Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/yS-WyAiF57c7Tnof0RXr2eh__Bk.roa
File: yS-WyAiF57c7Tnof0RXr2eh__Bk.roa (raw, json)
Hash identifier: 26ICM6sN3BcysvOexxPCBu6+xY4urcWmI3Ufv6CXIwM=
Subject key identifier: C9:2F:96:C8:08:85:E7:B7:3B:4E:7A:1F:D1:15:EB:D9:E8:7F:FC:19
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 2160
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/yS-WyAiF57c7Tnof0RXr2eh__Bk.roa
Signing time: Sat 21 Jun 2025 01:42:40 +0000
ROA not before: Sat 21 Jun 2025 01:42:40 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8544 (0x2160)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 21 01:42:40 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=C92F96C80885E7B73B4E7A1FD115EBD9E87FFC19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:3e:5d:48:46:35:3a:66:20:4c:a8:2b:3a:10:
21:4a:ff:1f:d6:55:d3:21:c0:b5:3d:d8:8f:0f:e7:
a8:c5:e3:86:1a:1f:25:1a:4c:f3:fe:70:72:c5:88:
42:59:b5:6f:75:c5:f1:02:9c:e9:5c:c4:a8:d4:cc:
8b:08:d8:6e:8c:ce:d3:cd:85:10:25:0e:5e:d7:85:
5c:5a:1d:7f:f8:44:77:78:eb:cd:6e:95:2c:62:b1:
39:23:00:2f:f0:7b:2b:43:c9:58:d1:98:4e:73:b7:
7e:c0:6f:78:ef:5c:44:b6:c1:53:d6:01:16:25:86:
77:50:f2:66:6e:74:0b:fb:4d:d0:f3:5b:73:09:65:
7d:db:8e:1e:46:35:eb:92:6f:ed:24:6b:83:d4:0e:
2a:31:88:3c:dd:65:ed:9d:53:43:c2:10:d7:2e:bd:
53:bb:31:af:31:dc:ff:0b:58:9d:4a:d6:92:67:88:
55:5c:23:be:72:4f:c9:a9:22:48:0f:87:e5:bd:74:
51:18:92:a2:b2:16:2c:be:a0:00:47:ab:bf:99:e0:
c5:4f:ca:c3:5a:4c:63:65:e5:c0:87:75:b8:84:d0:
7b:41:23:09:70:45:e1:40:40:d6:49:06:a3:12:26:
a1:a6:f8:45:81:24:81:4e:fb:76:0c:4f:e9:87:4f:
60:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:2F:96:C8:08:85:E7:B7:3B:4E:7A:1F:D1:15:EB:D9:E8:7F:FC:19
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/yS-WyAiF57c7Tnof0RXr2eh__Bk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
6f:f1:e7:12:1e:6a:76:77:97:1a:4f:c6:19:91:69:d7:31:ff:
d1:2e:cb:2d:d5:02:d6:29:f7:d3:65:46:b3:64:bd:d1:61:0b:
c2:9f:6b:39:f6:74:67:97:aa:c7:90:8e:db:7c:a0:2c:81:3b:
6b:1b:25:75:ed:fe:f9:a9:59:e9:1f:e2:c5:7b:d7:c2:34:a3:
65:b5:63:07:64:3b:7c:91:be:76:e3:9a:d3:a9:28:21:7e:d7:
ea:c6:6d:1b:b2:c2:92:20:57:80:15:62:3b:a0:bc:a2:cd:b3:
6d:e6:49:54:39:7e:bd:a0:3b:f1:01:34:f2:2d:60:c5:51:0b:
74:da:de:44:22:92:4c:c3:b1:6d:2f:99:5c:f1:d9:88:df:ac:
27:6f:32:ef:db:b7:6a:e7:2e:73:41:3d:2b:d3:03:e4:12:16:
d1:0e:ee:09:3e:d2:0b:35:2b:da:14:5d:b7:5c:3e:9c:7a:87:
2b:bf:6d:35:39:55:a8:e1:7f:c1:e4:ec:6c:8c:19:f5:76:f8:
5a:bd:bd:80:8d:56:b0:b2:26:50:23:51:39:50:79:dd:f1:d5:
4f:61:b0:ab:5a:53:ca:c4:52:fa:49:69:3e:f8:a5:d3:4a:98:
e1:ff:de:f0:7f:d7:9f:24:88:7a:5f:a6:42:85:66:e5:58:26:
f0:42:c3:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:50:25 2025 by rpki-client