Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/m1stcI3tEYNGEIEufFMd77sgFZE.roa
File: m1stcI3tEYNGEIEufFMd77sgFZE.roa (raw, json)
Hash identifier: jSdMRVhzM7BpZ+iBHKciXY0Aaptm7TFwg7tWJN7kVqQ=
Subject key identifier: 9B:5B:2D:70:8D:ED:11:83:46:10:81:2E:7C:53:1D:EF:BB:20:15:91
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1BE0
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/m1stcI3tEYNGEIEufFMd77sgFZE.roa
Signing time: Fri 13 Jun 2025 06:09:52 +0000
ROA not before: Fri 13 Jun 2025 06:09:52 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7136 (0x1be0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 13 06:09:52 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=9B5B2D708DED11834610812E7C531DEFBB201591
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ad:0a:03:01:8f:1a:bf:8e:64:2d:c9:86:73:
8d:6d:d5:4b:8f:ea:ec:30:de:7b:ad:31:eb:86:67:
22:09:45:1a:a8:fe:23:4a:96:dd:33:26:6d:62:dd:
59:24:e4:de:bf:cf:9f:72:0a:a6:e6:4e:63:43:82:
3f:e1:67:e2:e1:ca:e9:10:7e:2b:e8:08:f5:86:84:
b1:27:1a:5f:56:3d:08:e6:c6:ef:d3:0f:cf:a8:07:
c4:38:fb:31:29:3b:55:63:e8:20:9e:d5:6d:06:c7:
2b:e0:4a:13:53:ed:f1:a2:54:e0:53:12:71:eb:75:
24:58:3b:82:a1:95:85:f2:ef:0e:4d:a7:06:0e:41:
92:8c:f1:2b:f2:2b:5c:dd:dc:ed:2c:6b:79:cc:15:
b5:db:9e:74:42:f2:51:47:1c:13:f6:85:68:4a:da:
25:fe:7a:77:75:ef:14:c9:e4:f1:1a:08:c7:56:86:
23:e4:7d:ee:31:b8:95:ad:31:9e:ae:75:5e:bd:3d:
df:74:a0:27:76:a0:36:72:ed:71:cd:e2:fa:e9:82:
eb:b4:e4:15:bf:4d:3b:87:99:a0:08:ec:30:4a:2e:
17:25:ab:34:ee:e1:7e:9d:b0:41:cf:27:f5:ee:f3:
87:46:17:97:1f:61:52:a0:7c:d2:79:d8:b6:ee:93:
c4:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:5B:2D:70:8D:ED:11:83:46:10:81:2E:7C:53:1D:EF:BB:20:15:91
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/m1stcI3tEYNGEIEufFMd77sgFZE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
ad:ba:2c:57:71:7e:0d:34:56:ca:22:29:9c:6d:3f:a3:0d:9c:
20:4d:0c:ff:c0:da:1d:6d:bd:75:db:4f:51:08:9c:64:5f:6d:
23:f0:7a:83:e2:0e:d9:50:55:45:64:ff:3e:e7:b4:a1:ac:0f:
64:01:de:7a:b4:25:cc:ec:e4:31:d4:d1:9e:bf:a4:95:8d:05:
fe:8b:b0:1a:ed:84:e2:28:90:71:43:c0:af:f9:89:c5:cb:f3:
b2:e9:94:41:e8:10:0d:f7:37:db:b1:eb:3c:5c:9e:e2:56:df:
01:49:97:78:39:ed:0f:3c:33:38:93:96:7c:72:69:dc:ff:7a:
33:02:d8:91:84:3f:a7:cb:11:78:e5:1d:8e:e2:f2:c2:8d:e5:
70:76:64:77:95:89:3f:2b:03:a5:42:a3:1f:ad:8d:a6:9e:b4:
8d:b9:97:5e:49:73:5e:8b:bd:70:b7:dd:da:14:f7:02:5a:ce:
ce:f9:4b:36:59:46:fa:99:19:1e:83:34:42:8e:8f:cc:53:33:
ca:ff:a6:36:08:74:71:fd:43:6e:ba:63:15:ad:06:d9:64:74:
0c:85:4a:e8:71:f4:e0:23:ea:6b:dc:29:28:97:19:a5:34:e0:
0c:34:a3:d0:d1:4a:02:9d:27:4b:2b:b3:e4:7c:60:1a:89:36:
d8:23:f1:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 12:11:50 2025 by rpki-client