Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/PXVn5cm8QUfOhV6JdoX3qLTJsyQ.roa
File: PXVn5cm8QUfOhV6JdoX3qLTJsyQ.roa (raw, json)
Hash identifier: HKbTZPG0+47VCv7OATOy1mTkYsTCruIzIamIPc1dVJg=
Subject key identifier: 3D:75:67:E5:C9:BC:41:47:CE:85:5E:89:76:85:F7:A8:B4:C9:B3:24
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 13B4
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/PXVn5cm8QUfOhV6JdoX3qLTJsyQ.roa
Signing time: Mon 02 Jun 2025 08:39:23 +0000
ROA not before: Mon 02 Jun 2025 08:39:23 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5044 (0x13b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 2 08:39:23 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=3D7567E5C9BC4147CE855E897685F7A8B4C9B324
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b2:c4:5a:f9:42:90:13:b4:fd:f0:69:ba:2f:
fb:82:bc:4e:09:be:6d:df:7f:df:c4:b7:a6:29:56:
42:6c:23:9e:bd:56:c1:c8:0e:d2:8a:d8:18:7c:90:
3a:8b:67:ef:38:71:d7:3e:fb:62:cf:fc:9b:5d:bb:
d8:ba:3b:fa:8e:27:47:2d:73:b1:74:9b:2a:39:d6:
9a:83:63:d6:a2:0f:e2:5d:4d:fc:1a:e4:d4:ce:15:
b5:61:8b:5c:27:0e:9d:0d:64:ac:a1:4a:78:5d:b5:
99:18:bb:c6:dc:4e:53:60:80:3c:93:0a:cb:b8:b6:
83:04:70:00:ba:94:19:dc:a7:ed:d1:e4:3a:bb:7f:
e7:13:e8:7e:72:95:ee:bc:70:0b:c6:23:14:31:84:
19:0d:7e:fb:f5:24:3d:ad:84:d3:39:1a:fc:df:b0:
78:ea:56:9f:73:57:b6:25:15:51:58:06:09:89:7c:
84:85:ad:b6:00:30:fd:ea:9f:80:04:6b:f3:da:55:
64:4d:92:fe:2b:b8:fd:33:a7:7d:e5:97:d4:f0:3c:
2f:4d:e6:bb:09:4f:a4:db:e1:9f:3e:01:30:ff:fa:
cb:a8:6d:ec:4b:46:f1:88:f7:3f:bd:4f:2e:8c:84:
95:8a:58:c0:04:c2:d8:47:4f:4c:71:44:0a:f3:10:
c0:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:75:67:E5:C9:BC:41:47:CE:85:5E:89:76:85:F7:A8:B4:C9:B3:24
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/PXVn5cm8QUfOhV6JdoX3qLTJsyQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
43:18:03:e1:b1:e3:62:2f:b7:30:20:54:e0:1d:ae:80:31:c6:
8d:f1:50:8f:dc:af:3f:71:5f:87:c0:e4:97:a5:77:87:f7:23:
a4:2b:39:ab:03:2b:f7:f5:8e:24:11:42:e7:03:28:73:66:dc:
2c:62:3f:18:51:80:8b:a7:36:99:d1:36:19:51:ef:8f:79:7d:
40:60:d5:3f:16:58:7c:fd:c7:f0:9e:d1:e0:a5:88:3f:8d:04:
d8:c1:9d:fe:ad:46:ad:19:ff:87:fe:58:4b:f4:23:d1:e8:0f:
56:88:0a:31:02:e8:26:d6:1e:d3:2c:69:df:74:aa:6b:9e:8d:
fd:34:02:6a:86:42:18:93:14:4f:ac:68:b4:78:1b:40:73:07:
b2:1d:90:54:01:2b:e7:f3:ba:a8:a3:b8:24:6c:2a:27:a1:47:
60:ba:1a:51:bc:23:3b:5b:74:6c:38:44:e9:f8:d2:51:b2:93:
b4:0e:e7:4a:4f:14:47:32:02:e1:13:b2:7e:02:0b:92:68:60:
3e:5b:4d:59:fe:f0:d3:a8:1c:02:35:4a:0b:aa:ea:3d:2b:c7:
df:d3:84:3a:70:65:0f:60:52:f4:5a:c7:a8:11:34:90:15:e8:
1e:d3:73:03:e4:42:cb:d1:a6:40:df:08:b2:53:2e:ab:88:38:
16:c8:a1:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 22:44:34 2025 by rpki-client