Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/QkA4mSFcPur0nI_iB9zUZwi1stw.roa
File: QkA4mSFcPur0nI_iB9zUZwi1stw.roa (raw, json)
Hash identifier: YijXRfXJeDAzckUlBn3yMtFAOyP6p4mYlUfxlrX5IRU=
Subject key identifier: 42:40:38:99:21:5C:3E:EA:F4:9C:8F:E2:07:DC:D4:67:08:B5:B2:DC
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1898
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/QkA4mSFcPur0nI_iB9zUZwi1stw.roa
Signing time: Sun 08 Jun 2025 21:09:34 +0000
ROA not before: Sun 08 Jun 2025 21:09:34 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6296 (0x1898)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 8 21:09:34 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=42403899215C3EEAF49C8FE207DCD46708B5B2DC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:59:50:80:c9:48:78:6e:53:37:45:7a:b8:99:
7f:34:bd:56:29:fa:31:43:58:c2:87:9d:68:99:8b:
84:28:7c:5b:03:3e:21:99:eb:98:0b:1b:10:17:2a:
1f:67:02:80:04:d3:bd:59:3e:04:5b:31:ca:c4:38:
b3:f5:5d:0b:76:5e:f2:03:0a:c0:92:04:5f:b3:d7:
c4:2f:51:3a:d1:eb:f0:9f:60:7f:a5:16:ff:e6:65:
da:39:30:ba:2b:6b:ee:c2:fa:12:3e:d3:ab:57:c9:
76:d7:77:53:a6:c6:f9:cb:82:07:99:03:f3:3e:77:
38:94:a7:23:9e:0c:29:b1:53:44:1b:cc:ba:75:cd:
81:b2:6d:a9:3e:ed:39:c4:db:92:76:bc:cc:22:90:
bc:73:fc:16:ee:8a:1b:7d:66:f4:9c:cc:d7:bc:8f:
57:9d:2a:3e:07:f9:31:c3:80:6a:0f:dd:84:13:ee:
37:3b:e8:a7:18:63:5f:1e:dd:73:aa:e8:8a:3c:ff:
0d:5b:e0:c2:f6:db:9c:b8:40:bd:c8:17:6a:08:5e:
21:ca:64:7a:63:5b:70:9d:9f:4f:cc:46:90:1c:60:
12:19:c8:91:b1:a4:5b:01:a3:fa:b3:ee:4a:25:54:
f1:8a:7e:c2:2f:99:29:05:65:5c:94:e0:35:96:d7:
50:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:40:38:99:21:5C:3E:EA:F4:9C:8F:E2:07:DC:D4:67:08:B5:B2:DC
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/QkA4mSFcPur0nI_iB9zUZwi1stw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
43:82:2e:0e:42:aa:1d:69:ac:b7:56:82:fd:23:e4:e3:98:04:
ed:86:8a:43:c2:6a:a5:c2:34:02:83:53:18:42:b3:ff:cb:43:
9b:7e:ef:ef:1c:1a:74:c9:48:ac:4e:58:00:08:f2:b2:eb:3c:
50:21:29:1d:d1:56:ba:57:42:08:7d:16:cb:41:cc:bd:d1:10:
cc:ca:bc:a5:c3:25:86:56:d7:c0:fe:4f:38:d8:96:76:32:d6:
46:45:b8:8b:79:19:15:44:c1:85:ce:cb:47:fd:06:59:91:f1:
bc:5a:f7:20:33:86:9d:c9:dd:67:5e:00:fd:e3:41:fc:40:06:
d0:7c:13:d2:b1:54:86:2a:36:f7:33:ab:47:5c:17:88:2f:4a:
f3:d2:d7:df:9f:3f:5e:02:64:e1:fc:70:75:b3:2e:c3:b6:39:
3d:31:da:53:d4:1e:96:b9:c8:26:92:41:a3:39:86:3b:8d:f8:
f9:77:e3:0c:ff:28:5b:3f:b0:b8:4a:e4:d2:8a:4e:84:a9:c8:
a4:85:fd:f8:be:1e:44:11:67:ce:90:57:0d:84:09:37:88:ac:
18:56:ee:52:d1:4c:7b:88:3e:23:65:4f:ab:d0:82:60:2b:f2:
bd:e7:bf:42:03:8c:95:2e:6d:64:d0:12:7f:ab:d1:eb:f4:07:
15:83:68:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 10:35:40 2025 by rpki-client