Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/0jz2IlbuGYNSgGjSQS5uDTI3hQ0.roa
File: 0jz2IlbuGYNSgGjSQS5uDTI3hQ0.roa (raw, json)
Hash identifier: 3nw5YWWSakTmEnN36Zicz/1vtI2EcgtUyBnHDH8j97o=
Subject key identifier: D2:3C:F6:22:56:EE:19:83:52:80:68:D2:41:2E:6E:0D:32:37:85:0D
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 133C
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/0jz2IlbuGYNSgGjSQS5uDTI3hQ0.roa
Signing time: Sun 01 Jun 2025 17:39:09 +0000
ROA not before: Sun 01 Jun 2025 17:39:09 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4924 (0x133c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 1 17:39:09 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=D23CF62256EE1983528068D2412E6E0D3237850D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:92:dd:a0:4f:68:a8:cb:5e:c7:8b:90:17:a3:
98:49:a7:44:39:86:be:2b:33:6c:7e:4b:6d:7d:ec:
0e:51:6d:92:79:ba:fa:38:5d:2b:a1:95:f3:3d:eb:
1b:3f:88:49:4f:95:8e:b5:32:76:c9:fd:df:db:83:
51:9a:24:c2:6c:96:8c:14:1b:c0:22:4a:d5:32:75:
95:ba:77:d0:81:9c:d1:e2:63:04:50:60:22:ce:6c:
b1:ce:13:e9:fe:45:19:e0:47:b1:21:89:78:e3:fc:
1c:6c:46:d3:80:18:9f:5d:9c:54:32:f8:53:38:41:
79:4f:3e:2d:4e:0b:79:b9:4e:29:f6:1c:cf:3f:f0:
b9:16:87:7d:eb:26:94:75:0b:d9:79:20:44:ff:7c:
41:d6:69:f2:94:b0:f6:65:00:3f:2c:d2:03:8b:e8:
4e:2a:0d:b1:5e:e9:54:66:12:58:e8:bb:00:7c:c8:
f8:b1:27:f8:9c:ae:4e:99:57:ab:60:10:fe:cc:91:
63:3d:bc:e0:96:1a:5b:82:36:0b:7c:1d:4e:56:2f:
c4:92:84:e4:78:e8:41:66:72:30:d2:ca:55:d4:e8:
52:2b:14:54:4e:e3:13:69:dc:ae:86:1d:24:31:93:
26:63:8d:45:f2:47:45:08:c8:b4:dc:04:1f:4d:b2:
7f:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:3C:F6:22:56:EE:19:83:52:80:68:D2:41:2E:6E:0D:32:37:85:0D
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/0jz2IlbuGYNSgGjSQS5uDTI3hQ0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
05:cf:48:5e:10:54:b3:bc:ad:5c:1d:49:67:bf:71:13:44:58:
e2:86:05:84:7d:2f:fc:88:ad:8d:db:06:f3:63:60:8c:fa:c9:
f2:86:23:e4:5e:99:6f:50:c9:d1:d2:d3:35:19:4a:df:a5:f1:
13:e3:96:cb:23:79:b4:24:8a:91:28:fd:1e:c9:79:1d:0e:e3:
a3:5b:f2:37:57:c6:68:b9:05:79:4f:62:54:37:e5:2f:7b:a9:
c3:65:28:01:4c:f5:be:8b:d1:12:7a:df:74:bc:83:e6:a9:b7:
92:6d:2f:25:98:1b:99:6c:8d:15:b7:49:1c:ed:8f:47:fb:f6:
ef:0e:e4:95:a4:3c:53:41:2c:fb:4c:73:0d:ec:8a:1f:fe:c3:
d4:74:bf:b5:72:4c:ba:68:94:62:a3:5d:b8:b0:d2:e4:51:3f:
be:4b:31:c3:a8:78:b4:df:01:46:42:a6:cf:1b:11:6f:c0:50:
ef:53:94:5f:b5:95:90:68:6b:b7:63:da:fc:36:d3:8f:1f:f8:
5d:3e:c0:e1:03:cf:7b:0f:22:00:4b:42:ac:d4:d0:72:26:d5:
40:b8:b8:4c:d7:b0:5f:4b:4a:81:55:54:02:46:a0:c9:42:56:
41:c9:ba:52:16:6e:99:cd:bd:e0:d3:89:31:f6:ac:da:f3:ad:
d7:9c:73:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 23:27:29 2025 by rpki-client