Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/blJdtitE-UaT3soDdLDNgd_e-F4.roa
File: blJdtitE-UaT3soDdLDNgd_e-F4.roa (raw, json)
Hash identifier: 8BL2z8yhKoRrajrEnf5b+t2aNiq8u4d6f8EJgPfmOhs=
Subject key identifier: 6E:52:5D:B6:2B:44:F9:46:93:DE:CA:03:74:B0:CD:81:DF:DE:F8:5E
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0A20
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/blJdtitE-UaT3soDdLDNgd_e-F4.roa
Signing time: Tue 20 May 2025 14:08:15 +0000
ROA not before: Tue 20 May 2025 14:08:15 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2592 (0xa20)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 20 14:08:15 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=6E525DB62B44F94693DECA0374B0CD81DFDEF85E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:56:c6:6a:12:cf:68:61:57:2a:ce:69:18:7a:
2c:db:10:5a:be:99:96:66:e0:55:84:76:57:ef:ad:
9d:13:89:de:9f:66:7e:de:22:ad:b1:75:8c:df:91:
f9:6f:e6:22:c3:ce:b8:41:50:bf:5f:12:de:2a:23:
0a:22:08:1f:3b:1a:20:31:fe:d0:f6:5d:cc:33:39:
b4:3a:61:cb:84:a3:4d:75:40:c2:62:67:f9:3c:08:
87:27:66:dc:27:e5:3f:15:8c:02:79:39:17:5d:0c:
ac:31:02:81:93:cc:34:2c:01:97:af:7b:99:60:bb:
f6:21:0d:a7:d2:34:ad:e7:1a:bd:88:32:57:36:6c:
ec:97:97:3f:49:88:ee:7d:29:6b:cd:a4:48:d1:c2:
35:99:43:1e:66:21:ef:62:09:a8:8f:9e:da:e7:b8:
12:ba:04:10:81:26:a2:e8:de:2f:c7:02:b3:7b:d5:
b3:41:f8:8c:e4:8d:a9:0f:80:38:5f:f3:fd:0e:ae:
89:aa:af:29:c9:3b:0f:52:e7:b8:6d:27:a5:eb:98:
ba:f2:f6:20:1f:fe:8c:1a:4f:b6:83:41:5b:61:8c:
af:64:c0:b8:92:c1:45:b6:2a:98:cc:f9:49:e2:a5:
31:ff:5a:39:fa:ed:36:c5:3e:3a:dc:b7:ce:02:b5:
e5:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:52:5D:B6:2B:44:F9:46:93:DE:CA:03:74:B0:CD:81:DF:DE:F8:5E
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/blJdtitE-UaT3soDdLDNgd_e-F4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
1d:7e:09:de:66:d2:6b:c2:70:1d:8f:ba:7b:76:ac:6a:3c:e1:
ca:e0:8b:f4:c1:31:73:ce:64:7a:8b:bd:15:05:5b:ab:27:f9:
99:19:f9:d1:b9:d4:47:18:59:5b:13:39:59:b2:0e:08:1a:0b:
cf:97:55:f8:96:30:e0:c1:ff:ec:5d:8e:86:04:c1:da:8e:44:
93:c7:f2:4a:c9:02:e6:56:49:32:ce:93:ac:ce:4c:67:f4:86:
c0:79:df:17:6b:47:8e:73:12:48:67:cf:69:74:81:53:10:60:
0d:ef:34:57:1c:62:e5:c2:dc:13:7c:52:af:b0:79:41:1c:33:
65:f8:cd:2c:a9:58:22:e7:c4:4b:ee:15:11:b5:b3:e0:89:9a:
55:c0:36:cf:6a:c2:dd:72:06:31:6a:b9:5f:2f:c5:f6:5c:59:
9e:e0:92:45:c2:aa:54:3e:14:28:a0:ae:64:be:65:20:cd:3d:
af:37:52:c2:4d:1a:77:ee:04:fc:88:5b:2f:89:ca:9c:3e:0b:
2e:39:b2:5a:57:8f:10:40:29:28:b9:09:c1:05:7e:c0:0a:3c:
12:19:51:f2:29:3a:e7:76:fb:f1:33:76:3c:6b:22:0b:29:d9:
f7:1c:d3:5e:45:39:16:0c:79:15:19:a1:d8:1d:88:67:b5:15:
af:cb:c3:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 16:54:53 2025 by rpki-client