Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/vgqkyGXf_Ybjg8ed4-angBOhcxQ.roa
File: vgqkyGXf_Ybjg8ed4-angBOhcxQ.roa (raw, json)
Hash identifier: NE6Vr+yuN7hSjphmMXV525jbbyFRPRUU/DJIdqQwZ14=
Subject key identifier: BE:0A:A4:C8:65:DF:FD:86:E3:83:C7:9D:E3:E6:A7:80:13:A1:73:14
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 2320
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/vgqkyGXf_Ybjg8ed4-angBOhcxQ.roa
Signing time: Mon 23 Jun 2025 09:41:54 +0000
ROA not before: Mon 23 Jun 2025 09:41:54 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8992 (0x2320)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 23 09:41:54 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=BE0AA4C865DFFD86E383C79DE3E6A78013A17314
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:be:a9:aa:50:1a:8e:14:ff:ed:d1:c1:e0:ed:
76:f4:58:11:0b:d2:3c:7e:d7:93:df:92:e6:8c:98:
58:b7:4e:c3:5b:63:72:8c:e3:9b:72:72:a5:32:77:
40:20:43:df:3e:b7:4a:07:18:33:3f:23:87:ef:fa:
86:8f:bb:b3:2d:1f:25:a0:9d:e0:01:5e:08:5c:d7:
04:57:21:c9:7e:87:14:30:2d:dc:c3:83:a6:9e:cb:
d8:a1:e8:b9:30:bf:57:63:02:e9:0b:85:fe:ba:87:
a0:08:1e:15:3e:da:fe:38:50:7f:04:5c:26:bc:40:
4f:2d:74:54:e7:e3:20:d7:3a:d8:d8:a6:d6:ea:a2:
a9:5a:3f:b5:a6:fb:99:e1:8f:08:8c:bb:3a:11:22:
38:80:dc:f2:3b:e2:6c:42:d3:bc:f1:21:8d:35:0b:
2c:4a:81:27:22:52:ef:b7:0c:ce:09:f6:c2:f5:09:
01:78:f1:5e:fb:65:23:18:05:ea:d4:a3:94:25:0e:
dd:c6:42:dc:27:93:04:2d:f7:2e:f5:9b:a5:86:4e:
c1:ec:fe:67:4e:ac:24:38:a3:ef:20:66:99:38:12:
cc:d0:b8:c4:4a:29:17:52:cc:34:ab:4f:c6:12:38:
53:19:6b:ac:b8:07:2a:8e:6f:6b:77:ed:05:c3:a7:
58:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:0A:A4:C8:65:DF:FD:86:E3:83:C7:9D:E3:E6:A7:80:13:A1:73:14
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/vgqkyGXf_Ybjg8ed4-angBOhcxQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
a1:5e:4f:01:66:b1:96:7e:37:9c:e0:ea:2b:3c:ac:58:69:f8:
e4:9e:b0:a1:2f:4a:b2:5f:ca:6c:ef:af:a2:92:e0:e5:8a:5f:
6e:5d:ad:80:27:45:92:76:b6:c4:42:a3:33:5d:0d:6f:a0:29:
54:eb:ad:6c:a2:41:73:5f:01:31:c7:72:db:a8:54:91:71:6e:
54:a6:c0:32:af:46:fc:7a:bb:33:3c:7a:c7:49:e8:97:09:7b:
4f:f2:8b:38:13:9b:2b:8c:90:be:1d:19:6f:67:71:88:6c:fb:
93:4e:7c:71:88:b6:7a:ab:97:aa:a7:55:5e:86:bd:96:88:85:
9f:d3:25:14:6e:9e:91:3c:81:12:3b:4a:89:02:1a:bb:fb:50:
12:73:91:a8:af:70:f7:84:a9:da:6f:63:eb:92:e2:f0:c6:c7:
bb:44:33:03:8d:c0:df:e8:54:d7:93:55:8c:9b:e9:7e:08:8f:
92:93:d9:69:00:6b:86:53:74:0d:ba:06:c2:b0:2e:f8:16:37:
d4:b8:5d:86:98:dc:c5:0b:2a:05:eb:3f:07:82:2d:52:68:65:
4e:49:4b:6f:d1:3d:01:77:16:82:42:1e:34:a5:83:4d:f5:1e:
b1:bb:ab:13:e7:25:02:07:50:c7:8e:4d:a2:dc:fd:72:1a:b2:
11:1c:89:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:53:12 2025 by rpki-client