Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/y14qA64ZN3YFJw1NsZvg5bXUugI.roa
File: y14qA64ZN3YFJw1NsZvg5bXUugI.roa (raw, json)
Hash identifier: JSvD5h4eXLrKe1WxnVn1Pmo1zkQiA6HbcAhpp//pJ7g=
Subject key identifier: CB:5E:2A:03:AE:19:37:76:05:27:0D:4D:B1:9B:E0:E5:B5:D4:BA:02
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 20C4
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/y14qA64ZN3YFJw1NsZvg5bXUugI.roa
Signing time: Fri 20 Jun 2025 06:08:25 +0000
ROA not before: Fri 20 Jun 2025 06:08:25 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8388 (0x20c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 20 06:08:25 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=CB5E2A03AE19377605270D4DB19BE0E5B5D4BA02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:ce:7a:a2:5e:f8:ee:76:76:e0:b9:34:6a:a5:
bb:a0:2d:bf:7a:ab:61:4f:5d:1b:79:e7:01:f7:45:
d9:4c:ca:1a:39:04:9b:39:9d:5b:a1:f7:44:a0:15:
84:14:f7:26:7b:64:b4:72:92:ce:59:78:1b:63:62:
ae:93:b6:79:4a:0d:76:46:12:fc:01:9d:e0:68:cc:
f6:9d:91:3e:80:67:c4:17:37:77:f6:23:bf:c2:44:
ac:5c:58:c0:0e:f9:8b:b5:ba:40:53:2b:12:2a:32:
56:79:ff:50:4e:eb:3a:cb:d8:fb:96:d4:b5:8d:b6:
5c:ae:03:48:10:16:d0:b5:9a:0f:4d:d5:d1:a0:1d:
11:82:b2:d7:67:62:cb:f4:5b:e3:d4:1d:b5:16:ba:
c9:00:87:3b:3e:7e:66:49:cc:d9:1f:7c:75:f9:67:
2d:8c:3c:2f:a4:93:ae:5c:0e:c3:28:2b:14:3c:56:
20:c8:49:b8:e8:f8:48:c9:ca:0a:5a:d3:79:0a:4d:
ce:e3:2c:e1:c1:58:bf:6b:58:44:d8:82:1b:1b:e1:
53:a4:ec:55:98:88:d5:ca:b6:b4:7c:7d:90:36:a5:
52:86:6a:ba:41:c2:8e:74:81:03:15:71:ba:89:55:
63:c8:11:28:6e:44:7e:be:f9:3c:21:0d:fb:3d:87:
66:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:5E:2A:03:AE:19:37:76:05:27:0D:4D:B1:9B:E0:E5:B5:D4:BA:02
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/y14qA64ZN3YFJw1NsZvg5bXUugI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
1d:6a:18:f4:d9:ab:2b:a6:a5:28:b2:b3:53:41:18:25:68:96:
71:a9:69:76:76:29:97:0d:f4:b3:50:86:22:e4:5c:ce:27:d4:
33:0d:67:d4:39:ba:5a:42:77:e2:ab:8f:07:b3:e0:aa:79:95:
d3:08:24:fa:de:42:22:8e:0b:82:c2:35:dc:8e:6b:16:78:4f:
8c:9b:b8:2c:4d:d9:1b:a2:4a:3f:c1:d4:95:50:b1:ad:b7:c0:
c9:1c:d5:83:2c:d5:57:be:5f:b9:84:37:ca:d3:64:dc:71:ad:
82:e8:ec:13:48:b1:7d:fb:5a:31:f4:f8:92:04:16:c2:82:d5:
67:4d:d6:23:4c:b1:8f:f8:4b:5c:af:02:45:92:1a:aa:5b:40:
76:35:42:a0:0e:23:d0:24:ed:fd:60:ea:57:89:ba:23:f0:e4:
1b:68:ff:33:61:c0:f1:1f:d0:fb:14:de:43:0a:a2:7f:02:1e:
c1:92:e8:66:70:ea:b9:4c:11:59:0d:bc:bb:c2:6f:b7:ad:b4:
bf:44:46:8e:33:11:fd:a3:e1:0a:75:90:3c:30:47:1e:0e:72:
23:f9:8c:49:1b:fe:53:7f:c4:39:af:0c:f2:00:82:13:cf:8b:
1c:6d:c5:d0:2b:22:27:67:29:a5:1f:64:be:51:a9:b5:c5:86:
d0:ae:ac:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:49:48 2025 by rpki-client