Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/r7_O28gK5L_zOmmcuia4hgIiH7E.roa
File: r7_O28gK5L_zOmmcuia4hgIiH7E.roa (raw, json)
Hash identifier: +B83xa3q4PraOj1WI6O3rJGz8Twj4KXRN2bz3RfDk8Q=
Subject key identifier: AF:BF:CE:DB:C8:0A:E4:BF:F3:3A:69:9C:BA:26:B8:86:02:22:1F:B1
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1C28
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/r7_O28gK5L_zOmmcuia4hgIiH7E.roa
Signing time: Fri 13 Jun 2025 15:09:52 +0000
ROA not before: Fri 13 Jun 2025 15:09:52 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7208 (0x1c28)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 13 15:09:52 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=AFBFCEDBC80AE4BFF33A699CBA26B88602221FB1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b5:f5:e9:cf:39:5b:6e:c2:47:c4:3e:dc:6f:
b3:bc:d9:a0:af:1f:5c:b4:05:e5:74:22:0d:d5:fc:
e7:23:76:03:cc:41:24:c1:9b:4d:5d:79:0d:76:54:
c3:53:a2:57:47:3a:ec:6d:e9:97:06:db:ef:10:23:
a4:47:b3:65:96:b5:2f:98:f7:08:e7:f2:10:ca:62:
aa:f8:14:1d:5f:f2:15:19:b6:68:72:0f:1d:5f:3b:
6b:08:c0:0b:a0:ca:e8:ae:cd:89:75:36:8e:3b:ae:
ee:5a:95:33:78:0d:05:79:66:5c:6d:2f:f8:56:00:
9e:f0:73:fb:42:0a:2b:c7:24:86:69:08:ca:f9:38:
07:2e:a2:a4:b1:95:e3:ae:f6:d1:ea:f1:f6:f9:d3:
bc:56:43:70:b4:37:a9:79:cc:b9:8c:f4:2b:13:fa:
9a:cd:01:91:66:2f:00:45:26:a7:4d:de:bc:f8:8b:
c7:ca:b5:6f:dc:80:84:09:6f:03:0e:86:3b:30:e3:
ee:90:1f:c1:93:cc:65:9e:1a:35:4f:d9:a4:f4:66:
cc:c8:bb:78:50:dd:c9:a8:30:49:06:05:f9:2f:1b:
3a:12:11:cb:7c:0e:81:75:c4:8b:96:0b:ee:e6:00:
0a:24:37:e5:45:ac:69:ef:2b:58:a2:b4:10:87:7a:
d0:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:BF:CE:DB:C8:0A:E4:BF:F3:3A:69:9C:BA:26:B8:86:02:22:1F:B1
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/r7_O28gK5L_zOmmcuia4hgIiH7E.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
9c:b9:d6:dc:74:c9:70:ec:43:ff:45:5c:e2:01:f1:88:4f:af:
2c:61:3e:1f:2d:93:40:33:2a:0a:af:38:7a:a1:e9:93:6e:7a:
a3:29:19:f9:5d:a4:20:da:a7:fa:7e:06:a8:1b:e1:02:b3:fe:
01:ff:40:4a:36:99:7b:25:77:be:ba:cc:b9:87:96:e6:1b:1c:
6d:ab:d9:95:73:74:9c:b9:3d:9f:f2:d7:e3:52:35:3f:db:40:
c3:2d:6c:2d:e6:b4:00:76:71:53:54:48:a7:f5:af:86:00:8b:
46:84:2c:5c:91:8f:e3:ee:92:8d:71:77:f8:48:b1:76:f9:80:
f5:4f:a0:dd:21:84:03:f1:79:e1:47:ed:39:9b:b0:c3:53:e3:
1d:e8:ba:de:01:a4:13:c5:a7:49:1d:20:7c:ed:ce:e1:72:02:
b1:9a:5c:b3:49:a7:cd:5b:7a:3b:7d:4a:e1:fc:58:45:31:64:
2b:aa:75:ac:d1:e1:c9:e0:c8:67:70:68:6b:f8:29:67:9a:03:
14:af:ca:9b:52:9f:16:f2:1a:2d:42:b9:de:cc:de:32:06:56:
e6:de:30:5e:2e:61:5b:0f:c0:51:d4:eb:9d:fc:b5:50:60:1e:
50:81:25:61:1b:12:ea:4f:86:b6:15:f7:e0:58:9f:52:cd:19:
70:bd:6d:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:43:11 2025 by rpki-client