Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/o7NYBoNVvuoMeBrEac56ExaC2Xk.roa
File: o7NYBoNVvuoMeBrEac56ExaC2Xk.roa (raw, json)
Hash identifier: w89BJJ9rhH7q3oj9MBe6Zlh0ksBOFxUAWpXDo99KUgs=
Subject key identifier: A3:B3:58:06:83:55:BE:EA:0C:78:1A:C4:69:CE:7A:13:16:82:D9:79
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1558
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/o7NYBoNVvuoMeBrEac56ExaC2Xk.roa
Signing time: Wed 04 Jun 2025 13:09:29 +0000
ROA not before: Wed 04 Jun 2025 13:09:29 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5464 (0x1558)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 4 13:09:29 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=A3B358068355BEEA0C781AC469CE7A131682D979
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:4f:b2:f7:5e:2d:f9:8d:6e:86:e6:cc:d8:a6:
7b:8b:6f:38:33:bb:90:2a:ba:96:cb:d4:70:34:a3:
9b:a9:a7:60:6d:ba:1e:85:8e:bd:9b:38:35:36:99:
84:df:01:73:11:31:b6:ec:5e:57:d0:b6:54:7b:da:
ca:75:99:ed:01:ad:c3:74:fe:43:be:2b:f3:47:63:
b0:86:3b:35:d7:6d:78:14:c7:23:a5:04:73:36:07:
1d:d2:1d:3c:8c:53:2d:77:8d:a9:da:d1:6d:85:d6:
c3:e9:b1:1e:89:d9:45:8b:9e:45:d0:66:4f:b6:bd:
f3:7a:b2:ff:8f:22:73:43:d8:58:1a:2a:8a:c3:e3:
1c:7f:d4:84:f7:df:37:62:63:91:35:8b:31:ec:28:
de:d1:7b:55:e5:3e:ec:53:83:da:84:2f:a7:6f:52:
38:6c:29:8f:a9:c3:db:c5:01:48:a6:08:64:47:bb:
a7:58:c4:c3:2e:ab:b2:d9:80:14:1a:90:6b:c4:3f:
ab:f1:f1:9b:b8:5c:9f:a6:bd:32:60:66:c3:4c:9f:
e0:de:6d:00:8d:7a:86:3b:76:31:1f:9b:39:2a:91:
8f:82:73:7f:99:e6:40:13:c8:4d:66:cc:c4:fb:e2:
86:64:e5:b3:ad:2d:b7:d0:1e:0e:2c:94:f7:7e:71:
c7:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:B3:58:06:83:55:BE:EA:0C:78:1A:C4:69:CE:7A:13:16:82:D9:79
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/o7NYBoNVvuoMeBrEac56ExaC2Xk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
a4:33:cc:32:17:e2:06:3b:23:2f:e9:7b:4e:dd:04:7d:db:4f:
32:e1:c7:e4:d1:33:60:b6:1a:0b:c9:d0:d6:d9:4f:cc:08:56:
d3:d9:94:6e:af:55:e4:0e:f2:e6:e4:0f:9c:cc:a1:06:9c:02:
60:e9:ea:ea:b4:78:60:26:11:2f:4c:ef:8d:93:c5:5a:26:da:
03:58:6f:45:b3:74:c6:18:b9:c0:35:80:28:e9:24:18:a3:82:
f1:6f:8d:9c:3d:96:0c:55:d2:3f:17:ae:0b:43:1d:a7:46:68:
75:8d:c5:5b:9c:04:10:c9:df:41:6f:09:2c:11:38:64:3e:3b:
b0:40:3d:9a:ff:f5:d3:ef:a3:d4:18:b8:3c:54:dc:ba:cf:31:
c7:3c:bb:d8:91:b6:fa:96:d1:dd:82:6b:10:ca:8b:19:7c:98:
d5:09:02:30:bc:e7:78:be:f8:b4:91:b4:82:8c:a1:ee:a6:45:
45:d8:ba:ac:d0:6e:29:f1:29:e6:c8:f7:a6:90:f6:76:35:5a:
87:de:42:4f:a1:af:97:6d:48:35:37:5d:b6:ac:d8:39:63:08:
1a:d3:47:4f:a1:48:25:e2:2b:33:69:82:61:e7:35:63:55:ea:
5d:14:ff:03:81:75:a6:27:dd:ca:c6:76:9d:db:e7:6b:82:30:
0e:46:59:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 16:56:08 2025 by rpki-client