Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/qj70Eoz5NSK7bx4-IYfFOn_F4bM.roa
File: qj70Eoz5NSK7bx4-IYfFOn_F4bM.roa (raw, json)
Hash identifier: oOBURKis2r1kQiYx5oeO27EBdp7/670soRpDe1uQur4=
Subject key identifier: AA:3E:F4:12:8C:F9:35:22:BB:6F:1E:3E:21:87:C5:3A:7F:C5:E1:B3
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 042C
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/qj70Eoz5NSK7bx4-IYfFOn_F4bM.roa
Signing time: Mon 12 May 2025 15:38:00 +0000
ROA not before: Mon 12 May 2025 15:38:00 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1068 (0x42c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 12 15:38:00 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=AA3EF4128CF93522BB6F1E3E2187C53A7FC5E1B3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:ce:12:e9:75:f8:6c:21:05:4c:a8:6f:8c:4d:
04:94:d7:b2:b3:76:39:53:be:40:86:7d:9f:52:f8:
1f:e2:d2:8b:71:37:0d:9a:9b:7e:aa:a5:05:c5:0e:
90:26:f8:34:c4:cc:81:8d:63:52:f6:cb:d4:dd:f6:
a8:21:14:b7:a8:32:a0:b1:3a:1d:fa:f3:2c:82:e8:
84:f6:d1:a3:10:40:94:40:10:b7:6d:09:ea:03:63:
20:78:7a:35:20:d3:af:be:2a:71:30:3d:df:d9:32:
3e:7b:34:75:ee:d4:c3:54:68:72:f5:0a:85:f0:5d:
a1:2a:d3:8a:e6:55:72:a4:d8:62:4d:86:60:e9:42:
41:c5:6c:20:9b:d3:c0:2c:3c:d0:62:22:13:71:6c:
a7:1f:23:66:41:7b:dc:35:d4:06:99:5c:36:6d:40:
0a:ef:a3:a1:9a:36:94:1e:fb:96:d9:ed:c6:a4:01:
89:38:d6:f5:66:df:8f:51:7c:df:11:bf:5d:37:5a:
dc:a7:7d:7a:25:e5:55:63:e4:02:92:da:a1:f8:1f:
84:7b:56:85:c0:aa:cf:61:11:09:42:73:3a:a9:e7:
54:41:cb:a1:20:ef:8c:52:7f:6c:59:7d:a0:53:82:
49:00:85:61:9b:32:96:28:de:2e:98:5b:a9:61:69:
56:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:3E:F4:12:8C:F9:35:22:BB:6F:1E:3E:21:87:C5:3A:7F:C5:E1:B3
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/qj70Eoz5NSK7bx4-IYfFOn_F4bM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
42:f8:ea:88:3e:0b:a3:4e:21:3a:59:38:c9:7c:04:d0:76:1f:
83:b5:04:a3:65:93:67:83:12:9f:fc:db:e2:64:41:24:06:b5:
17:3e:e8:21:07:5a:10:24:b3:6d:75:cc:22:29:90:88:49:0e:
dd:42:29:06:e9:d5:af:3a:f7:4d:aa:db:70:f5:f7:5a:1b:58:
ef:ba:da:73:8f:66:e8:0a:95:fe:1b:59:7b:55:6b:e5:b2:bc:
ba:48:5a:67:b6:c7:9d:82:98:5c:f4:5a:cf:d9:c5:51:dc:39:
a1:dd:2b:15:cf:37:5a:ce:24:bd:3d:ce:fc:81:43:0c:cf:d6:
de:59:f1:03:0e:7b:68:01:9e:d4:56:30:a4:d0:ca:69:08:c3:
0c:19:e8:35:19:b9:7b:9c:f3:d2:2c:b3:3f:cc:c0:32:84:9f:
77:53:e9:6a:ce:5d:68:12:aa:83:b0:d9:9a:f9:2a:cd:d0:80:
4e:dc:2e:12:cd:d1:78:e2:e7:e1:66:de:60:44:c2:f0:be:9e:
f4:61:df:b5:22:11:fd:5d:a2:76:c1:ee:b1:15:39:7b:27:42:
5e:d7:8b:08:98:a8:96:a6:95:9c:f3:36:86:fd:11:0f:98:09:
3c:9e:29:14:84:38:ce:ca:d4:4c:55:31:c1:e9:de:c6:92:b7:
8c:49:94:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 01:05:49 2025 by rpki-client