Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/NPYWoLMfXZAxBF5rqfmgN-q_Zqk.roa
File: NPYWoLMfXZAxBF5rqfmgN-q_Zqk.roa (raw, json)
Hash identifier: 0IM6azg/616eZNR4Na8vXLR0KmDI//niZ738JUlVytg=
Subject key identifier: 34:F6:16:A0:B3:1F:5D:90:31:04:5E:6B:A9:F9:A0:37:EA:BF:66:A9
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1534
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/NPYWoLMfXZAxBF5rqfmgN-q_Zqk.roa
Signing time: Wed 04 Jun 2025 08:39:23 +0000
ROA not before: Wed 04 Jun 2025 08:39:23 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5428 (0x1534)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 4 08:39:23 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=34F616A0B31F5D9031045E6BA9F9A037EABF66A9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:37:c2:0a:45:61:bb:d4:5a:32:7f:7b:83:9a:
d4:e6:89:dd:8b:23:dd:a6:83:21:69:44:05:a0:7e:
9c:c5:2a:31:39:5b:e6:a9:61:22:0e:4e:81:eb:2b:
68:8f:21:12:67:c1:31:de:46:c6:71:c6:81:10:25:
01:fd:48:c0:d7:1d:e4:14:f9:80:69:d1:9e:d2:d7:
9c:a9:d7:7d:71:72:5b:b0:56:bc:31:f6:92:e7:b5:
73:32:ef:30:6a:80:5c:f5:39:8b:c8:7e:fa:f1:10:
53:81:1f:10:7d:af:ef:a3:d0:c2:71:20:98:ef:8c:
0d:d2:22:c3:5f:00:2b:28:49:03:3b:47:99:70:86:
c8:de:5c:68:6a:eb:18:64:9f:34:af:12:b0:f1:03:
55:bf:22:56:3a:35:43:0a:a0:99:de:90:7c:5b:70:
96:c7:4d:14:21:a1:28:ba:ce:83:0c:c0:04:40:91:
60:a2:58:33:03:df:31:47:ed:4e:b7:7e:7e:1d:3f:
3d:22:9a:b0:7b:2f:67:c9:24:2e:29:15:87:f8:d6:
55:2e:35:f2:21:12:79:4a:7d:9e:6f:77:25:8e:5f:
2c:4d:38:b6:01:fd:ff:2a:73:04:86:e2:43:5a:73:
df:67:b7:6b:92:fe:98:4e:00:82:6a:fb:58:af:c3:
c3:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:F6:16:A0:B3:1F:5D:90:31:04:5E:6B:A9:F9:A0:37:EA:BF:66:A9
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/NPYWoLMfXZAxBF5rqfmgN-q_Zqk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
6d:56:ae:8f:fd:1c:94:be:14:0a:35:26:11:17:00:6b:59:bd:
4e:a7:ab:47:8c:e6:dc:7c:c3:bc:b8:3a:69:31:f3:aa:8e:22:
67:b8:a1:6f:57:2e:24:82:a8:88:28:85:ce:5b:60:a0:66:47:
03:ea:40:25:fe:ff:80:62:fe:b5:2e:ea:7c:1f:27:8e:7b:70:
4c:53:c2:45:5f:38:6e:bc:3c:cd:90:90:de:dd:f7:78:14:c2:
26:09:c7:5a:76:4e:c3:21:d6:9e:99:8d:eb:3c:b1:d9:f7:74:
15:da:b2:da:5e:34:0f:a7:64:75:60:58:61:c6:a8:e5:b9:05:
5f:48:fd:6b:07:1f:7b:5d:0c:9b:77:74:5f:a4:03:cc:a5:06:
09:78:bd:6a:3e:d2:c1:dd:ee:7a:f6:51:50:20:31:8b:07:ab:
15:b4:1b:6b:c6:ff:21:8b:e9:20:95:84:14:a9:10:86:e3:60:
cf:fb:a3:81:95:b3:eb:0f:7d:92:97:73:0f:dd:20:d5:2a:3f:
4e:75:e5:eb:eb:22:42:56:25:ea:55:12:dd:11:6b:94:e2:97:
a1:2a:f5:7f:42:f5:65:8d:a0:34:a5:6c:ad:d1:49:96:60:7e:
47:d7:a6:7b:a3:b5:94:3b:3c:94:e4:78:8c:8b:fb:ce:08:0b:
f0:33:cc:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 06:47:04 2025 by rpki-client