Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/wKNFzhWL-O6rUvfLf-ljwBomYyI.roa
File: wKNFzhWL-O6rUvfLf-ljwBomYyI.roa (raw, json)
Hash identifier: g7CdXsgY/0J4GyiP+fmFmxkEGM4Jpobjv44qEjqcOwk=
Subject key identifier: C0:A3:45:CE:15:8B:F8:EE:AB:52:F7:CB:7F:E9:63:C0:1A:26:63:22
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 2084
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/wKNFzhWL-O6rUvfLf-ljwBomYyI.roa
Signing time: Thu 19 Jun 2025 18:26:39 +0000
ROA not before: Thu 19 Jun 2025 18:26:39 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8324 (0x2084)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 19 18:26:39 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=C0A345CE158BF8EEAB52F7CB7FE963C01A266322
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a8:e6:ef:77:aa:b2:60:c7:b8:d8:da:03:60:
85:b4:ea:2c:92:c3:18:83:3b:3e:b9:96:12:d2:ec:
b5:e4:ae:e0:c2:a3:f9:ff:b0:73:94:58:99:13:33:
29:09:4b:18:51:d3:8c:49:fe:65:c1:34:8a:55:9c:
d4:12:ec:e0:9b:4a:b5:b0:35:35:66:69:6e:2b:dc:
f6:83:2f:0c:1e:a7:00:58:fd:b2:7f:46:84:32:51:
07:6d:6b:67:b3:5f:d7:32:1c:0e:8d:c4:88:cf:77:
a0:73:b2:a2:a8:e1:d7:c8:3e:04:f4:f8:a4:16:85:
15:50:68:5d:0a:83:b2:7c:1e:73:84:65:1b:06:9d:
bd:b2:03:d6:f6:d7:62:b8:ee:38:c8:4a:ff:a5:b2:
a2:a5:c4:38:98:1d:7d:77:68:17:b4:06:71:43:f0:
30:dd:c9:8b:38:92:2c:0d:44:19:43:27:48:27:45:
8f:1d:71:95:5c:66:55:d0:f8:c8:05:fc:36:82:92:
69:f9:e0:2e:b1:e5:85:e3:40:09:4d:44:2c:41:69:
09:1c:7f:61:70:ef:5e:a7:ee:09:db:9c:65:65:11:
86:aa:ec:51:03:2b:26:a5:7d:a8:59:ff:da:3f:2b:
58:4e:30:37:aa:47:b4:ce:61:68:5e:2b:3a:08:77:
08:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:A3:45:CE:15:8B:F8:EE:AB:52:F7:CB:7F:E9:63:C0:1A:26:63:22
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/wKNFzhWL-O6rUvfLf-ljwBomYyI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
07:4c:d5:fe:d1:3c:c5:b5:09:7d:fd:bb:d0:19:ff:1c:32:09:
83:fb:13:f9:8d:b8:79:4c:9a:80:4a:8e:54:bb:cf:88:9b:af:
07:b1:58:a5:90:d3:29:8a:52:9a:a3:3b:d2:34:03:46:dd:85:
05:91:bc:2d:9c:01:a7:a0:2b:b6:8e:3c:ac:5e:98:ce:90:ae:
e2:92:cc:f9:bb:0f:78:3f:f1:4c:f3:b4:df:f5:d7:5b:c4:8b:
58:a6:19:2a:59:e6:80:cd:cc:4b:d8:68:7d:5d:fd:89:56:6f:
08:bd:2c:72:06:34:62:9d:11:ca:0e:9d:0c:03:5c:60:98:42:
25:e2:00:fc:1d:a9:3e:4e:43:af:15:50:25:e5:2e:1a:07:e4:
a3:3d:d9:70:43:21:61:21:1b:0c:d5:ab:27:69:5b:cb:ee:c5:
00:4f:19:0f:d6:ee:d3:b9:a0:4f:60:fb:a4:7b:d0:6a:8c:2e:
2f:79:bf:08:2c:6d:6d:f1:48:bb:32:24:c8:ea:a1:96:e1:55:
9d:d1:0c:30:1b:f5:83:21:2b:e3:4b:9e:6f:6c:55:3e:4c:86:
4c:88:c1:b7:1d:3e:91:50:9b:be:d9:a6:3b:cc:da:91:c7:d4:
fe:c6:dd:30:2d:86:58:3b:fd:79:98:95:e9:fa:53:50:6e:b1:
b5:e9:37:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:41:11 2025 by rpki-client