Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/-4JYk33CzVYJdDruDqbkj-FjUPI.roa
File: -4JYk33CzVYJdDruDqbkj-FjUPI.roa (raw, json)
Hash identifier: lhycXb7lBP9k02J3xVqoy06ZVel+2gBH4l/gES9xf6A=
Subject key identifier: FB:82:58:93:7D:C2:CD:56:09:74:3A:EE:0E:A6:E4:8F:E1:63:50:F2
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1918
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/-4JYk33CzVYJdDruDqbkj-FjUPI.roa
Signing time: Mon 09 Jun 2025 13:09:38 +0000
ROA not before: Mon 09 Jun 2025 13:09:38 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6424 (0x1918)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 9 13:09:38 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=FB8258937DC2CD5609743AEE0EA6E48FE16350F2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:38:11:c2:f1:a2:01:03:7f:41:41:02:40:5b:
72:4a:e7:91:23:b3:24:a7:a5:a0:0a:f2:f6:cf:b3:
cb:09:f8:74:03:f4:8c:c4:d0:f0:a7:a7:d5:14:b5:
d6:7d:64:f0:31:03:c3:ed:05:94:a9:06:9c:68:69:
e8:13:89:73:13:87:14:bb:90:26:b4:7c:39:7e:5c:
28:ec:5b:a8:a0:88:c4:15:64:ad:20:48:fa:b1:5d:
8e:38:5d:72:11:45:84:42:06:12:c7:58:f9:da:ae:
b1:29:5f:07:86:c8:45:0c:1f:0e:e3:1f:36:30:49:
21:e0:8e:7b:ce:5b:45:44:bd:f9:98:44:5c:bb:ab:
2b:11:60:78:9e:c9:81:85:71:2b:a9:0e:42:66:5c:
7c:ba:3b:7c:86:6b:f4:36:54:b7:fb:26:55:49:4a:
81:8f:d0:fe:62:29:db:b0:14:6e:59:05:7d:31:e5:
1d:eb:13:cf:22:d2:2b:7f:c7:79:30:ef:37:0d:14:
31:ec:72:86:a0:df:11:98:39:39:0a:79:c5:8c:73:
c4:1b:38:83:83:67:c2:ad:35:68:54:82:4b:5d:e2:
98:4a:77:18:4d:63:04:f5:48:3b:8e:e4:81:8c:6c:
93:e1:ac:f7:e4:fc:4f:2b:9b:0e:27:4c:b3:c6:42:
09:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:82:58:93:7D:C2:CD:56:09:74:3A:EE:0E:A6:E4:8F:E1:63:50:F2
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/-4JYk33CzVYJdDruDqbkj-FjUPI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
48:01:3a:6a:79:80:da:a2:b1:ab:66:50:12:98:4d:d5:2b:0d:
02:23:e2:95:f9:9e:92:1d:77:7f:6a:33:41:27:7b:18:d0:47:
d8:51:41:73:6e:fd:33:4a:7e:8f:93:c1:99:27:ba:4b:72:69:
3b:a0:ce:80:5d:30:67:93:42:ea:69:bb:b1:f6:3b:04:44:a2:
e7:3c:a6:69:d8:58:64:d4:99:53:72:90:f7:dd:b8:1c:f5:c1:
9d:39:2d:54:46:2b:b1:d5:66:cf:fd:db:bb:6e:86:d2:92:34:
78:1b:a3:07:bd:ec:9d:34:a5:09:a6:5d:4d:32:6e:70:a1:80:
58:f5:47:63:53:3e:62:86:20:10:dd:12:ec:4d:1b:0b:b9:a0:
5f:0e:3b:df:82:d1:aa:18:b5:fa:64:23:62:ee:c7:05:f6:5d:
2e:f8:18:76:71:39:4e:2b:c0:be:81:56:c3:3e:e1:b5:ee:8c:
29:88:ba:ba:39:69:4d:4c:26:be:48:81:aa:5a:de:bd:eb:61:
b7:c7:6c:2b:d9:b1:7d:83:53:c3:1d:83:22:fc:1a:68:0b:28:
e7:c3:05:97:e7:cd:17:3f:47:81:b0:4f:99:51:8a:2c:3d:f8:
1d:2c:b2:f6:eb:fb:25:1f:0b:1c:7d:f7:fa:d0:38:a4:f9:5d:
ab:e8:04:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 05:26:05 2025 by rpki-client