Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/v_Q6XoLrYCHQU_S5GLrWNpmAs0c.roa
File: v_Q6XoLrYCHQU_S5GLrWNpmAs0c.roa (raw, json)
Hash identifier: IPBTbhYqNzTuQydEBDFr1hD91wsNL1dTGOP10y6vjps=
Subject key identifier: BF:F4:3A:5E:82:EB:60:21:D0:53:F4:B9:18:BA:D6:36:99:80:B3:47
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0108
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/v_Q6XoLrYCHQU_S5GLrWNpmAs0c.roa
Signing time: Thu 08 May 2025 11:07:44 +0000
ROA not before: Thu 08 May 2025 11:07:44 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 264 (0x108)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 8 11:07:44 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=BFF43A5E82EB6021D053F4B918BAD6369980B347
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:83:2a:2f:b9:56:50:ea:af:9f:2a:5e:f0:cb:
e2:72:ee:34:76:44:7f:a8:32:2e:49:45:2d:86:ba:
84:75:7a:38:e8:c8:eb:a2:dd:6e:82:f6:13:22:58:
07:79:c8:ed:ec:3c:ad:8f:17:22:a5:97:cb:e4:da:
8b:d0:0d:67:0d:ae:93:cb:61:bb:18:e8:84:7e:32:
94:28:92:2c:14:23:4c:35:88:e0:35:5d:4c:88:92:
e4:16:37:b3:b4:a8:ff:a0:48:c3:14:4a:2e:99:ae:
73:cf:56:7d:2c:8a:20:73:15:18:84:63:65:f6:17:
43:f4:66:00:5e:8e:a0:44:c0:14:7b:6d:c3:e3:00:
fe:1f:7a:e0:7b:c6:47:60:86:fe:42:1c:12:95:02:
9b:22:32:52:23:bc:28:33:88:5d:e2:ac:33:86:8f:
1a:66:90:bd:34:cc:5e:18:05:ab:1a:54:5d:38:82:
e5:d3:33:25:5c:0a:a8:78:9a:01:2e:68:fc:46:6a:
1d:01:e3:df:d3:61:29:c7:6f:27:6c:33:15:7a:20:
df:09:fa:3a:6b:0f:56:54:7b:5c:cc:06:11:a1:29:
5c:7d:5c:e4:17:2c:9b:38:8e:41:f4:a7:01:9a:a4:
78:b1:83:32:36:7a:42:02:51:1f:a8:98:21:8d:d8:
b7:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:F4:3A:5E:82:EB:60:21:D0:53:F4:B9:18:BA:D6:36:99:80:B3:47
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/v_Q6XoLrYCHQU_S5GLrWNpmAs0c.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
9a:b0:2b:e7:8e:55:c7:e3:0f:27:2a:e2:15:05:47:0e:98:d8:
d0:67:e5:c1:3e:cc:b2:ea:97:06:38:04:64:3d:71:f3:8e:ba:
eb:52:9f:82:e4:9e:fb:7d:38:64:2e:2a:a0:f0:c1:28:ce:b0:
0f:da:3b:5d:12:37:74:c4:54:10:3c:18:3a:a5:78:ce:5d:b9:
8a:07:5c:90:d9:c0:cb:2a:21:4a:7a:31:27:c2:d0:f7:0c:e9:
1c:1f:83:f9:d0:1d:52:f4:09:36:ca:6d:48:92:90:62:94:dd:
e4:df:85:19:e4:a5:16:de:0a:72:9a:35:b9:4a:e6:1f:b3:f2:
1c:7d:3b:42:c7:91:b8:b6:13:75:1b:af:e3:d7:44:d3:cc:23:
60:04:bd:76:a2:4e:52:7d:94:8a:dd:c3:7b:40:7b:79:50:7f:
3c:95:04:33:c7:b1:1f:52:bd:d4:a7:3f:4c:81:b7:8f:6e:fd:
13:2a:17:b6:2f:65:cb:03:43:cf:fd:af:2b:f6:a4:dc:95:6b:
7b:2a:10:5a:21:b0:ac:9a:a2:9d:6f:5b:06:5d:4b:5f:e9:6c:
c8:77:5b:43:f6:3e:92:f4:77:2f:27:cf:85:21:88:f0:58:95:
8b:f1:70:26:e5:ce:a3:88:81:2f:35:19:90:fb:c5:05:f8:53:
32:11:27:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 00:58:45 2025 by rpki-client