Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/Pi27S1whncQkro9i6F6nIXjY95M.roa
File: Pi27S1whncQkro9i6F6nIXjY95M.roa (raw, json)
Hash identifier: fjUGMG+6hkv/FEAm0bnp7/zN8+uIOZDsMbBKNybbJJ8=
Subject key identifier: 3E:2D:BB:4B:5C:21:9D:C4:24:AE:8F:62:E8:5E:A7:21:78:D8:F7:93
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 14EC
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/Pi27S1whncQkro9i6F6nIXjY95M.roa
Signing time: Tue 03 Jun 2025 23:39:16 +0000
ROA not before: Tue 03 Jun 2025 23:39:16 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5356 (0x14ec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 3 23:39:16 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=3E2DBB4B5C219DC424AE8F62E85EA72178D8F793
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:a6:0c:bb:f0:be:d7:83:ec:c0:09:2a:8d:84:
90:11:dc:47:10:c0:91:f9:07:f8:f6:b8:f2:f2:43:
94:c0:56:17:d0:ad:11:54:01:ab:91:23:16:d1:23:
6f:ca:ae:88:41:f1:62:ef:20:9e:7d:da:69:65:19:
4c:3f:84:85:f9:dc:36:d6:1a:da:84:be:8c:72:b4:
86:bd:10:21:4e:90:67:f2:10:e9:72:5a:04:30:e6:
f8:f5:c4:72:2f:2b:1f:63:97:06:5b:62:2a:75:10:
e9:64:e3:8d:18:68:2a:a4:df:03:42:7e:48:18:34:
21:68:0f:a7:35:bf:e1:5a:23:fb:97:4d:59:c5:3a:
5d:97:e4:04:aa:fd:c2:88:3d:fd:36:f8:0d:bc:7f:
ed:d4:89:52:3b:ae:d0:68:df:af:9c:29:8d:13:ba:
c7:0d:88:3f:85:11:b9:6c:d4:54:de:08:ed:d8:2c:
56:bb:d6:e2:e4:b9:21:54:25:9d:c4:e4:6a:5a:f2:
d4:33:af:78:36:bf:a7:8d:4c:c1:ed:0f:2f:01:7b:
66:e9:b7:43:86:70:15:61:0c:d7:67:b0:00:cd:a8:
7b:0d:23:4f:39:26:46:78:60:31:ff:69:5d:70:02:
75:3c:e8:74:6c:4f:32:bc:11:34:a9:a7:0c:20:12:
2a:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:2D:BB:4B:5C:21:9D:C4:24:AE:8F:62:E8:5E:A7:21:78:D8:F7:93
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/Pi27S1whncQkro9i6F6nIXjY95M.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
96:94:56:7c:79:31:4c:41:13:bd:ec:2a:e8:c9:38:00:b5:f5:
81:85:f1:a9:7a:b9:3f:37:c6:b0:37:8b:f0:d5:6b:72:1d:05:
00:28:07:ee:1a:94:e1:92:de:bb:b1:e7:99:e3:2c:d6:65:17:
49:55:a1:f8:c6:7e:18:f4:5a:ad:b2:f5:10:8a:49:c2:76:ec:
e5:ca:ad:b9:85:99:6d:8c:d4:fb:b6:2c:46:fb:78:c0:5e:2e:
66:60:d8:eb:c2:56:bd:26:67:ca:94:02:dd:c2:3f:cc:29:49:
aa:a6:65:cd:14:ab:67:a3:91:ad:dc:74:ef:80:e4:2d:76:73:
ea:51:73:da:63:93:d7:fb:2a:40:b7:4f:93:0c:49:5b:ea:84:
12:91:ad:d1:15:44:3e:46:1b:17:b5:c7:27:ee:bf:47:91:f4:
1d:17:e8:a7:a0:ac:bf:07:f4:56:bd:61:19:55:1c:9a:ea:51:
5d:b1:b0:73:dc:c4:14:82:94:cc:8b:10:bf:12:7e:95:6a:a3:
51:cc:e2:15:aa:2b:c0:7e:b1:96:c4:8d:76:13:87:0e:70:19:
e3:e2:af:39:e5:eb:29:c2:61:05:9f:d1:b6:65:a8:83:71:9f:
e3:38:00:f5:d8:e4:a3:0f:fa:fe:72:50:a6:6c:55:74:60:b5:
a7:3d:48:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 11:22:43 2025 by rpki-client