Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/1gXB2y8K9D9Gc2FMLAcWxsoNrU4.roa
File: 1gXB2y8K9D9Gc2FMLAcWxsoNrU4.roa (raw, json)
Hash identifier: m0nSoMPtG1mH7mMsHi81GTzm2egzfpjAqdXV6T3e/D4=
Subject key identifier: D6:05:C1:DB:2F:0A:F4:3F:46:73:61:4C:2C:07:16:C6:CA:0D:AD:4E
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1540
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/1gXB2y8K9D9Gc2FMLAcWxsoNrU4.roa
Signing time: Wed 04 Jun 2025 10:09:33 +0000
ROA not before: Wed 04 Jun 2025 10:09:33 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5440 (0x1540)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 4 10:09:33 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=D605C1DB2F0AF43F4673614C2C0716C6CA0DAD4E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ec:4a:78:43:47:6a:4e:a0:ff:89:e5:4d:ed:
69:12:bb:36:81:17:c5:96:c0:7d:a0:7e:51:54:38:
52:f8:b5:25:40:ba:0a:20:2c:89:d4:29:6d:16:1c:
60:29:a6:9b:39:6a:b3:4e:9d:72:bd:a8:51:d9:a6:
9f:05:d1:cf:3a:07:db:b6:e7:e4:a9:e6:14:2b:01:
f7:a5:48:3b:6c:82:8e:a0:25:36:a5:19:16:74:d7:
6c:dd:52:4b:00:7c:84:52:4d:2d:a6:96:ca:46:ee:
d0:a6:2c:3f:bf:89:3f:40:8d:4e:11:82:15:8b:d0:
97:01:a7:94:47:45:ce:5e:1a:86:a7:05:3e:34:b3:
c5:57:46:9c:f1:54:3b:74:b6:11:07:4b:ab:2a:6f:
52:4f:fe:63:fc:7d:7a:e6:7c:2b:32:b0:a5:23:bc:
2d:c4:d3:f2:24:66:f8:9a:c0:8b:9a:38:8b:b4:55:
0b:b2:34:24:70:c8:4f:30:dd:4c:f4:71:88:ec:05:
b8:db:41:f4:d9:40:54:24:a5:7e:83:f4:89:2f:21:
94:c9:d7:20:f8:58:7b:17:b8:5a:8e:57:17:87:36:
e8:55:0f:0b:83:08:3a:ed:d4:b5:51:5e:25:2f:08:
aa:c5:16:bc:f6:dd:72:3a:dd:c7:83:6c:dd:bf:03:
59:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:05:C1:DB:2F:0A:F4:3F:46:73:61:4C:2C:07:16:C6:CA:0D:AD:4E
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/1gXB2y8K9D9Gc2FMLAcWxsoNrU4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
a0:21:1c:68:32:f4:15:2c:02:c8:b3:3e:20:21:1c:53:d9:d5:
43:33:54:ad:1b:9f:da:2c:dc:2d:f2:55:5c:58:f3:36:c4:cf:
4a:66:dd:81:66:a9:78:88:a0:5c:f6:aa:f3:3e:d0:3a:17:97:
49:a0:c1:cb:87:b5:1e:69:e2:bb:2a:06:7c:ab:ec:5f:d9:84:
58:b2:9f:61:26:62:0e:b4:1e:da:92:7f:90:74:b4:37:2a:bb:
58:5b:d5:2f:a9:b7:69:c5:9b:f3:b8:97:ad:67:c9:08:9e:05:
7d:43:1d:e5:7a:37:8c:1c:8d:25:5e:1b:6e:05:9b:b9:92:71:
fc:58:27:59:e4:b9:c0:ba:52:12:e6:75:fb:79:ad:4d:55:2b:
a9:1d:b2:35:dc:46:6d:ad:17:56:10:e3:e3:83:13:39:d2:dc:
25:cb:9f:ff:51:19:d3:aa:4a:7f:0d:22:65:51:a4:7b:87:e6:
2b:c4:5c:76:52:9b:52:5c:1b:6e:d8:a8:74:2d:f3:ed:35:82:
ec:2a:1c:db:a7:15:f2:01:71:80:dd:21:06:4d:94:78:97:4f:
e6:b3:90:45:c5:93:66:2f:f8:32:be:a8:f8:8b:b0:6b:0b:03:
89:9a:b3:8c:22:1b:65:a9:14:06:9d:e0:9f:16:02:f5:12:4d:
e2:d5:02:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 16:56:12 2025 by rpki-client