Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/lYHwaSLPeb8rxel_9Gxf5feTzpM.roa
File: lYHwaSLPeb8rxel_9Gxf5feTzpM.roa (raw, json)
Hash identifier: rqX8nUjZCtrKDm6/EYvgNHKbmVN0s446iYGlK7OCs/8=
Subject key identifier: 95:81:F0:69:22:CF:79:BF:2B:C5:E9:7F:F4:6C:5F:E5:F7:93:CE:93
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 13C0
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/lYHwaSLPeb8rxel_9Gxf5feTzpM.roa
Signing time: Mon 02 Jun 2025 10:09:53 +0000
ROA not before: Mon 02 Jun 2025 10:09:53 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5056 (0x13c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 2 10:09:53 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=9581F06922CF79BF2BC5E97FF46C5FE5F793CE93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:47:39:26:86:4b:d2:92:ca:58:54:31:da:b9:
5f:79:3a:90:64:88:eb:d7:e2:ea:e8:74:d6:d4:f1:
3c:17:d4:cb:13:e6:9d:59:05:9b:fe:f9:64:2e:7c:
4a:4c:e5:28:91:51:92:0c:d1:e9:61:0a:77:14:ee:
12:01:2f:18:54:f2:77:78:2e:10:7c:31:fd:1e:31:
b7:54:74:bb:b4:8b:72:8f:81:9e:20:c7:8f:8e:f3:
6a:b0:38:31:b8:7a:c2:53:23:98:c1:df:da:33:2f:
38:99:56:02:46:f4:59:84:46:12:03:f2:fa:cf:85:
ef:8a:df:dc:1c:66:38:0d:7f:da:a6:1c:65:75:5d:
35:6f:a2:31:20:04:0b:77:de:23:54:3b:9a:37:d8:
ac:8b:e0:c7:7d:2e:97:9d:8a:6c:ee:05:4b:37:19:
85:10:54:ba:43:12:24:cd:13:ec:41:5a:12:cd:ef:
41:14:f8:8a:98:36:ff:08:b6:c2:d9:fc:c2:c7:f1:
90:88:3c:c8:57:c0:76:49:91:46:81:fe:bd:0f:97:
04:d1:ec:ac:12:ca:ae:4d:1f:e2:f3:f3:8d:0e:f6:
ae:0d:f4:5a:07:c9:de:2d:44:9b:95:c6:02:78:b6:
7c:90:5a:b3:48:bd:07:ef:27:40:c7:f3:a9:6e:b3:
80:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:81:F0:69:22:CF:79:BF:2B:C5:E9:7F:F4:6C:5F:E5:F7:93:CE:93
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/lYHwaSLPeb8rxel_9Gxf5feTzpM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
86:9d:5d:7a:97:40:87:92:84:a5:f4:f6:b1:aa:cb:46:04:e8:
37:f9:33:2a:ba:dc:78:27:d0:12:60:f9:78:95:0b:36:e0:9f:
c3:fb:82:a3:3b:12:8f:36:1f:73:8d:59:36:08:42:ae:f3:fa:
d2:c3:d6:70:f5:33:71:ea:f0:f7:da:be:28:1b:c9:c1:af:7d:
15:d3:d3:20:4e:69:b5:d7:50:71:44:6b:3d:b6:93:e8:da:cb:
31:8c:c8:19:25:79:36:8a:7b:ce:5f:df:8b:12:12:51:b2:14:
dc:ae:8b:cf:c9:4a:6a:a7:1c:42:e5:a7:64:e3:ef:e3:28:cd:
e1:f5:3b:43:aa:06:b4:85:01:5c:c7:a7:02:a2:49:64:91:03:
b4:aa:1f:0d:e0:f8:72:9a:0b:b4:29:ff:13:e3:72:39:fb:3f:
d7:71:04:41:63:9b:cf:4f:a0:a7:a8:a6:ca:ab:c0:ee:38:3e:
d6:a8:af:71:1c:97:38:d0:67:74:e0:74:e5:6c:00:31:8a:41:
fd:30:e4:b0:83:76:49:58:f7:b5:d3:df:09:01:84:cb:b1:59:
86:0c:ca:a9:ab:7f:1b:12:24:0d:3b:9c:25:61:5a:d3:76:ad:
08:76:70:13:f2:ce:12:fd:f1:fb:68:25:eb:06:81:e9:0d:ea:
5d:c5:fa:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 07:05:27 2025 by rpki-client