Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/3C9R_sN01wTYDMC5ahq8gWq-tKE.roa
File: 3C9R_sN01wTYDMC5ahq8gWq-tKE.roa (raw, json)
Hash identifier: h+lokX2rtUo2WFm+ZdahvyVOU7Qu4/ZrvspG1YGfyLs=
Subject key identifier: DC:2F:51:FE:C3:74:D7:04:D8:0C:C0:B9:6A:1A:BC:81:6A:BE:B4:A1
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1858
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/3C9R_sN01wTYDMC5ahq8gWq-tKE.roa
Signing time: Sun 08 Jun 2025 13:09:45 +0000
ROA not before: Sun 08 Jun 2025 13:09:45 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6232 (0x1858)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 8 13:09:45 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=DC2F51FEC374D704D80CC0B96A1ABC816ABEB4A1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:73:5f:6f:36:ee:27:ab:97:e3:15:4d:94:e5:
c2:38:21:46:e5:ca:09:80:75:e0:6e:98:eb:1e:34:
65:ff:1f:71:37:d6:95:5d:cc:5b:44:29:c8:f8:2d:
b4:16:59:2f:2e:60:45:0a:78:ba:17:d9:2a:c1:a9:
73:e2:4d:76:b9:fa:bf:e3:b9:38:b7:bc:bd:27:61:
9e:fe:c8:8c:ef:22:c0:09:9d:f1:cd:c0:98:7e:f8:
45:7c:35:ed:0d:bd:03:84:69:a3:27:30:d1:0d:e8:
fe:f5:60:45:40:4b:4c:8a:a1:4c:be:bf:bd:c1:20:
14:21:84:7d:dd:cd:66:23:55:05:c2:3c:2b:48:52:
26:b5:05:ed:6c:50:a1:d4:af:a2:e9:c0:a7:21:c7:
87:c5:43:13:70:76:1c:34:3a:2d:0a:e2:ae:17:d5:
0b:16:37:87:2b:93:f3:84:cf:31:7c:86:a6:70:a2:
6d:0e:f8:e6:62:5b:fa:fa:ca:df:01:ea:d5:20:3b:
73:17:36:b8:6f:ef:6f:f2:91:f3:46:46:73:72:3b:
bb:d8:94:cf:f1:96:4b:37:04:7f:b3:68:0a:60:fb:
25:33:8b:1e:01:20:5b:57:ed:aa:ad:e2:f2:1d:a7:
c3:07:78:04:99:25:ca:45:8a:cb:0e:1e:ad:59:1f:
4e:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:2F:51:FE:C3:74:D7:04:D8:0C:C0:B9:6A:1A:BC:81:6A:BE:B4:A1
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/3C9R_sN01wTYDMC5ahq8gWq-tKE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
62:80:f8:00:1a:b1:f3:06:8f:0b:8c:91:12:6e:4b:0e:32:68:
25:2e:a4:cd:16:ce:30:9d:1a:b5:54:1f:da:5d:ff:8e:28:4d:
77:d9:7e:7b:ea:07:f4:99:6d:ab:22:13:ac:bd:04:c9:51:5b:
5f:58:b1:5e:be:a8:ae:ec:a7:a7:21:39:63:6c:f7:ec:3f:12:
44:4f:52:87:d6:24:33:69:a0:7a:86:24:dc:37:aa:6a:3f:87:
ff:9d:f0:c0:2c:ad:50:97:b7:87:0f:76:02:30:c3:9a:5b:6a:
31:1f:d4:8f:4c:24:fb:21:cc:74:2f:71:e7:91:ec:6f:74:36:
47:a2:11:63:25:41:92:bb:1b:b3:af:76:df:89:bf:57:9e:39:
28:a2:d4:b0:07:00:2a:ac:4e:7b:7e:8f:99:fc:94:6e:7e:49:
de:74:fd:74:09:ad:80:50:61:23:12:23:f8:c6:d5:47:ec:c0:
de:51:e5:e8:86:e5:e2:f0:bf:ec:10:51:0e:a1:b8:6e:89:a7:
f9:75:df:3a:18:d7:df:58:1f:72:4e:d3:20:cb:31:9e:df:f0:
38:1c:d3:94:cf:aa:4b:58:ae:36:41:5b:52:22:26:b6:fb:55:
a7:db:f1:f1:f9:96:df:07:55:01:c6:0b:0d:9c:1f:63:af:f2:
b2:61:6d:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 16:53:01 2025 by rpki-client