Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/nlOLctwvLgCRL4dAIWjivyw0S0o.roa
File: nlOLctwvLgCRL4dAIWjivyw0S0o.roa (raw, json)
Hash identifier: qsOrr1LgFneGZefbhsOJ+auk4SgE/+EjfZ/w4Nd3R90=
Subject key identifier: 9E:53:8B:72:DC:2F:2E:00:91:2F:87:40:21:68:E2:BF:2C:34:4B:4A
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1748
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/nlOLctwvLgCRL4dAIWjivyw0S0o.roa
Signing time: Sat 07 Jun 2025 03:09:29 +0000
ROA not before: Sat 07 Jun 2025 03:09:29 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5960 (0x1748)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 7 03:09:29 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=9E538B72DC2F2E00912F87402168E2BF2C344B4A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:9b:a0:d7:cd:4e:cc:c6:24:89:0b:3d:25:1a:
65:18:28:8f:9c:ea:d7:62:25:f5:93:a2:e9:1f:5c:
4b:60:09:32:89:7a:35:7b:24:36:3e:10:62:ea:46:
c5:dc:6a:f2:f5:00:81:8f:6f:80:8b:da:63:a8:42:
bc:43:71:8e:8b:40:4b:d3:ac:5b:e1:c2:c0:86:dd:
bd:26:e6:99:d5:07:48:77:64:48:bc:2b:10:70:f1:
dd:58:ff:83:6b:1d:b1:d4:98:41:91:24:18:77:7d:
3a:4a:3e:8f:5d:33:46:f5:fa:47:88:2f:bc:73:68:
21:69:32:41:11:6a:1c:84:81:43:75:e5:10:66:8c:
01:12:c1:39:96:29:82:0a:8a:76:dc:c2:ee:e4:f1:
77:f0:ae:4f:e9:62:ef:f4:98:dc:3d:1d:a8:a7:ee:
6a:ba:12:28:4d:d4:cf:21:99:71:f8:3a:53:77:21:
d8:16:8e:84:7e:30:0d:c9:5a:60:cd:c6:a1:2f:85:
76:fe:48:21:84:d1:b5:53:87:e5:04:ea:4d:f4:e1:
5b:04:36:11:7a:9a:a6:55:27:c4:e6:ff:c7:b4:63:
20:7d:97:99:d9:0d:d2:81:e5:b0:36:2c:1f:ab:9a:
c3:98:63:17:39:ea:8e:b9:28:c1:b4:ce:25:6a:f0:
b5:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:53:8B:72:DC:2F:2E:00:91:2F:87:40:21:68:E2:BF:2C:34:4B:4A
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/nlOLctwvLgCRL4dAIWjivyw0S0o.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
01:7a:cc:58:aa:26:bc:ae:5b:6f:d9:c1:0e:95:42:e0:4e:70:
ea:8f:f5:52:82:6d:02:c0:df:e3:b0:23:aa:d0:f2:8b:b0:86:
05:ce:25:6f:6f:d2:d4:d7:cd:60:29:1f:1a:be:88:1f:e8:76:
a6:19:17:b6:31:32:c1:11:87:50:af:a1:9c:f2:17:5b:de:df:
85:fd:7f:ab:02:0c:9a:66:82:e0:20:da:bb:49:80:17:22:82:
42:6a:21:5c:94:09:57:d7:ef:70:20:4f:fc:a1:ad:50:83:9b:
19:0b:e0:e9:04:18:36:84:54:5e:86:24:25:f6:40:e8:df:da:
15:5a:14:c3:88:a9:be:aa:44:54:7b:93:c5:43:55:d1:46:42:
8a:fd:54:fe:34:d6:43:00:71:e8:2e:5b:5d:b1:ec:b2:f3:43:
cd:c6:c7:54:26:58:96:39:ad:41:5a:3e:c6:a2:7b:ed:b8:77:
9e:02:12:b9:50:64:dc:74:27:fd:fc:eb:54:8d:dd:96:02:58:
f8:44:28:32:98:02:78:f3:7d:da:99:ee:db:1a:17:d5:ba:d7:
03:57:5e:fe:1b:d4:aa:be:b3:d4:8a:2d:5e:d9:d4:fd:c5:a9:
88:a0:80:93:62:91:09:4a:3a:06:13:07:0d:22:76:d6:a0:39:
03:0d:40:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 18:39:51 2025 by rpki-client