Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/me6XCiX60eXga_qx2uUlvxDr140.roa
File: me6XCiX60eXga_qx2uUlvxDr140.roa (raw, json)
Hash identifier: 9SpaTCKQMzF+1cjWBlCSrtUmouNR+brf5SWNBdIdz7s=
Subject key identifier: 99:EE:97:0A:25:FA:D1:E5:E0:6B:FA:B1:DA:E5:25:BF:10:EB:D7:8D
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1498
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/me6XCiX60eXga_qx2uUlvxDr140.roa
Signing time: Tue 03 Jun 2025 13:09:25 +0000
ROA not before: Tue 03 Jun 2025 13:09:25 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5272 (0x1498)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 3 13:09:25 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=99EE970A25FAD1E5E06BFAB1DAE525BF10EBD78D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:9a:dd:f6:53:1b:f9:2a:eb:d0:ac:bd:3c:62:
45:ef:83:b2:f2:9b:36:0a:75:b0:24:71:d4:ef:fa:
9c:f9:f3:9c:12:07:56:ba:d8:33:91:23:83:db:9f:
35:51:10:86:66:cf:d0:ae:6d:97:d1:bb:0d:94:dd:
dd:26:e8:b5:33:0a:fa:10:94:2d:da:67:04:e2:ac:
5e:ad:b7:eb:45:90:30:4b:a6:3a:77:43:16:55:95:
88:26:26:8d:73:61:17:a8:e6:39:ab:4e:6e:f8:ba:
39:c1:70:59:87:62:b4:2f:78:49:7d:d9:df:46:27:
f3:f1:22:e1:92:8b:8b:bb:7c:7e:f2:55:41:30:6a:
fe:3c:59:2e:50:ab:1d:02:b5:e9:77:46:17:1b:b3:
ff:50:43:d1:eb:39:8b:ad:26:93:2d:40:7f:b7:0c:
df:9e:4d:29:bc:e4:7d:ea:80:96:f5:28:73:e5:76:
ae:ce:17:c2:b0:74:5a:ba:22:91:84:37:af:cb:79:
f0:1c:3f:3a:13:6e:79:5c:25:1b:e7:a7:49:a0:c6:
00:4c:80:1b:86:0d:2e:d0:03:5a:08:1e:c2:08:2a:
72:92:45:4d:8c:0b:ad:f6:eb:81:d3:73:3f:4c:f7:
7e:e7:e4:8f:cd:7f:99:1d:8d:62:b0:d1:15:6d:6c:
ec:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:EE:97:0A:25:FA:D1:E5:E0:6B:FA:B1:DA:E5:25:BF:10:EB:D7:8D
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/me6XCiX60eXga_qx2uUlvxDr140.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
8a:92:33:00:b0:ea:65:e5:1c:f0:37:0a:a9:ec:48:e9:65:e4:
37:3e:31:d8:40:bd:3b:71:45:9c:f6:fd:d7:27:c1:8c:f4:5d:
b8:d0:3e:01:65:bf:ff:a9:27:85:49:4a:bf:58:7f:c3:a0:de:
f6:b1:33:eb:13:d7:5c:1f:b1:44:1d:cb:62:43:53:de:29:83:
67:10:4b:22:4f:f9:2b:cf:bc:87:22:b6:2c:81:da:10:a0:aa:
aa:df:0b:a4:ec:b4:eb:5c:22:79:98:1f:fa:d3:9a:2e:78:87:
f3:12:19:be:70:c7:28:33:e9:41:82:06:a4:32:92:86:82:dd:
25:f3:99:ff:93:2e:4e:f3:99:48:5c:a2:c0:2f:1f:3d:49:32:
d6:9e:fe:b6:a2:61:61:35:3f:a5:46:8d:b3:00:e4:1e:a1:9f:
05:32:1a:4a:f1:d1:23:b5:4e:3e:32:7a:54:84:43:73:00:5e:
63:87:ea:d6:66:ca:55:a0:9d:15:20:59:44:be:9a:a4:be:c7:
0c:00:88:b7:3f:67:13:59:33:9f:8f:4e:45:2f:4d:26:39:66:
5a:db:56:b3:4f:bf:e2:2f:11:f5:31:ef:2a:61:0e:99:1d:c7:
5f:bb:bb:83:4a:aa:00:84:9f:7d:04:1c:67:bd:66:4e:10:62:
13:16:b6:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 18:40:22 2025 by rpki-client