Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/QP227hV0h3ByB3U74X4JvVQDOLk.roa
File: QP227hV0h3ByB3U74X4JvVQDOLk.roa (raw, json)
Hash identifier: Uyn1jpRWv6Uvq9OPYkYDWGEQYSIGSSukI6PhjByv89Q=
Subject key identifier: 40:FD:B6:EE:15:74:87:70:72:07:75:3B:E1:7E:09:BD:54:03:38:B9
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1800
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/QP227hV0h3ByB3U74X4JvVQDOLk.roa
Signing time: Sun 08 Jun 2025 02:09:32 +0000
ROA not before: Sun 08 Jun 2025 02:09:32 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6144 (0x1800)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 8 02:09:32 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=40FDB6EE157487707207753BE17E09BD540338B9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:43:3a:ab:de:69:f0:28:71:e5:2a:62:82:67:
c0:21:79:21:99:96:5e:d9:d2:5f:62:c4:ff:df:cc:
c9:d4:dc:cd:80:5a:22:98:7d:81:d7:8c:b9:2a:df:
f1:8f:94:3f:74:81:2e:c3:40:20:8f:af:ef:43:ba:
c4:0c:2f:f8:94:28:5c:5c:99:f9:33:6a:21:da:a0:
9b:4a:50:06:98:8e:3d:12:f6:4d:37:f5:75:da:83:
cb:96:25:d7:e4:a9:52:34:54:76:15:9d:27:03:2d:
3a:52:26:57:72:eb:a3:6b:3d:be:15:b2:80:61:c8:
f1:d3:f2:b3:e8:a5:d5:34:6c:f4:57:1d:23:d9:47:
19:59:35:a5:40:fb:20:45:9d:60:bc:b0:e0:a0:ce:
fc:0a:75:fe:46:4f:2f:e1:4b:98:bf:24:0a:bc:75:
37:e6:5a:f2:e5:ab:b8:fe:61:f0:50:f7:8a:de:59:
b6:b6:24:d6:ad:69:2f:76:2b:f5:ae:66:c8:dc:b6:
9b:9d:0d:49:d3:9f:90:fe:b2:c3:f8:cd:4b:7f:6b:
9a:bc:f7:ea:c3:fa:8b:1d:c0:4b:7c:9e:ae:a5:31:
b5:8f:6b:7b:0b:11:f0:69:16:a4:ad:6f:ca:41:d0:
0a:87:9a:32:22:e7:0a:11:2b:7a:97:61:7a:3d:c9:
89:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:FD:B6:EE:15:74:87:70:72:07:75:3B:E1:7E:09:BD:54:03:38:B9
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/QP227hV0h3ByB3U74X4JvVQDOLk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
6d:41:ad:28:fd:1c:94:aa:a3:55:d9:e6:dc:d1:67:98:a2:9c:
71:99:ed:69:39:64:63:d1:41:55:c3:a7:24:3a:56:c2:85:b3:
ab:33:bb:88:2c:e3:b5:0c:5a:e5:fd:b4:d5:d4:2e:a0:4b:86:
70:61:1e:44:fc:41:35:c8:18:54:35:96:e1:a1:e4:cd:63:d1:
5d:69:f9:83:79:58:0e:3c:00:55:0b:55:ff:06:fc:bf:ce:0d:
8b:18:96:be:d1:39:47:91:80:0b:22:1b:7f:07:1b:91:35:c6:
11:15:01:03:8b:d5:7d:1b:d2:c6:5d:43:12:7c:c9:ba:7a:7b:
4b:eb:f1:9b:de:3c:f8:e9:15:f5:7e:e5:57:7e:8e:73:51:da:
09:0b:78:38:1f:f3:c0:99:11:c4:a4:65:91:d8:70:5b:a5:8b:
d8:d0:dc:47:f4:2a:69:81:d7:fe:6f:4a:d2:69:24:60:7b:f8:
64:2a:7d:d4:bf:d2:77:cf:13:54:d1:5d:e3:0e:18:97:8c:74:
2d:ea:9b:5e:35:6c:4d:0f:53:49:28:2b:db:81:02:90:1d:cc:
ed:fd:6d:0c:2c:ec:2c:28:16:37:38:e2:4c:80:79:e7:05:4e:
ca:27:9e:ea:e0:97:85:2d:53:b7:a5:7a:10:4a:7e:84:0c:7e:
66:34:37:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 14:41:33 2025 by rpki-client