Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/sG-1L5NhzqRQ5JxnzaWRB2lGEAA.roa
File: sG-1L5NhzqRQ5JxnzaWRB2lGEAA.roa (raw, json)
Hash identifier: zn8ljYNQBR0MPTP6/Qi8imAHEX93zkH7Cj674fgPjXk=
Subject key identifier: B0:6F:B5:2F:93:61:CE:A4:50:E4:9C:67:CD:A5:91:07:69:46:10:00
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 20EC
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/sG-1L5NhzqRQ5JxnzaWRB2lGEAA.roa
Signing time: Fri 20 Jun 2025 11:11:40 +0000
ROA not before: Fri 20 Jun 2025 11:11:40 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8428 (0x20ec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 20 11:11:40 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=B06FB52F9361CEA450E49C67CDA5910769461000
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:60:bf:54:9f:c1:72:0b:8b:7d:4b:6d:8b:d9:
c4:97:f9:0a:20:18:80:26:84:5d:25:42:16:25:8d:
ca:68:d2:8f:eb:d4:4e:2f:30:95:c1:d2:d6:b2:9c:
82:8f:75:3f:7f:90:5a:79:1a:f8:4e:01:33:d5:85:
da:d3:ff:cf:13:25:1e:80:1a:e6:33:3a:5a:c1:e2:
55:79:be:bd:02:27:70:73:86:07:14:23:d6:42:c5:
c8:1d:60:2c:b9:c2:e8:94:47:b5:9c:3f:21:a1:ad:
bd:bc:71:81:6d:ed:19:49:ad:d6:2d:3a:f1:b6:85:
51:58:52:d7:3b:00:6b:42:35:7d:c8:e6:66:4f:b1:
77:b8:c5:d6:af:74:f6:0e:d2:ca:e4:0a:9a:f5:c1:
83:47:f1:fb:e2:d9:36:dc:a2:4f:c7:71:d8:72:64:
f2:e5:8f:68:18:7a:59:ed:56:d5:ab:67:1d:de:22:
d5:d1:a0:f4:e9:d5:dc:02:bd:25:7f:96:1e:34:d2:
bf:53:54:9d:75:ae:8e:95:7e:31:49:75:d7:68:43:
fd:32:83:84:ab:b5:84:02:75:5f:2e:c0:64:15:d8:
28:1e:19:0f:b6:a2:95:7f:49:89:db:9e:91:26:51:
45:be:b4:da:23:62:5e:4b:03:d8:95:db:ad:0f:bc:
1f:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:6F:B5:2F:93:61:CE:A4:50:E4:9C:67:CD:A5:91:07:69:46:10:00
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/sG-1L5NhzqRQ5JxnzaWRB2lGEAA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
13:de:3e:55:b4:31:13:d1:2a:c3:44:0a:22:c7:e7:a7:3b:a2:
cd:0e:6b:ef:38:69:f8:0f:67:c6:1c:da:80:12:85:fc:0d:ca:
85:ef:fa:5e:36:e3:a3:8b:46:8b:b6:35:ec:62:4b:8f:be:64:
c5:45:11:fa:aa:1e:2f:2c:89:e4:b9:a8:30:7b:35:fa:2c:2a:
be:67:74:e1:0b:8e:61:74:d1:f9:9b:a6:48:c1:78:5b:1b:44:
de:69:c1:00:de:5e:9d:e9:e8:4c:f7:f5:eb:5a:87:b4:df:49:
51:dd:78:fe:3c:1b:27:bb:ed:3c:82:a4:6b:af:a9:4a:06:5c:
f1:9f:f4:5d:fc:01:56:a6:0c:ea:a6:86:67:b2:28:13:1c:60:
05:53:bd:2f:9d:f9:c6:b3:50:8c:2f:c5:b8:43:90:e0:34:cd:
fa:4a:ee:61:cb:0b:34:ba:82:ef:0a:43:4c:44:1e:02:9a:92:
76:3f:79:ce:c1:10:c8:67:3e:ca:52:32:2e:16:35:1d:75:a1:
e8:49:03:af:b9:aa:d7:77:fd:93:42:f0:4a:dd:ff:5e:20:1d:
22:3d:20:41:95:b1:10:b0:58:4d:be:96:ec:d0:92:36:72:f5:
d8:24:e6:c6:2d:58:d5:c0:ab:f3:c2:81:80:56:c6:79:24:82:
00:56:c4:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:47:46 2025 by rpki-client