Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/uMMA0jACfh0DaTVjjGsl833zx0M.roa
File: uMMA0jACfh0DaTVjjGsl833zx0M.roa (raw, json)
Hash identifier: fGyqkygsiZ3okHHddc7SAC2sJAkx//KfKSFriXy2spI=
Subject key identifier: B8:C3:00:D2:30:02:7E:1D:03:69:35:63:8C:6B:25:F3:7D:F3:C7:43
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1D54
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/uMMA0jACfh0DaTVjjGsl833zx0M.roa
Signing time: Sun 15 Jun 2025 04:40:07 +0000
ROA not before: Sun 15 Jun 2025 04:40:07 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7508 (0x1d54)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 15 04:40:07 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=B8C300D230027E1D036935638C6B25F37DF3C743
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:40:24:47:3c:8b:8c:25:07:01:c9:67:07:b5:
c6:d5:7f:e5:5f:bb:79:a2:f0:b3:14:e0:e1:0f:5e:
ec:0d:3b:39:89:fd:77:d3:1a:11:a1:d7:a6:24:da:
da:1a:02:38:3e:62:f1:b1:31:d8:b3:4f:e0:46:52:
c8:4f:7d:38:a2:81:fb:10:32:97:3a:d8:04:dd:57:
77:f9:dd:65:a2:d8:a2:dc:d8:30:b5:34:ba:d2:5f:
0c:f9:6c:89:ae:e1:25:4d:3f:fb:20:f5:11:81:c1:
af:cb:ea:9c:41:58:99:c8:f3:4c:e7:dd:ee:70:01:
94:1a:7c:fb:95:44:42:ba:84:61:f3:28:d6:5f:1d:
6d:92:c0:15:7e:c5:b6:9b:0a:7f:a0:07:e3:cb:05:
bd:33:ae:c9:10:e3:e2:c7:f2:ff:a5:a5:91:fc:40:
cd:0d:4b:48:e1:1a:82:10:fc:ec:11:0e:f9:f3:11:
88:b3:46:70:55:d7:0b:60:18:24:0f:43:73:7e:7c:
e3:03:32:0b:74:37:66:69:f3:9b:f4:5e:37:d0:33:
33:23:22:95:12:15:2c:12:1f:bb:09:cf:f7:58:8c:
58:d0:4a:24:df:61:90:81:03:52:7d:b2:f2:ab:3d:
8e:5c:1b:e6:cd:31:49:aa:44:ac:cb:b8:08:23:0b:
0f:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:C3:00:D2:30:02:7E:1D:03:69:35:63:8C:6B:25:F3:7D:F3:C7:43
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/uMMA0jACfh0DaTVjjGsl833zx0M.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
ad:95:49:a1:18:57:bb:4c:3d:d4:75:af:f1:78:e9:9a:7b:42:
52:d9:cc:00:79:ad:8c:9e:76:72:79:e9:d2:85:48:80:cc:22:
5a:6c:f5:89:30:a3:d8:30:7c:f2:ac:94:6a:71:fb:c2:c5:72:
d3:3e:23:f3:b3:56:dd:8f:e8:02:d8:51:53:71:56:d1:11:f5:
81:33:7a:e8:8d:7f:3a:80:03:a4:86:0e:55:63:f0:c6:d5:12:
28:c7:84:92:64:09:b0:c8:a8:f4:ba:76:4e:39:22:b6:08:f2:
5d:e5:87:51:cc:51:00:54:6e:25:43:69:c3:57:7b:3a:d8:cb:
3e:63:13:e2:e3:b9:0a:7f:43:13:2b:66:3f:5e:bd:c9:22:2f:
63:4e:f7:ca:23:1c:d9:57:14:f5:16:19:76:53:69:19:08:25:
02:77:06:cd:d5:21:4c:e2:76:93:87:31:88:b5:d2:fc:4c:00:
c8:1a:15:c1:7f:fe:5b:86:fd:57:03:de:19:f1:15:fe:9b:24:
a9:58:c4:c1:9d:cf:9b:76:9e:18:64:90:24:bb:ef:c3:2a:50:
18:e2:87:36:85:12:46:50:a1:cf:e2:d4:65:fa:0d:17:9f:38:
ec:8a:7a:23:7d:02:56:d2:8b:98:f1:ee:f5:01:14:93:c8:8a:
f7:f4:a6:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:54:48 2025 by rpki-client