Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/toP0AmSXlbRAPrVK53_ArutrCvk.roa
File: toP0AmSXlbRAPrVK53_ArutrCvk.roa (raw, json)
Hash identifier: +oKVIrgL2RzlXNVA1cpULlN88jGVOF5JWWN/HCtSQ1I=
Subject key identifier: B6:83:F4:02:64:97:95:B4:40:3E:B5:4A:E7:7F:C0:AE:EB:6B:0A:F9
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 2100
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/toP0AmSXlbRAPrVK53_ArutrCvk.roa
Signing time: Fri 20 Jun 2025 13:41:40 +0000
ROA not before: Fri 20 Jun 2025 13:41:40 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8448 (0x2100)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 20 13:41:40 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=B683F402649795B4403EB54AE77FC0AEEB6B0AF9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:11:d3:4a:63:4d:46:27:02:91:80:f3:63:1a:
09:8a:2a:68:d4:d6:21:a6:f1:e9:b1:c7:01:2f:ca:
9c:c8:22:bd:a7:25:a1:98:34:64:e3:7f:e9:1e:e4:
0f:8a:63:f4:2d:6c:81:6a:c9:e4:aa:0f:d0:d4:98:
13:26:d5:93:76:fd:a2:01:d6:52:4f:08:0b:b9:e4:
30:cc:17:67:d6:f6:f4:eb:61:82:74:f4:53:76:77:
d3:df:3d:82:3a:05:b9:2b:53:5e:fa:b5:36:0c:4c:
cd:7b:9e:30:19:38:02:fe:3e:de:e0:f8:b7:f9:29:
34:7d:55:57:97:c3:93:82:7b:2d:27:4f:ef:64:8c:
0a:a2:a3:e9:bc:19:8c:62:3b:af:4b:af:74:14:a6:
c7:a8:68:1d:7f:fe:1a:13:b7:eb:8f:67:0f:ad:30:
3a:4d:4d:d4:da:e2:28:bd:d2:96:3c:65:b5:c5:45:
d9:16:d0:3b:2e:31:6b:b4:af:62:93:5d:5b:25:59:
97:a2:ee:bd:62:ea:55:96:3b:06:5a:38:38:83:95:
91:b3:9d:07:38:c5:6b:d0:74:07:42:9d:9f:47:01:
5a:60:f1:3d:9d:ca:17:ca:ee:ef:21:19:db:30:fd:
bf:70:f9:fa:a8:1a:38:e6:ad:d0:ed:a8:ec:41:93:
22:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:83:F4:02:64:97:95:B4:40:3E:B5:4A:E7:7F:C0:AE:EB:6B:0A:F9
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/toP0AmSXlbRAPrVK53_ArutrCvk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
90:06:5a:52:17:bf:52:1c:dd:fa:80:38:36:b6:e1:f3:b1:5b:
5a:b9:f1:50:94:22:66:2a:3a:de:84:b3:0e:bc:99:2e:6e:f7:
59:77:23:13:ff:f6:84:5e:9f:05:ad:63:0c:45:33:43:b8:fb:
13:80:fb:0f:1c:0e:f9:98:fd:a5:49:14:01:b7:87:d4:5d:88:
72:20:3d:0d:15:7b:de:d3:ed:8c:12:b8:1f:62:10:c6:0f:64:
55:1c:32:92:48:13:75:a3:98:71:3e:fc:37:bb:18:c6:b3:3b:
36:c3:5c:61:41:52:a2:21:41:b2:02:4b:e3:f9:27:e0:df:7e:
75:0f:66:9a:12:cb:f5:2c:7b:66:41:c1:1a:81:b1:31:7f:c3:
ec:c5:91:89:b9:31:5f:da:fc:ac:e0:bf:04:9b:56:58:b2:c5:
7c:15:14:1c:fd:82:5a:12:b4:0e:06:eb:5f:46:1e:1c:03:e4:
72:95:31:cc:db:38:60:1a:e1:ef:1f:7b:58:ee:a0:cd:b3:78:
79:54:21:7a:37:a4:40:3f:8a:48:3f:5f:b8:ff:75:5e:a8:58:
41:07:e4:62:b6:5e:2b:55:90:36:a4:a9:47:7d:92:d2:d4:17:
00:61:e0:30:04:0c:e3:d3:e5:0c:5e:4e:03:20:5c:f6:8d:44:
4f:84:18:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:54:50 2025 by rpki-client