Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/AEk62hagu5-zuDz5y8lhicjgfnE.roa
File: AEk62hagu5-zuDz5y8lhicjgfnE.roa (raw, json)
Hash identifier: Uah7GJKoWH5hsEXim5wthi1B5YCS2zV1+Of9aEUKBY4=
Subject key identifier: 00:49:3A:DA:16:A0:BB:9F:B3:B8:3C:F9:CB:C9:61:89:C8:E0:7E:71
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 16BC
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/AEk62hagu5-zuDz5y8lhicjgfnE.roa
Signing time: Fri 06 Jun 2025 09:39:30 +0000
ROA not before: Fri 06 Jun 2025 09:39:30 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5820 (0x16bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 6 09:39:30 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=00493ADA16A0BB9FB3B83CF9CBC96189C8E07E71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:c7:0b:ea:0e:44:3c:07:7b:a3:ba:24:94:a8:
85:8d:54:02:2e:eb:ed:5a:c8:84:45:58:9f:aa:fe:
ae:ac:af:30:9b:a7:55:a8:c5:47:bb:48:16:33:64:
24:62:e7:a3:c6:83:93:62:a2:9b:90:31:0a:a2:75:
f6:dc:3c:1e:6f:f2:2b:4d:5a:23:e7:20:72:4d:e8:
60:69:a6:67:1a:51:e6:6c:60:03:cc:6c:bc:37:5d:
dd:89:9b:f1:3c:8c:50:d1:34:96:9c:a9:37:14:7a:
aa:b9:04:4a:77:ab:39:53:49:01:99:bc:4b:b6:e4:
45:dc:77:03:23:20:64:6a:bf:1d:e5:9b:2a:03:47:
4e:8e:d6:34:28:98:e5:c0:48:b2:92:83:a8:f8:28:
61:4f:28:29:e4:d8:33:2e:e3:d5:2c:05:52:cf:4d:
1d:39:dc:55:a0:5e:01:44:b1:81:aa:d0:65:bd:a8:
31:34:91:66:ae:40:eb:14:f2:bd:8c:d4:45:a8:d4:
91:52:22:fa:2d:a4:9e:85:af:1a:16:9d:5c:8d:28:
33:39:32:23:a8:3d:09:f4:2d:38:30:85:7b:24:5e:
13:58:42:e1:5e:64:c1:bc:bd:d4:a9:60:5f:ca:5e:
14:2a:bb:4d:c0:4d:7d:c8:87:63:a9:37:bf:5e:23:
56:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:49:3A:DA:16:A0:BB:9F:B3:B8:3C:F9:CB:C9:61:89:C8:E0:7E:71
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/AEk62hagu5-zuDz5y8lhicjgfnE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
5f:34:01:d9:29:9a:2c:22:ec:ff:53:02:44:a6:13:4d:fe:df:
f4:58:4d:c2:0b:46:21:17:52:7a:a1:c0:49:fe:f9:f7:f1:92:
96:60:c7:da:26:26:d2:35:d1:68:4d:01:a4:0e:ba:02:a4:7a:
b2:ff:0e:76:bb:27:62:1a:d5:dc:8d:ea:ad:1f:c7:8e:89:42:
3f:f7:fc:c3:7b:bb:f9:6d:e6:4e:84:27:9d:10:90:57:ec:00:
06:79:66:b0:15:4a:3b:14:c9:ce:bc:aa:83:73:c0:e5:4b:4d:
b9:24:d7:93:9f:f4:9c:fa:7f:5c:aa:59:0f:04:62:13:6d:54:
2a:2f:0d:0c:47:ea:89:e6:db:7f:d7:1f:60:6d:9a:49:fd:9b:
2a:28:38:ea:77:2e:9e:f8:bd:d7:f5:07:8f:1a:8e:d0:74:f0:
b9:3c:2a:b9:b4:d2:1d:69:96:af:95:5b:09:f0:c4:4c:60:74:
55:0f:cc:b6:a1:fa:ba:90:bc:3d:ad:b6:db:70:eb:76:d9:62:
d3:74:f4:bc:19:bd:e7:c1:cc:3d:17:6d:fa:d9:57:be:dc:85:
d8:be:33:01:a4:2c:c6:12:1b:e8:d4:8c:47:51:1e:ba:a6:17:
28:ca:ec:1b:d4:8c:f1:dc:30:db:56:ff:f9:3e:ce:67:6d:ca:
19:3b:05:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 06:59:39 2025 by rpki-client