Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/qxN_lVoa6a1Dxktfvj7igB2qWhE.roa
File: qxN_lVoa6a1Dxktfvj7igB2qWhE.roa (raw, json)
Hash identifier: xCNUHASSk7Vo+peJ0ia1nvcgEc/cGSomNCzKPSJqDTo=
Subject key identifier: AB:13:7F:95:5A:1A:E9:AD:43:C6:4B:5F:BE:3E:E2:80:1D:AA:5A:11
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 09BC
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/qxN_lVoa6a1Dxktfvj7igB2qWhE.roa
Signing time: Tue 20 May 2025 01:38:16 +0000
ROA not before: Tue 20 May 2025 01:38:16 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2492 (0x9bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 20 01:38:16 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=AB137F955A1AE9AD43C64B5FBE3EE2801DAA5A11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f3:92:9d:42:4f:9f:ff:60:d7:76:fb:68:c0:
b9:d3:02:41:fa:8a:89:1b:1a:cf:db:9f:2c:3b:88:
b0:98:fe:be:99:50:57:24:42:a7:f2:1e:80:e4:6b:
cd:35:21:7c:b3:3b:50:15:dc:dd:79:ad:ca:f1:c9:
d3:7b:44:e2:3f:f8:12:21:be:69:55:37:b3:8b:0b:
32:fa:f3:4f:29:a2:dd:e9:7b:3d:4f:3d:6d:db:15:
83:82:40:b1:04:74:45:a8:8e:cd:e8:84:1f:61:b6:
cc:7a:87:f1:e2:d0:75:7d:5e:22:61:35:91:98:cd:
a3:a0:ee:c8:4b:84:5d:86:23:87:36:68:cd:1f:9e:
1f:29:1d:f1:f7:46:0d:27:a5:e1:fc:ff:9a:b4:76:
28:13:de:07:4b:cf:50:e3:9b:7d:a7:7e:d1:7a:d1:
43:f9:1a:84:1b:df:a2:04:e2:c5:e3:3f:7e:d1:46:
a5:21:c9:31:a0:51:d5:0c:fb:28:ea:cc:52:1e:27:
12:57:98:e7:38:5e:8d:39:b0:66:1c:8c:57:4f:08:
3c:24:0c:8e:b8:48:c5:ef:61:f6:22:96:01:0a:b1:
a1:67:20:57:70:d6:a8:99:57:2f:f7:f4:c7:a2:aa:
a6:e6:49:94:db:0a:2b:65:db:c1:4f:4a:8a:01:83:
81:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:13:7F:95:5A:1A:E9:AD:43:C6:4B:5F:BE:3E:E2:80:1D:AA:5A:11
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/qxN_lVoa6a1Dxktfvj7igB2qWhE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
a2:fa:b2:87:fa:f5:b7:ae:02:91:de:23:47:d1:98:29:c6:48:
98:4b:c0:22:70:68:78:db:24:d1:7a:22:b6:1a:0d:79:de:af:
ea:5b:c5:48:40:20:d6:d6:ca:08:85:32:ee:97:0f:aa:5c:1c:
41:71:d9:74:cd:75:9b:f0:f1:37:59:74:e7:63:66:ea:34:a0:
86:58:00:d7:5b:1a:b0:c8:3a:86:56:b0:d9:61:1e:cd:5c:05:
dd:b1:d1:60:46:48:37:23:8d:cc:ff:0e:4d:2c:ee:fb:db:69:
4d:56:d3:c0:26:b8:ef:15:96:97:13:4f:57:46:4c:17:20:db:
e1:0e:0a:4d:e5:e0:87:dc:7b:32:84:9f:8c:7e:83:4c:1b:73:
23:9a:78:ed:77:9a:d3:31:1d:21:98:01:0b:f4:23:16:53:22:
9b:fd:0a:1b:44:a7:86:2a:26:3c:4e:28:56:6e:45:9f:af:0c:
cc:90:66:f3:6b:19:17:fa:85:f5:c2:49:78:3c:a1:c1:6f:84:
8c:a5:57:7a:6c:78:b2:c9:7d:66:6c:93:4a:af:33:92:76:9c:
ed:7e:7e:5b:53:af:07:e9:85:89:cf:dd:78:a8:60:af:6d:f7:
92:20:9d:16:c6:0c:fe:84:ef:09:36:03:05:4f:91:c2:d0:6b:
37:d0:f8:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 23 05:25:20 2025 by rpki-client