Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/jyOsiYkdMhkjB0Xlg3R89q97Kjg.roa
File: jyOsiYkdMhkjB0Xlg3R89q97Kjg.roa (raw, json)
Hash identifier: I4yz4+BafZIaIL79Ev40nkO8NyKB6164d4yGQYLi5uI=
Subject key identifier: 8F:23:AC:89:89:1D:32:19:23:07:45:E5:83:74:7C:F6:AF:7B:2A:38
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1ABC
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/jyOsiYkdMhkjB0Xlg3R89q97Kjg.roa
Signing time: Wed 11 Jun 2025 17:39:46 +0000
ROA not before: Wed 11 Jun 2025 17:39:46 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6844 (0x1abc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 11 17:39:46 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=8F23AC89891D3219230745E583747CF6AF7B2A38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:6f:c9:d2:2e:e5:a3:76:e7:4f:83:7a:d3:66:
9f:a6:8a:2c:8b:4b:eb:b8:5e:be:70:5e:87:f4:16:
fc:ec:95:eb:ef:09:6f:02:cc:f1:50:46:d2:65:ee:
29:ee:a5:62:f2:4a:fd:49:33:09:6e:7e:79:99:33:
1d:ee:42:b6:76:d3:ce:9c:70:a3:c6:3f:e5:51:27:
b8:c0:0e:09:7a:aa:e9:ed:82:04:1b:b6:0f:b4:9c:
0f:d6:07:f7:36:62:46:53:ce:e2:aa:31:24:84:cf:
2c:a0:ef:e0:f3:d5:6b:0e:55:d7:87:3b:4e:8c:16:
00:d9:e5:e3:ff:65:2d:bd:2d:26:b4:8b:be:44:20:
ed:84:dc:22:c1:1d:18:c2:56:5f:20:37:b9:0e:f3:
14:e9:86:fd:61:11:bc:4d:02:da:47:a7:e3:b9:03:
c4:f4:38:7d:39:fd:4b:fe:be:5e:28:f3:f7:f9:6e:
f3:d0:42:27:ae:4e:86:33:b3:97:fb:ff:39:59:70:
2c:55:0e:bd:23:21:eb:06:90:c2:a2:d2:76:3e:cd:
c7:26:e7:67:76:67:67:de:17:cf:e7:87:3b:26:b4:
63:b8:ab:67:0d:44:ff:44:04:81:f7:92:41:23:70:
3b:0f:e4:7f:06:d8:ff:88:74:ad:f0:e9:49:96:cc:
da:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:23:AC:89:89:1D:32:19:23:07:45:E5:83:74:7C:F6:AF:7B:2A:38
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/jyOsiYkdMhkjB0Xlg3R89q97Kjg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
1a:2e:36:50:7a:71:31:75:71:cf:d5:05:bd:79:c9:22:99:c8:
0f:40:83:b5:6e:2f:39:03:9f:91:75:f1:aa:32:47:c5:8c:2c:
85:4a:c4:f2:f8:43:64:e8:0d:a7:af:3e:0c:5b:95:7c:18:d8:
92:9a:9c:80:45:d7:5b:3a:0d:82:76:16:6f:6f:18:05:e0:40:
f0:36:56:3b:18:01:89:fb:61:90:c4:d5:14:22:47:e8:8a:08:
26:95:de:a9:20:99:5b:c3:8c:56:da:aa:b0:d5:81:53:bc:b0:
05:f2:64:49:88:35:8d:80:84:90:6a:31:2a:0d:eb:65:84:c6:
80:2a:be:64:9b:ca:05:19:35:42:95:aa:ce:16:81:ff:be:38:
a5:e4:2e:63:00:bb:e4:3f:83:63:80:6e:1d:73:ad:0b:72:df:
fb:be:93:a5:6d:25:ff:56:76:c2:08:79:04:d0:6c:be:54:de:
c3:58:60:a8:c7:b9:12:5c:fb:b2:17:ae:0a:b5:f2:e2:1d:e2:
4a:f3:4b:04:7a:73:46:c1:94:7e:df:5e:cf:fd:3e:bb:a2:17:
cc:50:e5:06:5a:6a:16:07:b3:52:ce:1d:9f:50:ec:5d:45:89:
dd:59:be:f1:00:e1:86:9c:ec:93:e4:ab:06:ef:02:08:86:d9:
69:15:11:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 00:08:05 2025 by rpki-client