Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/A8FNwlrCobGXpNRdHfnoNRbQakQ.roa
File: A8FNwlrCobGXpNRdHfnoNRbQakQ.roa (raw, json)
Hash identifier: ITsXth8qre4T3lyPM4lNgRXqRVY5a6iyJQgWnenkLD4=
Subject key identifier: 03:C1:4D:C2:5A:C2:A1:B1:97:A4:D4:5D:1D:F9:E8:35:16:D0:6A:44
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 08A8
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/A8FNwlrCobGXpNRdHfnoNRbQakQ.roa
Signing time: Sun 18 May 2025 15:08:21 +0000
ROA not before: Sun 18 May 2025 15:08:21 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2216 (0x8a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 18 15:08:21 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=03C14DC25AC2A1B197A4D45D1DF9E83516D06A44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:73:bc:0a:f9:0d:f1:6b:91:57:b3:59:7e:39:
ba:4d:ef:4d:aa:d5:a0:92:cc:5c:de:a6:51:0c:97:
2c:a1:a6:1a:59:9e:f1:48:1e:cb:17:cd:59:dc:49:
22:fb:b9:07:f1:e1:8e:be:62:09:33:63:e7:ae:88:
e2:e2:66:80:30:39:fe:12:e3:c8:e4:61:91:1d:fe:
52:cb:3b:57:45:41:b3:3c:e2:fd:ee:b0:a3:d1:71:
c7:7c:72:05:81:10:f9:c6:e6:db:85:20:7f:e0:8e:
ac:fd:1b:03:d2:96:e6:16:9b:b4:15:15:37:87:d2:
74:ca:07:64:96:ae:86:a9:e7:b6:c4:31:6a:33:9b:
72:a1:b5:06:6b:83:fd:63:6a:81:29:c0:cd:c1:9b:
0d:8e:b7:41:11:6e:a4:fc:82:38:c3:18:6f:0c:ab:
f6:b9:ca:0e:a4:c0:55:81:82:55:b5:bb:11:0e:46:
1c:99:cb:9e:fe:bd:3f:b3:36:5b:2c:d0:da:33:ff:
51:f0:96:01:de:89:ee:8c:be:ee:68:50:46:cc:f5:
2b:c5:05:b7:53:e6:fa:5c:fa:75:40:ab:5f:a5:9a:
b5:02:a0:cc:06:19:10:c6:29:80:c1:66:3f:90:ca:
d3:88:aa:41:49:0e:af:9a:13:13:67:cd:87:e5:db:
da:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:C1:4D:C2:5A:C2:A1:B1:97:A4:D4:5D:1D:F9:E8:35:16:D0:6A:44
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/A8FNwlrCobGXpNRdHfnoNRbQakQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
92:6f:28:e9:99:76:ce:b2:bd:fd:04:16:71:c9:fe:70:f1:bc:
ec:37:0d:b0:a2:e4:99:9f:f7:39:ed:14:14:a1:39:8c:6e:06:
53:78:b2:bc:cb:71:61:f1:16:d0:66:7a:4b:e4:1e:15:ab:51:
6c:3d:c9:8e:5e:87:c4:a8:95:b3:06:86:cf:91:02:db:52:a1:
3b:f1:a1:56:85:bf:aa:3e:19:c0:bc:ab:b9:91:22:48:d2:ee:
c8:29:fa:5f:0c:9b:9b:1d:f2:c2:0a:a7:9a:16:b9:df:06:69:
0a:d6:b6:73:43:03:86:d7:ac:9e:70:12:12:a3:c1:ca:24:4b:
13:d0:9f:a9:2f:75:5c:88:0b:52:9f:5f:4c:94:7e:37:de:de:
0c:d0:37:3c:1b:23:d2:2e:06:47:ac:6f:b1:d1:34:b1:25:2f:
84:1b:05:33:b4:a4:e5:70:87:53:88:7f:ea:5f:33:37:61:56:
9e:6e:b3:9d:fe:57:df:81:8a:e2:bd:a8:2a:70:1e:a0:ae:93:
63:c4:e3:31:dd:35:0f:69:fd:9b:db:23:cf:03:59:28:1f:ef:
86:e8:1d:77:ef:c9:0f:5d:33:59:6f:4c:28:84:4d:40:a5:09:
a3:ea:5d:fd:ba:71:8a:cb:88:b1:c6:54:48:b8:0f:31:cf:c3:
14:05:d0:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 23 02:37:36 2025 by rpki-client