:6f:57:52:5f:
47:11:03:f7:c4:ae:20:4a:37:4e:02:25:23:b7:e3:22:01:a9:
51:ba:f0:c3:51:25:5d:6d:41:7a:99:04:36:d7:f4:7e:ba:1b:
85:29:aa:44:a3:0f:e7:b7:9b:3d:ae:98:f5:9b:28:d7:fc:9f:
2a:b4:f8:05:2d:ab:bc:90:d6:b5:ba:12:82:8d:29:22:8d:a2:
a7:fa:18:29:61:d8:52:1e:13:02:b6:2a:4c:66:e6:77:9b:b5:
b5:66:d4:fc:43:ef:c1:60:a7:a5:10:f8:58:e3:f3:30:ff:3a:
39:2d:b4:cd:b3:cb:b1:75:9e:ab:1b:b3:e8:dc:c8:37:a9:0f:
bc:fb:25:b3:0d:32:26:b8:13:ab:2e:cb:b9:45:ad:e6:cd:db:
37:13:ec:b0:c3:ad:a5:fe:93:3b:55:e6:91:60:29:98:66:9c:
01:3a:d8:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 20:46:29 2025 by rpki-client