Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/SWQTksT63OgWDk4F7nL1JpkxhH4.roa
File: SWQTksT63OgWDk4F7nL1JpkxhH4.roa (raw, json)
Hash identifier: Vn+b8B+PZAUkYYWuYQOVemmizvCuNVs63+xSqxNRrFw=
Subject key identifier: 49:64:13:92:C4:FA:DC:E8:16:0E:4E:05:EE:72:F5:26:99:31:84:7E
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1638
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/SWQTksT63OgWDk4F7nL1JpkxhH4.roa
Signing time: Thu 05 Jun 2025 17:09:25 +0000
ROA not before: Thu 05 Jun 2025 17:09:25 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5688 (0x1638)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 5 17:09:25 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=49641392C4FADCE8160E4E05EE72F5269931847E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a1:0d:04:84:88:f3:da:36:30:55:26:2e:88:
ec:e3:9c:05:53:66:3b:04:04:57:70:b5:6e:09:38:
f5:36:b4:17:cd:90:c8:aa:1e:71:33:48:7c:7e:50:
f5:e4:24:de:e1:65:cf:85:b5:93:5f:c8:4a:1d:90:
e5:e7:48:28:a9:a2:ed:c6:da:2a:12:10:39:25:6d:
52:d0:32:c1:a8:5e:89:89:06:db:19:21:e5:59:00:
e6:60:30:e6:64:d9:45:57:f9:3d:67:ed:56:76:60:
f1:a3:5d:c1:af:02:4d:6c:54:84:ce:e3:03:fe:1d:
a1:40:72:8a:82:56:ce:34:89:a4:19:48:f1:ed:1a:
c9:98:ad:6e:83:61:f8:21:2b:ff:97:1d:20:09:46:
54:fa:8f:0b:f2:e8:fc:7f:32:ed:5f:d7:d5:8b:af:
33:ec:76:de:14:d3:0b:a3:ca:df:3a:e4:f6:5b:fa:
4b:9e:4f:43:6f:b2:33:ce:ab:52:53:b9:4a:28:86:
93:e4:02:7e:30:67:24:3a:5d:ff:24:68:f2:80:f5:
d7:e8:ec:77:34:d0:40:ca:27:16:82:e0:f4:bc:8e:
c8:0c:98:d5:a1:b2:33:d8:11:c4:c9:61:f7:e6:22:
71:5c:24:cb:1d:be:8c:d5:3c:66:de:ac:35:38:76:
fd:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:64:13:92:C4:FA:DC:E8:16:0E:4E:05:EE:72:F5:26:99:31:84:7E
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/SWQTksT63OgWDk4F7nL1JpkxhH4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
02:e0:22:97:72:4f:64:a3:17:b2:43:70:0c:c1:09:df:08:23:
d6:98:38:bb:67:6b:10:c8:da:28:46:68:e4:87:a1:37:80:45:
26:ce:e1:f4:02:76:ea:a2:bc:3f:2b:91:e0:6f:c7:31:e7:d1:
2f:65:18:ac:f4:a0:31:99:c9:2b:13:3b:cd:48:bd:f3:73:f7:
0f:cc:b3:00:b0:a2:60:be:c2:96:0c:ad:c9:86:17:28:42:03:
0a:be:27:ee:c6:e3:d9:8f:cd:df:9e:d4:69:bc:6e:51:d0:50:
81:cf:55:7e:42:f8:1d:d8:e6:73:6f:ea:59:31:b5:a4:8b:c4:
be:66:b8:95:56:b6:89:1e:b2:46:63:9c:15:ce:d4:37:eb:3e:
92:87:00:11:c5:02:17:9d:47:98:46:09:03:d5:6f:3c:d5:03:
23:c2:59:9e:59:92:19:87:ea:d0:00:20:e4:fa:9e:9f:b8:f1:
15:5f:f6:18:39:b7:4d:02:2b:48:c6:68:da:96:3d:31:cb:90:
66:f3:aa:37:f8:fe:82:fd:12:25:80:fa:ce:f8:bd:6e:db:53:
0b:77:6b:0b:e9:fc:e2:f7:95:d0:40:8b:22:58:e6:34:d2:36:
a9:69:bb:75:9c:30:74:86:6c:a2:92:d5:75:64:69:2a:52:09:
0f:9f:55:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 17:32:07 2025 by rpki-client