Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/PiJPRf4FNaXtuStShKIPjt-JI_g.roa
File: PiJPRf4FNaXtuStShKIPjt-JI_g.roa (raw, json)
Hash identifier: RqMJbR3f2OXAJ5xs8tGV2rQJRiYsnMLf5XlWiGt+Bk0=
Subject key identifier: 3E:22:4F:45:FE:05:35:A5:ED:B9:2B:52:84:A2:0F:8E:DF:89:23:F8
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1760
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/PiJPRf4FNaXtuStShKIPjt-JI_g.roa
Signing time: Sat 07 Jun 2025 06:09:29 +0000
ROA not before: Sat 07 Jun 2025 06:09:29 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5984 (0x1760)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 7 06:09:29 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=3E224F45FE0535A5EDB92B5284A20F8EDF8923F8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c2:79:11:88:56:b6:d3:11:17:49:1e:68:36:
f6:da:c5:18:56:7b:94:73:ab:2a:98:5a:ea:c0:09:
46:f4:b2:58:ef:0d:7a:56:c2:a7:2a:81:6d:59:36:
44:58:be:9a:92:63:21:3a:8d:e2:fb:46:8d:7f:bd:
22:ce:a1:5b:28:a5:47:a1:c7:f5:45:88:dc:be:99:
a5:23:a6:8d:bf:78:5e:f2:f3:b4:d9:a5:0d:b2:a2:
03:9c:dd:c7:52:ae:cf:ca:e5:13:89:8b:96:d5:9b:
37:3a:a9:6b:ad:2b:04:bc:08:d1:30:6b:02:86:10:
09:22:a2:ef:d3:ee:9c:43:aa:28:d6:de:55:90:22:
3f:3d:bb:d0:0d:9b:4b:5c:82:5c:c7:f7:ae:bf:08:
d6:82:cc:b5:ed:0a:83:6a:15:90:ed:d4:c5:db:51:
6a:8f:3e:f5:af:db:8a:f2:40:de:6b:cb:3c:e1:3b:
5d:e8:02:b1:5e:91:57:fe:4a:8d:77:62:22:5f:f6:
c0:5a:5a:bf:e9:51:6a:48:06:fc:04:cf:95:1d:c2:
14:54:98:8d:2e:38:2e:cd:d5:ce:95:14:b5:f5:4b:
1b:64:04:11:4a:ac:fc:62:08:c5:a4:9a:53:7b:56:
f2:bf:e4:cf:6b:ea:a9:1b:53:41:d8:aa:f1:0b:1f:
ee:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:22:4F:45:FE:05:35:A5:ED:B9:2B:52:84:A2:0F:8E:DF:89:23:F8
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/PiJPRf4FNaXtuStShKIPjt-JI_g.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
a0:17:71:63:aa:15:da:ee:9c:9c:b3:95:4e:84:a2:0e:ce:ba:
b8:19:42:33:37:a3:e7:5b:95:00:45:27:4e:28:44:0d:53:a0:
fd:b1:af:25:36:bd:d3:65:d5:1b:3e:6d:4b:d9:71:da:50:0f:
05:7a:f5:83:32:b4:bc:dd:1f:b6:33:c5:fa:4d:c5:03:db:52:
1d:0d:55:6d:18:32:09:b8:d8:cd:0f:3e:64:59:3c:ed:26:67:
7d:43:67:61:03:0d:21:44:c3:89:52:46:5b:75:bd:94:3c:5a:
02:73:d1:fe:c4:ea:64:65:5d:df:28:a0:1c:be:fa:a1:b3:bd:
b6:4d:6e:d2:73:eb:38:f9:4d:3d:22:87:c3:ae:95:43:17:f7:
7b:cc:dc:30:4f:dc:16:a4:73:a2:0e:08:bf:15:dd:ab:45:8d:
ed:f8:9f:e0:d0:15:d3:6e:cc:e2:bf:fb:45:5a:00:cb:d3:0c:
bc:88:39:1d:71:61:fd:f6:52:d7:da:60:69:dc:1c:0c:45:f2:
91:db:2c:d9:45:f1:2a:a3:f3:b0:ba:f8:2e:f1:f0:01:87:b9:
de:54:2a:b6:e2:3c:a9:d1:23:ed:2c:cb:d2:eb:a4:27:8c:f9:
8a:c9:55:a8:e9:d2:0e:30:44:bb:53:ec:48:a7:fd:44:25:6d:
77:7e:42:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 20:51:14 2025 by rpki-client