Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/wzVtbp_B6QrS8ZzMHCqfsAahp3s.roa
File: wzVtbp_B6QrS8ZzMHCqfsAahp3s.roa (raw, json)
Hash identifier: ycemeqTWubLgTkuan0buYPthexmtNtreTKTsvY5LJjw=
Subject key identifier: C3:35:6D:6E:9F:C1:E9:0A:D2:F1:9C:CC:1C:2A:9F:B0:06:A1:A7:7B
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1DF4
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/wzVtbp_B6QrS8ZzMHCqfsAahp3s.roa
Signing time: Mon 16 Jun 2025 00:40:22 +0000
ROA not before: Mon 16 Jun 2025 00:40:22 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7668 (0x1df4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 16 00:40:22 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=C3356D6E9FC1E90AD2F19CCC1C2A9FB006A1A77B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:49:6e:20:a4:34:59:b2:ba:18:c8:99:88:15:
53:cb:ab:70:3b:45:21:da:00:e6:05:82:b1:4c:72:
96:18:ed:2a:2d:cd:a9:04:9f:7c:be:04:a1:fd:c0:
ad:c6:12:4d:aa:fa:89:37:9b:48:07:7d:9d:e3:10:
e2:64:f8:70:f8:fd:34:ff:03:d3:bd:15:11:35:06:
bb:07:86:3a:41:81:e7:f2:5b:4a:00:53:3b:f4:cb:
35:2f:9b:74:ba:e9:b6:a7:06:50:02:72:a7:be:0a:
67:f9:2d:61:f3:29:15:83:1c:6e:0d:81:92:c2:7c:
5d:a0:1e:e9:dc:89:0a:f1:7b:30:7e:49:fd:83:85:
f5:b1:f8:b3:d9:20:c1:54:f2:c6:92:e6:7a:0f:05:
be:df:71:32:fd:d3:b2:13:03:24:6a:d7:97:c9:75:
25:3c:cf:7d:53:84:4b:42:11:c2:23:26:4c:33:22:
bb:8e:30:e7:4f:a5:e2:d4:0b:47:4d:b7:bf:73:53:
e7:3c:02:04:df:c1:a6:b6:96:79:ef:28:54:fa:93:
78:a3:cd:ea:05:c5:9c:aa:2c:ee:51:83:7c:be:35:
1a:55:3f:b6:89:64:c4:9b:5e:0d:05:3b:cc:61:ee:
b9:ee:7b:32:36:ea:c5:5c:48:9f:4c:13:55:01:89:
db:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:35:6D:6E:9F:C1:E9:0A:D2:F1:9C:CC:1C:2A:9F:B0:06:A1:A7:7B
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/wzVtbp_B6QrS8ZzMHCqfsAahp3s.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
84:eb:96:8b:f5:30:88:7f:89:05:94:c0:5f:d3:24:ab:2c:5b:
23:3a:59:59:eb:fa:8c:51:ac:bb:6a:41:e7:be:95:de:00:8f:
b0:e1:57:b6:ad:23:bb:9e:2c:0f:2d:2d:e9:77:0a:41:08:28:
83:e8:d4:a0:9e:da:5b:99:48:2d:d5:b3:c6:40:ff:ce:d4:d7:
8e:d5:93:a8:18:64:bc:0e:2f:2d:81:57:ee:e3:5f:16:97:c8:
9f:9d:45:81:0b:f4:53:e7:78:0c:7d:e5:fa:12:a5:6d:6c:79:
23:1a:62:9f:a2:2e:94:9c:2b:31:4d:82:b8:f3:21:e7:eb:8f:
8f:0d:8a:67:ac:d4:b9:b0:40:56:90:0e:c1:e8:76:2d:cc:5d:
1a:41:7e:d1:ce:93:5c:fa:ba:9e:bd:59:26:c1:39:2e:a7:75:
e8:09:8a:c0:ad:8e:ca:23:db:50:ad:7f:92:76:b1:7b:21:25:
3a:e7:50:31:c6:e4:a2:e5:55:d6:c1:f1:a5:aa:d2:d0:05:f6:
3c:64:d6:92:09:ee:98:8a:33:66:f4:d3:ca:7a:be:4d:19:68:
b2:99:85:97:c8:11:c8:4c:9b:ba:b0:8e:11:44:fb:ec:71:46:
d2:a1:74:d8:11:00:ea:0f:db:00:d0:f9:10:51:45:b0:fd:84:
20:4a:38:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:43:19 2025 by rpki-client