Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/15S6PXwdJhVPDuU1EiVFueai0Pg.roa
File: 15S6PXwdJhVPDuU1EiVFueai0Pg.roa (raw, json)
Hash identifier: iMTYuUNHLJLYJQ7LuWLLd9hW0qimWELjDGk2cN8N77w=
Subject key identifier: D7:94:BA:3D:7C:1D:26:15:4F:0E:E5:35:12:25:45:B9:E6:A2:D0:F8
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1B04
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/15S6PXwdJhVPDuU1EiVFueai0Pg.roa
Signing time: Thu 12 Jun 2025 02:40:10 +0000
ROA not before: Thu 12 Jun 2025 02:40:10 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6916 (0x1b04)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 12 02:40:10 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=D794BA3D7C1D26154F0EE535122545B9E6A2D0F8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:da:99:52:8f:d7:5f:d3:dd:23:e7:df:31:e5:
14:44:b0:7e:b9:93:dd:d7:30:0a:9e:56:92:3d:90:
59:cf:5d:4f:cd:9d:bd:5c:aa:e5:40:b8:3d:20:85:
8d:db:68:88:2c:8e:ac:72:73:33:ec:02:4b:66:83:
33:01:15:3f:97:ac:58:06:d5:95:39:0b:93:41:24:
ed:ae:fa:be:62:1a:40:c6:12:c5:22:28:25:58:95:
0e:5d:a3:cd:8b:36:fb:a5:d0:2f:f3:94:a6:26:4b:
99:d6:3f:f5:45:6f:74:df:8d:a0:4d:fb:0e:1c:05:
51:69:a1:78:4f:62:d9:e2:34:12:56:b6:48:fc:31:
89:71:56:24:86:98:33:4c:fb:e6:09:e3:9e:cb:c3:
26:e0:47:3c:43:81:a7:a8:11:98:71:61:2c:c0:c7:
17:bb:41:bf:d3:93:2f:7f:4b:73:5b:e0:0b:24:63:
08:48:56:81:bb:95:0a:a4:0d:32:4e:af:11:da:6b:
5e:86:4b:50:b8:99:95:f4:56:55:3f:fb:f3:8c:ba:
5f:c6:6d:68:05:69:d3:82:65:4d:cd:ac:3d:69:49:
3f:08:7a:1d:20:13:0f:42:e6:e9:0e:ad:7d:27:83:
81:6b:f6:0e:93:d7:ba:c8:3f:19:f8:c3:29:70:b5:
61:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:94:BA:3D:7C:1D:26:15:4F:0E:E5:35:12:25:45:B9:E6:A2:D0:F8
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/15S6PXwdJhVPDuU1EiVFueai0Pg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
4e:8e:70:cb:62:2f:eb:f0:f8:a0:6e:20:19:d7:6b:3e:64:07:
1c:cb:3c:5c:7f:30:7d:d9:90:a2:1d:4f:60:4e:ac:ed:c8:7d:
03:5b:ad:20:8c:d7:fb:9d:38:fd:4e:de:f8:92:ad:b8:4b:94:
ad:cd:3d:d9:10:c4:f8:41:d2:8f:bc:72:8b:70:db:1c:ae:cf:
ea:0b:12:4f:c9:7b:1d:f2:aa:6e:88:38:e2:95:5a:fe:8b:a2:
16:31:e7:97:62:cb:56:b0:66:e3:c3:92:f5:56:5a:77:55:85:
7a:79:86:46:8d:37:48:ca:7c:f1:dc:2a:08:44:f0:4e:b4:13:
80:e5:95:96:0d:4f:87:7c:62:ce:b1:33:4c:cb:07:7a:fd:47:
fe:01:bf:a6:a1:32:95:69:0c:1a:b8:f4:a0:82:f6:7a:1b:a5:
6e:8f:ee:2b:63:de:d1:1f:ed:f8:8b:02:29:3d:99:07:f8:db:
ce:2c:69:4f:eb:69:71:6d:11:a1:79:ba:32:de:79:5a:62:8e:
2c:38:fb:13:c8:48:fc:b4:43:b1:66:7d:9a:90:4a:4a:de:2f:
d9:41:18:c8:4a:98:8a:06:c9:69:4d:1a:46:9e:f8:8d:0c:a4:
13:71:69:67:b0:86:15:16:ed:d9:48:7e:2e:72:1f:1e:46:47:
21:d8:24:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 02:07:53 2025 by rpki-client