Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/4ByDQdf2rB2d2Ws4e799jbfKm98.roa
File: 4ByDQdf2rB2d2Ws4e799jbfKm98.roa (raw, json)
Hash identifier: t0JZdN3caDYfE/JLkWDwBtubkeGjBEcz5ReNKEBbCww=
Subject key identifier: E0:1C:83:41:D7:F6:AC:1D:9D:D9:6B:38:7B:BF:7D:8D:B7:CA:9B:DF
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1B3C
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/4ByDQdf2rB2d2Ws4e799jbfKm98.roa
Signing time: Thu 12 Jun 2025 09:39:49 +0000
ROA not before: Thu 12 Jun 2025 09:39:49 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6972 (0x1b3c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 12 09:39:49 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=E01C8341D7F6AC1D9DD96B387BBF7D8DB7CA9BDF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:cf:e2:2b:aa:24:7f:73:de:2b:1e:58:b6:95:
80:8c:7a:05:36:2a:03:0c:d6:f7:d5:43:53:b1:de:
d3:21:e8:8a:8c:97:f4:c6:95:91:72:d6:17:ca:53:
ad:aa:9e:da:ca:d1:e4:13:f9:26:59:5e:84:a5:02:
9c:1f:96:ef:9c:b1:26:b1:fc:71:89:81:d4:7e:a3:
1b:cc:3e:99:24:8a:a2:83:0b:c3:a2:10:b0:53:5f:
d3:99:bc:a4:6f:cf:e5:11:bb:37:7e:f5:5f:7d:d7:
16:5c:0f:44:52:22:a6:82:58:b9:49:c5:05:06:e9:
1d:3f:50:37:90:ff:5c:1d:29:2c:b3:68:77:b9:4d:
87:91:7c:43:4e:48:43:66:30:d7:ec:8a:ce:70:c9:
2f:50:98:99:76:2a:06:2d:80:af:6d:9c:fb:23:e4:
dd:1d:75:55:23:55:8a:c1:cb:00:f5:2a:66:31:6e:
6d:90:af:39:d5:cd:74:78:f4:0d:94:4c:bf:1f:7e:
bc:6d:03:a2:ca:1d:cd:7e:99:0a:bf:95:29:ce:40:
de:13:d3:c6:5a:e5:53:7a:26:22:27:30:f0:59:7b:
2a:00:d1:4c:7c:0d:94:cd:ef:2a:82:91:95:4f:85:
d5:52:a7:03:71:54:a0:a4:94:b8:6f:9a:e6:d3:f7:
15:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:1C:83:41:D7:F6:AC:1D:9D:D9:6B:38:7B:BF:7D:8D:B7:CA:9B:DF
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/4ByDQdf2rB2d2Ws4e799jbfKm98.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
4e:04:a5:82:e8:eb:e3:47:67:c5:7d:8e:ab:87:13:1d:cd:aa:
4e:03:8e:d2:71:34:9a:7d:f4:98:64:5b:ad:d0:bc:aa:0e:6f:
08:8f:10:96:25:4e:8e:ff:d2:f1:99:ac:4f:1b:03:c5:ac:2d:
05:4f:d6:57:69:da:aa:82:9a:1e:93:54:9a:2f:da:39:80:c8:
ac:1c:9d:83:fa:ff:e5:e8:33:e0:07:dd:3d:ff:df:c9:5c:a5:
38:f5:8c:1b:30:20:93:99:97:a8:41:fe:0f:1d:ed:ef:e1:fa:
83:83:24:f5:eb:3a:11:71:88:43:7b:fd:db:df:79:a4:d3:72:
94:05:30:88:03:ab:f8:aa:72:9c:83:18:c3:9d:56:5b:98:c0:
6a:a8:c9:29:8d:f5:94:63:0b:8d:51:2e:bc:cb:5c:23:30:3e:
88:ff:6e:69:9d:2e:26:de:e1:77:72:d6:3c:e3:23:96:66:82:
17:4e:49:32:0c:f3:0c:32:d8:2f:aa:72:ff:04:aa:ac:a3:58:
3d:ce:c1:2f:af:05:b1:4a:03:0c:27:a2:da:71:01:99:f5:9d:
18:25:a8:2e:ab:70:24:56:4d:a4:16:7b:b6:83:03:15:dd:79:
94:a1:ca:78:c4:ad:e8:ea:fd:40:9a:f3:d9:ed:ef:48:c4:d5:
c1:42:b3:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 00:47:12 2025 by rpki-client