Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/Tca1WKAuLj2aPpcfWQ19EMzN6wI.roa
File: Tca1WKAuLj2aPpcfWQ19EMzN6wI.roa (raw, json)
Hash identifier: 56KadVUNkDdf5fyp7a6pvYWWh9YfV7LGVcsk2Dts2Qg=
Subject key identifier: 4D:C6:B5:58:A0:2E:2E:3D:9A:3E:97:1F:59:0D:7D:10:CC:CD:EB:02
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 15C4
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/Tca1WKAuLj2aPpcfWQ19EMzN6wI.roa
Signing time: Thu 05 Jun 2025 02:40:03 +0000
ROA not before: Thu 05 Jun 2025 02:40:03 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5572 (0x15c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 5 02:40:03 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=4DC6B558A02E2E3D9A3E971F590D7D10CCCDEB02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:7f:8c:51:1d:de:27:e2:2a:ec:d7:c0:48:00:
27:5f:94:2d:f1:30:e2:38:07:8a:1d:56:2a:c8:61:
84:09:6c:2a:8a:7c:09:43:94:76:61:33:2d:33:ce:
d2:3c:cf:26:b3:df:83:66:7d:67:89:6b:d0:55:96:
34:fb:e6:91:34:af:e8:e9:47:2a:c1:29:82:ee:72:
91:59:ad:e5:40:90:9a:84:a7:20:c1:cb:04:7a:80:
72:30:7a:fe:7e:a4:19:16:e2:89:a9:d8:14:80:bf:
8d:60:71:09:08:8e:27:af:43:07:7d:42:a8:b7:11:
96:2b:91:df:19:db:23:c4:7b:9e:9b:a0:a2:fc:a0:
16:61:71:af:e1:b2:06:23:96:f4:07:7b:ec:7d:96:
31:42:53:0f:f5:31:ef:ce:08:b2:7b:9f:56:fd:b8:
6f:01:a3:29:bc:65:bb:d8:6c:da:ff:10:61:a9:b5:
3b:a0:3b:9b:33:ff:1f:56:2a:a0:fa:f4:4a:74:a2:
85:bf:fc:fb:01:20:9a:97:78:d4:b2:b2:9b:40:88:
b8:b3:53:87:1e:3e:4b:41:c1:64:c5:1a:67:76:df:
f2:3b:aa:10:21:0d:27:b6:b3:28:6c:b3:58:6f:dc:
bc:d1:ef:0e:4d:21:b3:05:16:19:bd:4c:02:f6:f4:
21:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:C6:B5:58:A0:2E:2E:3D:9A:3E:97:1F:59:0D:7D:10:CC:CD:EB:02
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/Tca1WKAuLj2aPpcfWQ19EMzN6wI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
06:45:2b:4b:e7:b3:1e:42:f5:30:e6:7f:64:f4:b4:65:e3:c9:
6a:b6:56:d4:d5:55:37:80:3d:b7:3f:1f:52:8f:e9:d6:34:2b:
b5:1d:3a:4a:49:d1:2c:5b:5d:d1:e3:48:18:82:cd:da:2e:88:
09:38:93:ef:08:0d:5e:69:b6:12:ee:72:4c:85:fa:64:84:9e:
76:3b:34:45:12:60:8d:24:85:c2:34:25:43:f0:b1:59:fb:02:
27:b4:48:20:f6:b0:9d:2c:76:fb:ff:8b:ff:f2:7a:9d:88:24:
41:5b:0e:10:a2:b1:b9:47:3b:1f:a3:db:ff:c9:59:a9:3c:44:
54:ae:42:25:a5:bb:8b:18:0a:91:eb:04:76:ba:d4:e0:ee:f6:
92:67:60:b0:8b:21:36:62:bc:e0:a9:b7:40:c2:de:b6:6b:24:
85:0d:0b:2e:33:e7:a2:69:f3:0c:9c:88:86:fd:a6:88:83:26:
06:ae:2d:df:05:89:21:ff:d0:29:45:39:eb:3b:cd:90:10:73:
07:85:6d:15:6b:5c:8e:49:4a:f4:12:7d:f9:7f:b4:d2:75:b6:
60:ec:02:f0:dd:47:75:09:2b:85:60:4b:91:98:0e:54:37:b4:
eb:eb:e4:12:83:cb:ea:8c:31:0b:a1:4a:f8:94:bc:57:b0:74:
46:04:cd:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 22:20:57 2025 by rpki-client