Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/OXx2K8KKDUgdmh6RWctXbU5hEgI.roa
File: OXx2K8KKDUgdmh6RWctXbU5hEgI.roa (raw, json)
Hash identifier: ghr6IZyqDJ009hkghCknxRNqIYiA/M+pnYYr9Q2UgJI=
Subject key identifier: 39:7C:76:2B:C2:8A:0D:48:1D:9A:1E:91:59:CB:57:6D:4E:61:12:02
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1958
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/OXx2K8KKDUgdmh6RWctXbU5hEgI.roa
Signing time: Mon 09 Jun 2025 21:09:41 +0000
ROA not before: Mon 09 Jun 2025 21:09:41 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6488 (0x1958)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 9 21:09:41 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=397C762BC28A0D481D9A1E9159CB576D4E611202
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:dd:5b:cd:f1:d5:b5:a9:54:a5:31:e9:35:0a:
44:32:a8:b9:04:7e:17:1c:56:3b:46:13:29:42:1f:
d4:0b:68:aa:b5:a6:5f:7c:fe:48:3d:85:c0:0c:82:
ef:d4:83:1e:d3:23:e3:7a:5a:5d:5e:34:59:87:a0:
e1:08:b2:b1:f9:7c:98:d9:55:82:16:e5:79:62:5f:
fc:9c:9d:31:24:47:c9:cc:49:0d:6f:ef:c4:c6:e7:
a9:6b:f7:5e:a6:a2:03:cb:c8:09:71:6a:11:9f:ed:
4e:d0:31:19:a9:d5:13:eb:0b:95:30:a4:1b:e8:ba:
e4:14:26:02:b3:49:3d:48:64:4b:ec:45:d7:c6:06:
ea:b3:cd:69:a6:99:56:28:29:c5:14:75:da:ce:e7:
51:c6:86:0c:16:49:22:5e:e3:fc:50:ab:32:1e:da:
0b:15:9e:ef:a0:b7:4f:f3:4b:d2:23:c2:af:ad:17:
d2:8d:90:89:82:ca:99:07:72:66:eb:af:50:50:f8:
ac:94:35:ef:a4:ed:0c:16:2e:2a:46:fb:34:96:18:
7e:f6:e8:ca:78:21:78:91:21:32:92:cd:d2:16:3b:
2b:3c:0d:07:ab:d5:52:a2:95:0f:c5:c8:2c:14:bc:
a9:06:df:22:e7:f1:e4:f3:d5:62:af:77:51:ab:ab:
b4:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:7C:76:2B:C2:8A:0D:48:1D:9A:1E:91:59:CB:57:6D:4E:61:12:02
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/OXx2K8KKDUgdmh6RWctXbU5hEgI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
6a:f7:84:df:26:aa:b8:d6:21:b4:d8:4a:1e:1f:52:01:1c:11:
43:c9:24:40:88:b6:79:4b:86:73:e5:22:8a:01:9f:52:16:a6:
47:8a:b0:af:ab:7e:4a:1d:14:a0:01:d2:0a:70:dc:23:9f:07:
d8:0e:d1:f3:eb:b6:72:e2:52:aa:2b:c9:86:99:d4:ee:da:af:
e9:20:de:f5:5c:9f:1b:e5:d7:f8:63:c2:b7:48:b1:5c:c3:51:
22:e7:44:af:92:35:aa:e3:fc:77:ef:b3:aa:c4:23:c3:c0:64:
ac:53:ab:a9:90:2e:87:25:1a:2b:61:e9:31:1e:79:35:58:f5:
a8:35:10:1e:46:dd:d9:71:41:fa:9b:71:b2:55:c9:28:f1:ee:
8e:9d:71:db:c3:40:b4:51:8c:10:10:e6:81:17:f7:d0:94:52:
56:3a:22:a1:b4:75:52:4c:f5:ef:a2:50:94:5f:41:e6:23:77:
eb:d8:12:e9:7f:fb:6f:ef:43:f3:20:d5:4e:15:e5:4e:4e:32:
6a:54:03:0e:c2:2a:7b:9f:b2:8c:68:f9:40:68:f6:4d:0b:4c:
06:82:12:29:d6:79:39:2b:c1:e1:15:a6:61:90:11:54:a9:58:
5f:70:f2:99:13:22:6d:39:89:03:9f:22:e6:8b:04:16:9c:c6:
d3:24:49:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 01:05:44 2025 by rpki-client