Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/tJrjFmFQm9BsZnfoYUI55zTs-jU.roa
File: tJrjFmFQm9BsZnfoYUI55zTs-jU.roa (raw, json)
Hash identifier: jSIR0P0WgpuZ7ric8QWx/s8FbBmniAryXzWT7deIOEo=
Subject key identifier: B4:9A:E3:16:61:50:9B:D0:6C:66:77:E8:61:42:39:E7:34:EC:FA:35
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0F2C
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/tJrjFmFQm9BsZnfoYUI55zTs-jU.roa
Signing time: Tue 27 May 2025 07:38:55 +0000
ROA not before: Tue 27 May 2025 07:38:55 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3884 (0xf2c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 27 07:38:55 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=B49AE31661509BD06C6677E8614239E734ECFA35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:04:d6:56:fc:74:6f:2e:99:98:9d:ae:ce:de:
36:99:e9:b2:a0:fa:08:f6:cc:e2:a1:b5:32:e1:f1:
39:21:53:aa:83:90:b0:36:25:f9:b7:79:47:2b:f8:
4e:3b:4e:69:e0:8b:9a:f2:03:c9:ff:89:86:09:88:
62:5a:af:b4:3b:d2:91:ff:cf:7a:10:71:5e:5b:c5:
5a:ff:33:ae:36:de:9f:a0:e7:18:8b:ba:4b:1b:24:
2b:0f:4d:d0:87:53:f4:8d:70:cb:69:9a:23:58:7d:
c1:ca:14:20:cf:38:50:9e:d0:70:ef:26:cd:98:c3:
5d:35:68:cc:61:e8:78:2e:42:03:86:2e:8b:c8:92:
26:5f:8c:7e:54:36:65:b6:7e:1e:4b:0d:a3:4a:ae:
48:92:0a:f6:e5:ea:5b:80:db:8a:d2:32:8b:32:b9:
bf:35:f7:a4:34:f6:27:3d:78:04:10:80:a8:1c:d0:
77:16:f2:fe:29:89:16:aa:75:6f:f3:18:60:8f:7d:
6b:69:19:d5:1a:e3:db:82:ff:3e:2f:20:f1:b8:da:
4b:8b:b6:f9:e4:61:0f:15:4b:5d:b8:78:bc:2b:ab:
b2:4e:43:f2:ec:5c:1d:ce:97:cd:d5:be:ff:e6:d4:
90:85:9c:c8:c0:b3:09:4b:95:e8:fc:1c:cb:42:0a:
eb:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:9A:E3:16:61:50:9B:D0:6C:66:77:E8:61:42:39:E7:34:EC:FA:35
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/tJrjFmFQm9BsZnfoYUI55zTs-jU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
2b:d1:b5:5b:74:1d:6f:85:82:b6:bd:36:17:f1:be:9c:2e:9d:
72:6a:47:a8:97:23:48:a3:9a:92:8b:f0:1f:7a:32:80:ba:14:
05:92:c0:85:7e:a2:3c:34:05:d4:2c:fd:5c:f3:0d:13:67:ec:
94:b0:79:66:41:7d:c3:b7:86:4e:b2:70:c1:52:a9:57:37:ee:
0c:2e:aa:37:35:50:ff:ba:58:cf:fd:1f:16:5f:29:d9:24:8c:
c5:48:78:06:e7:06:5d:3b:83:be:f0:83:87:f1:fa:09:12:80:
0c:38:03:03:20:9f:e4:f2:ea:eb:a7:fb:aa:31:3c:e5:03:3d:
c2:80:d3:35:1e:35:e7:62:29:5f:65:5b:d2:1e:7d:8f:bd:31:
5b:3b:b9:58:64:ed:7d:22:a7:4b:6f:66:27:0d:6c:47:ef:3b:
42:eb:9b:18:9a:79:e3:74:47:70:5b:45:64:bf:43:53:9e:0a:
46:a6:83:e6:a2:c7:5f:f1:61:66:d7:f5:92:e8:c4:4e:ce:70:
cd:6d:24:a0:32:f0:e8:a4:cd:24:49:a8:b8:ba:6a:a7:12:a0:
f7:b5:e5:02:88:d7:de:a8:bf:ba:1a:9e:00:34:56:e3:e8:99:
39:bf:52:7a:d6:43:d8:00:aa:1b:a6:06:4d:8b:52:34:9c:bf:
47:e6:b0:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 01:02:12 2025 by rpki-client