Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/z6mzv3jH12ea8rQp2aAWgOs6sus.roa
File: z6mzv3jH12ea8rQp2aAWgOs6sus.roa (raw, json)
Hash identifier: tFmCaQS7IgtucDqkEtHzvSbC2sZoKufTwCyr1xlqiMU=
Subject key identifier: CF:A9:B3:BF:78:C7:D7:67:9A:F2:B4:29:D9:A0:16:80:EB:3A:B2:EB
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1C00
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/z6mzv3jH12ea8rQp2aAWgOs6sus.roa
Signing time: Fri 13 Jun 2025 10:09:55 +0000
ROA not before: Fri 13 Jun 2025 10:09:55 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7168 (0x1c00)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 13 10:09:55 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=CFA9B3BF78C7D7679AF2B429D9A01680EB3AB2EB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:96:ad:71:b7:50:b1:dd:00:b3:b0:5e:44:1a:
80:55:7e:ca:6c:c9:9d:3e:bf:0e:0d:5b:0c:99:85:
43:bc:7a:26:5c:dd:60:fb:26:34:88:11:a5:e4:ea:
7c:e0:b3:f6:f9:95:ce:e2:49:39:51:05:d4:09:6f:
8b:02:2f:ca:19:52:79:e9:ff:dc:44:a0:ea:0e:e3:
ec:17:e7:5f:98:1f:94:52:22:be:8d:cf:97:90:70:
b8:ef:30:b9:b3:b4:df:ad:0c:4c:e9:f9:4f:9d:ed:
d8:06:83:2f:a3:68:73:78:2f:30:97:aa:e1:29:58:
a7:9a:c9:b9:58:e9:db:6a:0c:b2:a3:bd:77:8f:8a:
cc:3a:9d:02:59:4a:d1:e5:9f:d5:80:d5:fc:a4:b2:
b6:a5:0f:c6:dc:da:0b:6a:20:a4:e2:2a:cd:85:1f:
8d:6f:53:79:ed:cb:bf:55:6b:cd:08:9c:34:00:84:
14:2a:2a:d7:8e:b7:16:41:62:c7:63:d5:75:44:73:
a8:56:aa:47:39:1b:33:59:69:55:ea:7d:b0:e7:88:
27:3a:f9:24:4b:a2:12:00:30:80:9f:ae:83:7a:01:
93:cd:bc:8d:ac:fd:9d:32:ec:91:51:8c:38:a0:dc:
67:94:bb:fb:b0:c7:24:3a:5a:39:fe:b0:ce:92:40:
b3:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:A9:B3:BF:78:C7:D7:67:9A:F2:B4:29:D9:A0:16:80:EB:3A:B2:EB
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/z6mzv3jH12ea8rQp2aAWgOs6sus.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
39:0b:ac:b5:64:6e:06:a2:86:87:6f:e6:2c:78:a4:21:37:a2:
09:dd:0e:3d:f4:41:81:eb:37:b8:c5:d3:fb:87:c9:5f:bc:26:
e8:27:10:38:79:fa:6d:1d:a1:6a:fa:0f:10:89:34:e3:86:c2:
02:cb:d5:79:0b:81:f3:c9:6c:b3:53:5e:d4:78:16:07:01:72:
d7:ea:11:9b:75:02:0f:18:dd:92:30:83:d1:c8:1c:56:50:66:
39:c9:7c:43:ea:cb:b4:f5:84:01:0c:94:ef:c8:4b:f8:22:63:
59:33:f4:48:5a:a8:81:db:29:b4:2f:19:61:03:6f:66:37:8b:
02:c0:59:78:c5:cd:b1:10:60:b8:ed:6a:57:49:bb:a1:00:59:
74:b5:5a:dd:21:8b:cb:a8:1e:65:d0:34:92:60:e4:0c:28:0c:
23:26:1e:b3:60:3c:d9:98:16:2e:d1:d2:8a:6f:3e:42:01:43:
bb:a1:04:83:ef:8e:fc:3a:dc:86:a5:41:6e:df:79:c5:89:6e:
58:80:f9:68:29:cf:b6:bd:35:bf:ad:96:ae:78:fe:3c:17:d3:
43:1a:41:77:3d:e5:4f:09:7c:dd:17:bd:ce:1d:fe:31:3b:1d:
2f:6c:8a:fd:c5:98:44:d4:fe:90:ee:ed:8a:78:fe:62:0c:e6:
72:c9:5a:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:51:40 2025 by rpki-client