Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/lxctmQj-sxUxE1E8IXDfeeQqT1k.roa
File: lxctmQj-sxUxE1E8IXDfeeQqT1k.roa (raw, json)
Hash identifier: uc7DHtW7fuxgpc/yOPGjzqx0CQy6+1qn5KdBTTUINoQ=
Subject key identifier: 97:17:2D:99:08:FE:B3:15:31:13:51:3C:21:70:DF:79:E4:2A:4F:59
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 194C
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/lxctmQj-sxUxE1E8IXDfeeQqT1k.roa
Signing time: Mon 09 Jun 2025 19:39:40 +0000
ROA not before: Mon 09 Jun 2025 19:39:40 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6476 (0x194c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 9 19:39:40 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=97172D9908FEB3153113513C2170DF79E42A4F59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:bb:5c:43:7d:09:57:74:f3:c6:4e:b8:fc:f8:
90:39:1a:88:4d:5e:64:91:2f:d9:9d:a6:cc:41:55:
f5:e0:ab:ac:9c:0c:7c:6e:32:1a:c2:a2:af:af:14:
aa:ef:77:e2:13:d0:89:a2:2a:fb:d3:3d:07:e2:68:
6f:43:cb:89:9b:6f:a5:ca:4d:46:6e:ab:95:64:6f:
ef:a5:35:b9:51:bd:f6:8d:d4:72:57:67:ee:38:3f:
02:f3:5d:13:79:51:61:8b:b5:b9:05:70:ea:d4:8e:
22:c3:d4:01:da:38:61:2c:49:88:4f:87:15:2b:c6:
59:dc:c9:e2:71:ad:c3:14:18:8c:cf:7a:1a:e9:14:
d3:30:19:a5:3e:f6:c0:fa:86:d9:46:8d:4e:7b:76:
2c:db:1e:35:dd:2e:7a:14:f6:87:f8:f0:8d:2e:5d:
dd:8b:aa:1c:10:be:9e:29:c2:d5:3c:3e:56:b4:7f:
83:e3:ea:b7:98:57:29:d8:52:b4:60:05:5e:48:b5:
c5:e4:5d:b6:7e:70:a6:73:0e:57:58:2e:62:35:ba:
87:2e:b3:61:f8:e4:f4:87:77:b9:e2:8c:21:17:2e:
79:43:62:4f:0e:0e:df:33:0b:c5:a0:c7:cf:df:56:
e4:3d:78:72:7d:3f:a6:95:07:45:b9:15:21:09:25:
30:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:17:2D:99:08:FE:B3:15:31:13:51:3C:21:70:DF:79:E4:2A:4F:59
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/lxctmQj-sxUxE1E8IXDfeeQqT1k.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
40:9e:a6:99:3e:e6:55:a9:72:ae:09:8d:23:6f:fa:b8:42:29:
12:40:75:30:cb:3c:da:4c:f2:ba:05:55:af:70:98:99:d0:d9:
b2:ca:18:50:7d:a9:ed:53:27:44:fb:d1:64:62:29:00:73:66:
64:b4:03:3c:5f:d4:0a:68:d3:82:f2:d5:85:14:bb:c1:16:8d:
34:4c:3a:1f:b9:50:55:24:7c:bc:48:e1:1f:5a:a6:89:81:c7:
47:4c:bb:8e:02:e8:87:fa:58:6f:a4:ff:bb:4c:99:75:d3:44:
12:32:c2:3d:7a:a2:4b:04:4e:69:75:66:02:29:f2:93:6d:68:
a0:b0:7e:bf:3e:b9:cd:d8:e5:5a:00:2d:0b:5c:b8:4f:69:09:
78:e9:1a:37:90:4b:8c:bf:9f:b7:c7:66:10:87:76:15:52:22:
48:c4:2f:ca:16:d2:6d:73:9b:d7:d1:5c:8f:6e:65:7d:a6:94:
9c:5e:c9:7b:82:12:5b:fb:15:8d:88:6b:b1:04:6e:09:b3:3a:
35:11:25:88:e6:6c:7c:42:ee:1e:67:ac:32:f8:d5:13:5f:7b:
a7:b3:40:83:b7:f9:6c:0d:4e:52:9a:ed:ff:4e:a9:20:7c:7a:
12:d4:00:38:67:5f:77:78:44:b4:57:e5:75:c5:53:e0:c6:68:
19:fd:0f:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 17:38:18 2025 by rpki-client