Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/ARMGOe6zffBqyVoINWBt40WS_60.roa
File: ARMGOe6zffBqyVoINWBt40WS_60.roa (raw, json)
Hash identifier: /st/Un3g1exPlqrfBvvygKbed7GN6gN1CKXYfd3ze8g=
Subject key identifier: 01:13:06:39:EE:B3:7D:F0:6A:C9:5A:08:35:60:6D:E3:45:92:FF:AD
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 15E4
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/ARMGOe6zffBqyVoINWBt40WS_60.roa
Signing time: Thu 05 Jun 2025 06:39:23 +0000
ROA not before: Thu 05 Jun 2025 06:39:23 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5604 (0x15e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 5 06:39:23 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=01130639EEB37DF06AC95A0835606DE34592FFAD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c6:ad:88:11:c8:74:29:20:a9:41:26:3e:0c:
c5:f4:0c:5f:f4:88:94:2d:74:69:67:2f:ee:e3:80:
53:62:3b:75:ce:18:a6:4d:c6:a4:ac:b5:2f:85:86:
ae:ff:19:2a:8e:98:8f:00:69:1d:c5:08:3e:69:f7:
75:dc:bd:83:be:34:e1:6d:28:09:60:4b:af:dc:66:
5c:6b:a8:ac:cb:25:72:f5:d8:57:a0:91:30:3f:f4:
bd:f0:59:8f:e9:03:1f:87:c6:12:6c:7e:c3:e1:b0:
4c:96:d0:7f:5c:3d:19:94:f1:cf:46:00:65:74:99:
e0:fe:61:64:41:15:69:6f:27:47:e7:8a:2e:12:9b:
e1:d1:71:a3:25:3f:dc:dd:2f:0f:34:fe:c8:4f:51:
eb:e4:5c:55:bb:f1:8f:db:b0:22:a6:f9:45:a0:44:
08:79:ae:28:d2:c4:b3:b4:dc:3d:96:dc:4e:8c:03:
9c:a1:3d:68:c6:a3:b7:99:ba:68:d9:42:d2:5c:b9:
7f:ea:bd:23:41:ca:ad:6c:eb:81:43:b6:e9:4b:9d:
c2:89:a2:d8:ad:7e:67:3f:68:9a:a8:5d:d4:4f:70:
9b:37:67:a9:62:72:a7:75:5e:ab:e7:9f:42:83:89:
db:84:e8:4a:c5:e9:54:c0:3e:03:28:e4:9c:3f:8e:
4d:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:13:06:39:EE:B3:7D:F0:6A:C9:5A:08:35:60:6D:E3:45:92:FF:AD
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/ARMGOe6zffBqyVoINWBt40WS_60.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
49:bf:a1:b4:d6:6d:83:55:76:05:a0:13:80:0e:fe:3b:a2:22:
bc:2b:a8:0b:02:94:96:33:2a:ac:c7:72:2e:fb:25:15:90:4a:
e1:cb:8b:b6:79:d4:5e:18:f4:50:e2:a1:94:3c:5a:87:ec:58:
e4:d0:94:08:5a:6d:7c:eb:50:9e:76:a2:b4:a8:ff:1d:d9:cd:
a9:ca:c7:fb:84:14:95:f8:c1:86:6a:c1:24:1e:e2:4d:70:42:
64:3b:6a:9f:dc:fe:63:eb:62:b9:18:ed:53:c7:76:39:8a:98:
ef:c9:6e:02:e0:4c:b3:71:55:44:3d:33:a1:d9:69:3b:fb:9a:
73:ec:0a:36:0b:81:b9:11:48:bc:76:c5:2e:d7:ba:cc:8a:0b:
0e:fd:1b:3f:c8:14:15:9a:d7:03:ba:49:2a:f3:8e:cf:87:cf:
8c:bf:b4:90:ba:8d:a0:8e:31:fa:b6:54:f7:28:98:0f:40:42:
03:1c:0a:c7:76:ec:c7:3c:26:91:ee:c7:27:5a:03:fe:37:08:
4a:ce:dc:69:b7:3a:9d:82:c6:3d:37:f4:22:49:a1:4d:fa:4a:
33:8a:e8:d0:ec:fe:14:1d:4e:85:03:b5:63:09:6c:30:91:b6:
59:20:a2:0b:8f:86:f4:c9:36:71:70:1d:02:0f:87:50:86:0f:
af:39:74:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 14:40:23 2025 by rpki-client