Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/nu-jKdRj5scsdZSsb6MJrh3qOlo.roa
File: nu-jKdRj5scsdZSsb6MJrh3qOlo.roa (raw, json)
Hash identifier: n94GrsNMCmZ4Kg1703H8Yw6LhCalKQvr2ol/helL1Go=
Subject key identifier: 9E:EF:A3:29:D4:63:E6:C7:2C:75:94:AC:6F:A3:09:AE:1D:EA:3A:5A
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1CC4
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/nu-jKdRj5scsdZSsb6MJrh3qOlo.roa
Signing time: Sat 14 Jun 2025 10:39:54 +0000
ROA not before: Sat 14 Jun 2025 10:39:54 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7364 (0x1cc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 14 10:39:54 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=9EEFA329D463E6C72C7594AC6FA309AE1DEA3A5A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:d3:f8:c3:16:25:cd:7e:1f:24:ea:70:77:1f:
b9:da:53:5d:08:3a:62:8a:04:7b:da:27:ed:0a:c3:
2a:e5:b2:74:f1:65:46:fb:87:6e:c6:92:8b:3f:b2:
ff:db:1f:f6:1e:e9:03:c2:4e:89:fa:43:8f:ac:b8:
9b:78:02:df:cf:bc:45:b1:59:9f:2d:47:df:51:19:
21:02:8b:0f:73:4c:ec:32:8c:29:33:98:ba:26:a4:
52:44:a1:3a:6c:fe:35:34:13:c6:bd:d0:35:97:1a:
e8:48:c5:0f:38:f7:cf:5b:7c:a4:f5:3a:28:b8:b4:
a7:27:1d:75:67:49:d9:62:e1:67:73:88:e0:28:53:
f4:a3:37:8e:f1:0d:74:7f:05:05:7e:e0:ba:72:ce:
9c:35:13:cd:a2:49:0a:84:b7:b7:7f:92:15:03:8d:
c3:05:23:f5:b3:dc:5d:38:b2:f3:47:db:36:09:f1:
d5:8b:d0:8f:09:84:85:fd:a0:52:3f:c8:2f:f4:14:
38:70:83:63:c3:e0:32:07:89:93:c2:25:4a:62:21:
49:ec:4c:2a:c0:19:36:7f:77:f8:97:9a:aa:7c:81:
af:d6:5e:f7:d8:ac:08:90:fb:d7:f2:10:07:ae:5c:
3e:64:dc:da:6f:90:e3:99:5c:7d:4c:c9:a8:36:16:
3a:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:EF:A3:29:D4:63:E6:C7:2C:75:94:AC:6F:A3:09:AE:1D:EA:3A:5A
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/nu-jKdRj5scsdZSsb6MJrh3qOlo.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
0b:fd:5c:77:a1:0a:34:72:7e:40:b4:9a:ca:03:6f:5f:98:f3:
81:17:ba:e0:55:d0:22:0f:5f:81:17:09:31:2b:71:cd:96:19:
ae:ec:3e:c9:b6:80:99:8a:de:77:ca:0d:57:58:13:00:63:ec:
8c:77:1e:25:3b:85:9a:f7:d5:02:95:ac:be:a6:df:14:b6:2b:
ba:ba:ac:bb:64:05:10:9d:d0:63:27:3d:4c:32:aa:95:92:6c:
cb:4a:4a:26:6c:87:b8:bf:bc:02:8f:cb:0e:b7:85:5a:bb:d4:
6a:e6:13:49:92:fa:68:3c:ca:86:2f:a1:52:02:04:93:f4:6d:
ea:91:c2:97:17:39:7c:c3:94:bb:7f:4c:8c:00:7f:33:60:2f:
74:ec:9a:41:43:ef:6b:f1:cb:3c:a6:84:a9:b0:9b:d5:18:fe:
af:63:34:dd:3d:0e:9a:86:ea:34:5b:7a:9d:08:31:4b:16:cf:
46:5a:9e:45:a2:57:e9:08:a3:4a:d0:cd:a6:3b:72:da:7d:22:
6e:a7:61:11:8d:99:91:82:f7:43:20:a9:2b:37:02:78:86:75:
0a:92:a7:d0:bd:ca:b3:a7:35:d8:b3:09:67:98:ba:1f:6b:85:
90:dd:ee:71:ed:d3:1b:95:f7:fd:d6:81:4d:f9:c7:18:16:ca:
a5:ba:dd:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 20:03:22 2025 by rpki-client