Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/_q4fARQLkPzrlPanh9tIyU0pY5k.roa
File: _q4fARQLkPzrlPanh9tIyU0pY5k.roa (raw, json)
Hash identifier: uWzFDRdDXczUUX0r81BpF3n2V3nOHUVGsmLBgSRMPWU=
Subject key identifier: FE:AE:1F:01:14:0B:90:FC:EB:94:F6:A7:87:DB:48:C9:4D:29:63:99
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 15AC
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/_q4fARQLkPzrlPanh9tIyU0pY5k.roa
Signing time: Wed 04 Jun 2025 23:39:21 +0000
ROA not before: Wed 04 Jun 2025 23:39:21 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5548 (0x15ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 4 23:39:21 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=FEAE1F01140B90FCEB94F6A787DB48C94D296399
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:bf:26:73:cf:08:ff:06:fa:4a:d6:e4:26:39:
6d:62:c9:26:61:a1:f0:22:3c:92:ba:fb:e6:2e:e9:
8d:a7:1d:d7:b7:58:43:35:f1:61:2b:1b:99:83:dd:
f6:7d:67:44:eb:2e:19:1c:db:2a:36:6e:d5:69:9d:
c9:52:54:1a:b2:f2:11:67:4f:d3:14:35:74:31:e1:
56:43:8c:bb:36:9f:0e:d5:b3:3c:aa:6d:be:3f:83:
54:7a:db:25:ed:47:84:b8:87:35:fc:cd:96:81:fa:
aa:ce:80:82:eb:99:71:42:31:58:92:1c:53:17:a7:
73:86:90:42:1a:4e:a5:e6:83:95:26:b8:b3:74:23:
c7:77:9c:26:8e:ae:43:41:00:6b:08:00:8c:7f:29:
27:e4:17:e7:c5:d9:d2:0a:fa:d9:7b:c8:bd:4c:ff:
90:fd:a3:41:e9:ce:1a:09:1e:36:f1:e2:c7:f2:d4:
17:c9:0a:4c:d6:25:bd:0e:34:55:ec:38:28:71:0d:
42:39:bf:82:df:00:96:89:92:6c:34:61:64:3d:5a:
48:8e:62:5c:08:45:8d:4e:a8:d5:92:af:e0:27:b6:
a6:cc:4d:05:cc:92:25:23:5d:16:76:3c:86:50:c5:
09:ab:34:7d:b2:3c:83:be:58:84:5d:24:44:b2:71:
a4:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:AE:1F:01:14:0B:90:FC:EB:94:F6:A7:87:DB:48:C9:4D:29:63:99
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/_q4fARQLkPzrlPanh9tIyU0pY5k.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
a9:46:e1:2b:69:f5:eb:55:51:29:7e:63:1a:9f:82:4b:92:92:
cb:c3:d0:81:88:2b:f7:4c:8d:92:00:5f:70:d1:37:dd:ea:52:
ec:22:cb:63:07:3e:f7:a9:fb:01:5f:38:36:f6:55:8c:53:1c:
9c:2d:f2:f1:13:8f:cb:3b:18:e5:99:b8:68:25:a7:16:11:4a:
a3:74:82:3f:d0:f9:12:59:c0:c7:55:9d:99:db:66:d2:0a:b2:
c7:e4:1d:cc:30:5f:48:8c:da:38:4b:de:8f:31:ca:17:e0:02:
f7:09:e6:8c:b2:70:6c:86:c8:ba:dd:2e:aa:46:05:d4:29:f3:
e4:67:68:06:5b:58:f8:9f:c3:85:27:bf:b3:fe:a7:cd:0a:1f:
5e:97:d6:ca:77:1d:c2:61:cd:d5:c5:7d:46:43:7f:0e:61:32:
be:a1:4b:91:4e:71:81:06:ac:d8:5b:d1:92:6a:19:59:9f:cc:
15:a7:35:e9:8c:f7:3a:fe:75:bd:d5:d9:0c:2c:20:b7:41:bf:
8d:94:19:f0:44:ed:0c:01:ab:e1:78:4f:fe:a2:5b:60:30:f7:
71:88:35:f6:37:42:4c:9a:dd:cd:43:28:a3:ba:23:80:62:68:
88:98:35:94:0a:0c:5d:76:51:a0:14:14:b7:79:04:26:1c:53:
55:5b:33:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 23:15:28 2025 by rpki-client