Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/L6HfXWqPYCGZnY1mg6aIeEdGpAo.roa
File: L6HfXWqPYCGZnY1mg6aIeEdGpAo.roa (raw, json)
Hash identifier: 5IXW8s2Q6XOv2A+t808YtTRTf7L6XaphM8c62y5iiN4=
Subject key identifier: 2F:A1:DF:5D:6A:8F:60:21:99:9D:8D:66:83:A6:88:78:47:46:A4:0A
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 165C
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/L6HfXWqPYCGZnY1mg6aIeEdGpAo.roa
Signing time: Thu 05 Jun 2025 21:40:14 +0000
ROA not before: Thu 05 Jun 2025 21:40:14 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5724 (0x165c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 5 21:40:14 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=2FA1DF5D6A8F6021999D8D6683A688784746A40A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:25:b1:f0:0a:23:bd:e7:1c:27:19:53:8f:e1:
6e:a1:48:13:a2:27:32:74:1a:d7:0a:e1:02:32:96:
37:93:27:72:10:11:55:fd:3c:3f:2b:5f:dd:d6:40:
26:56:7b:c9:99:21:a5:64:cf:03:36:f6:0b:c3:a3:
28:85:a6:14:b9:56:cd:34:3e:a7:03:43:e0:59:78:
22:4e:69:6e:5c:92:91:76:5e:48:9d:53:34:58:aa:
3f:6e:58:4c:a6:72:c4:15:cb:d6:01:e4:76:44:f7:
93:68:ee:45:0a:e3:33:8c:46:91:7f:14:0b:fd:6e:
9f:89:5f:7f:e0:2d:61:19:81:77:d6:9d:d7:08:1d:
24:a7:15:01:92:7d:ea:36:21:36:09:c3:2e:b0:d9:
00:5b:c4:a7:30:63:c3:c8:eb:e8:82:2c:4a:c0:5f:
e6:48:ee:b8:c3:42:12:f0:0e:c5:a0:ca:bf:b0:d5:
87:94:f9:7e:01:c4:77:ee:73:23:98:5e:9e:e3:78:
0d:b2:61:ae:dc:f8:db:bf:06:90:26:3e:1a:5f:db:
77:d7:60:39:86:41:cc:54:29:61:61:88:21:de:eb:
4c:a2:14:93:1e:70:59:aa:d5:59:c2:30:40:ca:be:
88:d2:7d:f9:b8:2c:b9:47:4e:15:3e:64:3e:86:18:
20:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:A1:DF:5D:6A:8F:60:21:99:9D:8D:66:83:A6:88:78:47:46:A4:0A
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/L6HfXWqPYCGZnY1mg6aIeEdGpAo.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
2e:a5:63:33:b3:11:c3:9e:7c:b0:29:d6:3e:a4:47:2d:0c:da:
f9:29:55:d7:73:ae:3e:62:6f:52:75:a0:1d:62:53:05:d3:cb:
32:79:94:82:46:d2:14:e9:0a:1b:42:bf:d2:d7:58:6d:4c:cf:
17:d2:40:be:de:29:3a:42:af:13:d5:ae:a0:da:3c:56:fa:2b:
13:11:68:a3:14:ba:d2:36:09:66:d2:f8:31:18:5b:b8:7d:13:
23:cc:2c:96:90:0e:28:10:11:61:51:8b:1b:3f:d6:32:50:e1:
a8:dd:2e:f0:68:95:b5:91:80:0b:76:fc:82:7e:3c:38:c1:26:
c4:81:0e:cb:90:94:6a:75:67:84:45:50:75:a2:7c:61:a4:ff:
78:68:a2:26:91:0c:91:8c:a3:67:51:25:45:fc:5f:86:bc:3e:
02:bf:fb:c2:28:fc:d9:95:50:f3:97:ef:a8:ea:13:2e:08:08:
71:7e:9d:b0:7b:2a:cf:45:1f:41:b5:d2:b5:7d:b0:02:40:9f:
b8:ba:7c:5d:d6:45:52:2c:78:9b:6c:67:bc:33:28:13:07:7f:
31:e4:88:f0:fc:f8:52:dc:3e:ef:e5:48:41:6e:43:50:28:a9:
5e:ed:53:7e:7d:91:60:35:c5:80:a6:d0:d6:6f:65:79:4b:83:
7d:d2:5c:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 23:54:19 2025 by rpki-client