Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/JJ-oCQPIpavMvc9uI-8g89YHz_Q.roa
File: JJ-oCQPIpavMvc9uI-8g89YHz_Q.roa (raw, json)
Hash identifier: JsGXCb2Z1IAzZU0Mlw+ZZCpV5r+yMm/Npcsr+F7K0GU=
Subject key identifier: 24:9F:A8:09:03:C8:A5:AB:CC:BD:CF:6E:23:EF:20:F3:D6:07:CF:F4
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0244
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/JJ-oCQPIpavMvc9uI-8g89YHz_Q.roa
Signing time: Sat 10 May 2025 02:37:51 +0000
ROA not before: Sat 10 May 2025 02:37:51 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 580 (0x244)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 10 02:37:51 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=249FA80903C8A5ABCCBDCF6E23EF20F3D607CFF4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:61:48:85:92:e4:2e:9f:4e:a3:81:12:66:7a:
1c:fc:c8:b9:44:0c:9f:8a:eb:c5:fd:86:33:41:02:
b7:ff:79:22:46:93:42:a8:1d:6f:c7:e8:7a:49:2c:
04:3b:7a:5d:06:3d:26:31:40:4e:5d:74:7c:7f:14:
56:4a:07:81:84:06:e7:f9:0e:51:40:b8:e1:9c:eb:
46:c4:39:db:a8:ad:13:ed:63:11:5f:8f:0d:ae:99:
0d:d3:bd:8d:9b:bb:06:2c:3e:75:72:fd:2a:3e:66:
66:28:33:15:c2:c1:6d:16:55:5b:c1:3e:35:de:84:
b9:c6:a2:b5:7f:b3:48:b5:bb:b0:5f:c3:be:6a:5a:
9f:81:25:6a:45:37:a1:bd:1e:5c:7c:5d:24:d7:87:
ae:50:56:ba:e3:08:0b:fd:a9:e4:62:c1:ab:3d:96:
99:7e:0d:82:89:f7:74:11:89:fe:73:4f:b8:06:6c:
85:eb:09:d3:a6:c8:c2:ef:5f:29:1d:85:80:be:4d:
ab:74:b5:b6:6e:c3:07:63:b4:11:28:65:bb:26:72:
2e:b4:d2:26:51:7a:42:88:7b:06:89:5e:e0:5c:ee:
a1:0d:e5:f6:9c:df:fc:0d:29:43:44:69:f2:cd:76:
c6:d1:12:8e:6b:13:f1:b2:c8:ad:f1:28:aa:6f:40:
dc:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:9F:A8:09:03:C8:A5:AB:CC:BD:CF:6E:23:EF:20:F3:D6:07:CF:F4
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/JJ-oCQPIpavMvc9uI-8g89YHz_Q.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
6f:48:33:fc:34:51:24:f7:87:cf:31:e9:bd:91:38:79:03:f1:
a5:98:6f:a3:c9:47:9f:41:02:5f:b7:2a:3e:4c:6e:b3:95:c9:
6c:34:79:3b:45:51:3b:14:9b:f7:8e:a3:ae:c9:a7:25:c2:36:
58:a5:88:40:00:9a:1e:a4:2d:db:ea:d3:7e:1a:cc:7f:ff:6e:
89:88:4e:27:13:94:de:a8:c8:0b:a7:6d:04:75:20:3b:4e:5c:
cc:bf:33:b9:27:7e:20:10:2e:8b:a4:d0:08:f1:9e:56:76:e3:
06:db:3f:c1:4e:40:8b:e2:05:4a:65:80:7d:d8:0c:15:69:a3:
ed:41:81:6d:5c:ea:91:6d:4c:bf:06:01:56:dd:02:76:fa:35:
92:aa:36:96:79:d0:93:4e:f4:e8:e0:e0:f0:c7:ea:62:a1:7a:
57:5d:88:22:3e:35:a4:74:2f:cf:07:d9:c3:e4:24:df:0b:61:
cc:54:27:09:75:16:9b:0a:0b:e6:9e:5a:f2:0c:e7:57:f3:a5:
16:d7:c0:63:5c:69:ee:09:98:3e:4b:67:72:e9:6c:1d:e2:53:
5f:e2:45:15:d7:88:65:ae:e0:34:a5:11:c9:b6:e5:02:ef:87:
4e:6c:4f:b8:e8:05:f7:99:41:d3:22:88:62:bc:3f:5c:6b:c9:
2e:3f:76:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 14:38:47 2025 by rpki-client