Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/2xRC1jp9Dkt5hFZx2GSr4xkO4hw.roa
File: 2xRC1jp9Dkt5hFZx2GSr4xkO4hw.roa (raw, json)
Hash identifier: nyjBNsv0Th8BFqYDQ2i7aAZ+1pn0Cm2x7X3PNBg5pjw=
Subject key identifier: DB:14:42:D6:3A:7D:0E:4B:79:84:56:71:D8:64:AB:E3:19:0E:E2:1C
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1C7C
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/2xRC1jp9Dkt5hFZx2GSr4xkO4hw.roa
Signing time: Sat 14 Jun 2025 01:39:54 +0000
ROA not before: Sat 14 Jun 2025 01:39:54 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7292 (0x1c7c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 14 01:39:54 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=DB1442D63A7D0E4B79845671D864ABE3190EE21C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:47:14:8a:26:bb:4c:4d:17:f5:8d:1c:a1:a1:
13:8a:8c:91:45:a5:ff:e1:5e:fc:41:bd:69:a1:76:
29:bb:4e:19:d6:c0:08:ff:1e:f2:2f:16:1a:f8:b2:
66:bb:69:01:2b:56:f9:08:91:65:10:c7:67:42:5e:
16:97:0f:23:59:30:37:df:23:d1:95:e3:22:68:d7:
bc:cf:9f:48:91:81:c6:1c:17:1f:68:e4:de:c8:30:
a2:31:4c:fb:b2:9c:90:f0:09:04:b2:f5:10:06:1c:
c7:17:1b:67:34:40:ee:da:16:79:25:9c:97:d7:54:
16:43:8b:ac:0a:b1:33:89:6d:7a:7f:ba:0a:ab:30:
e1:98:e8:61:7a:6a:5f:e8:3b:f8:5e:6b:ee:25:80:
a0:4d:1f:f0:76:3e:24:b0:ca:2c:8a:b9:af:e9:60:
49:73:7e:ec:80:ee:98:8b:45:b4:99:02:1a:06:cd:
4b:61:cc:73:85:7d:02:ec:36:7f:fe:ca:20:47:d6:
2a:f2:13:b7:fc:30:7f:18:26:6d:14:11:d9:25:a5:
53:37:c3:1d:96:74:4c:40:33:f1:28:22:fb:43:93:
02:4a:99:77:9c:40:82:b1:29:21:75:9d:40:ff:12:
98:b6:1b:f7:51:e6:2c:df:8c:c1:01:1c:be:0c:ef:
0d:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:14:42:D6:3A:7D:0E:4B:79:84:56:71:D8:64:AB:E3:19:0E:E2:1C
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/2xRC1jp9Dkt5hFZx2GSr4xkO4hw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
5a:74:3f:04:1b:70:ac:4e:99:42:09:6e:f0:f2:43:b5:c5:d9:
0a:42:c6:2c:48:8e:6d:7f:4e:14:0e:3e:bc:d0:bf:de:d8:15:
7a:d9:ac:91:67:03:5d:85:a5:01:66:b1:80:30:75:ad:77:e5:
59:10:bf:ff:ae:4e:22:9e:1d:f7:d0:ed:a5:84:85:f6:cc:0d:
5b:6c:f2:6c:5a:4c:84:c4:cf:43:d6:3c:3e:f1:a6:be:ba:02:
93:dc:df:03:52:47:12:a4:87:3a:4b:fe:7d:22:36:4c:f4:05:
28:aa:37:26:95:f5:d8:79:e0:0c:8a:ca:89:77:f2:83:a4:9c:
53:d2:a5:af:5e:87:2d:d4:e1:77:63:f2:05:17:4d:f5:f0:7a:
8b:6c:4d:9c:ab:ab:61:b4:bb:5d:26:87:ce:46:ae:f3:e0:e3:
7d:db:8b:db:00:5c:39:0c:eb:8d:ca:7a:01:a6:9f:77:ff:67:
e9:4a:ec:64:19:41:13:0d:24:80:40:e2:73:84:55:29:9d:25:
04:56:aa:ca:85:b2:63:02:e8:c7:67:f5:38:05:88:79:18:d1:
90:98:01:0b:f7:8a:db:5c:49:c4:72:4e:dc:03:a7:1c:bf:36:
69:4f:89:e8:0a:8c:07:38:27:f3:57:70:9f:d7:18:a7:6c:ac:
e7:ce:82:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 03:33:21 2025 by rpki-client