Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/4aeTaDlqQt4PARc9Tq2q_dRm0Ho.roa
File: 4aeTaDlqQt4PARc9Tq2q_dRm0Ho.roa (raw, json)
Hash identifier: 7v8VmvsQRy0ZYKREHi66+36XKN4cRWj7CPGw7/V5sm8=
Subject key identifier: E1:A7:93:68:39:6A:42:DE:0F:01:17:3D:4E:AD:AA:FD:D4:66:D0:7A
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1C9C
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/4aeTaDlqQt4PARc9Tq2q_dRm0Ho.roa
Signing time: Sat 14 Jun 2025 05:39:53 +0000
ROA not before: Sat 14 Jun 2025 05:39:53 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7324 (0x1c9c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 14 05:39:53 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=E1A79368396A42DE0F01173D4EADAAFDD466D07A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:1a:44:ed:c0:c4:12:4e:b5:89:2d:81:7d:00:
b8:50:3d:3f:be:e3:8d:8e:83:18:12:1e:d1:34:24:
5a:1b:94:c6:20:14:28:21:72:9b:67:4a:3c:5d:74:
71:ce:ed:76:7c:fb:3e:2c:56:6d:85:4d:82:02:91:
5b:e4:0f:6f:99:d9:63:6d:81:f4:1d:cf:70:ff:5e:
56:e7:c6:b2:b0:27:8f:f4:3b:f8:05:78:26:c2:9f:
e3:6c:4e:4b:a2:70:c0:a2:41:bd:2d:5c:db:df:a0:
21:c1:7a:49:90:98:8d:c3:cf:64:ef:00:19:7a:ab:
d6:35:81:bf:ab:24:fc:4d:ee:00:d8:13:e3:98:ec:
63:41:1f:e4:d4:5f:b3:e0:66:a6:17:a2:be:d8:f2:
15:69:5a:0d:84:65:f1:68:b9:ce:55:99:ab:69:6b:
e7:31:f4:c1:3a:a0:7f:02:f0:1e:86:3f:e1:0c:e6:
b2:98:7c:44:82:a0:e7:03:02:df:92:96:31:76:21:
55:97:fb:8b:7b:17:47:8d:b8:98:1f:c4:ab:5f:b3:
91:9f:55:63:a1:a8:4f:51:c6:35:41:0e:19:2b:b6:
7f:ae:ff:71:b0:36:d1:3f:0d:79:cc:2c:76:b9:6d:
47:a6:3d:f4:a4:8b:f3:e8:6f:a6:65:21:11:ee:84:
be:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:A7:93:68:39:6A:42:DE:0F:01:17:3D:4E:AD:AA:FD:D4:66:D0:7A
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/4aeTaDlqQt4PARc9Tq2q_dRm0Ho.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
5f:30:59:9e:12:8e:0a:5d:d7:50:bb:50:10:6b:98:89:84:4f:
81:b8:86:82:75:c7:f2:d6:c5:64:67:ff:b8:39:90:96:5c:46:
83:ce:27:5d:64:cf:6c:10:18:e4:1a:d3:a4:09:9d:4c:d4:c2:
f3:1b:df:97:47:74:37:0e:05:4e:6a:53:15:2d:f3:db:64:f0:
bf:6b:40:04:f1:c8:ce:66:3e:06:36:88:ac:72:dd:f6:2e:60:
8d:98:72:95:20:e1:a5:66:a3:0c:4b:c7:12:46:6a:a9:4a:3c:
2a:1d:df:66:50:ee:62:df:57:ac:6e:c0:15:91:66:46:a1:94:
5e:b4:92:60:c6:28:54:62:7e:b3:f6:e1:c8:e5:8d:94:d3:e9:
3d:df:24:48:ee:49:39:c3:5d:a0:4c:dd:55:66:8d:83:80:ca:
80:bf:50:c4:3b:f0:e2:3c:f7:9b:bf:b6:4a:c7:8a:f3:c1:e8:
74:df:19:5f:48:75:3f:be:6d:cb:57:93:97:6a:44:4c:51:78:
ef:96:a8:c7:b6:3b:cd:84:f4:8b:0b:2e:f0:80:33:b9:50:a2:
67:d3:96:f6:49:50:d6:79:49:77:b2:66:33:bf:cb:03:c6:eb:
1b:99:57:d6:1b:50:d8:eb:31:9c:1c:70:cd:14:3c:63:f4:71:
ed:90:f8:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 20:53:20 2025 by rpki-client