Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/rxIeWUeYHXsC8HyIKFNi32eFWoU.roa
File: rxIeWUeYHXsC8HyIKFNi32eFWoU.roa (raw, json)
Hash identifier: nR39JH3pq6wtnyXohWsCL3Q1wZ3SijVgtQR7f0qCY34=
Subject key identifier: AF:12:1E:59:47:98:1D:7B:02:F0:7C:88:28:53:62:DF:67:85:5A:85
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1528
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/rxIeWUeYHXsC8HyIKFNi32eFWoU.roa
Signing time: Wed 04 Jun 2025 07:09:59 +0000
ROA not before: Wed 04 Jun 2025 07:09:59 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5416 (0x1528)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 4 07:09:59 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=AF121E5947981D7B02F07C88285362DF67855A85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:61:cd:81:33:87:fb:ca:bf:7d:8d:27:37:3c:
28:b0:42:5e:b2:e6:8d:e3:11:fd:d7:8c:44:57:7b:
1e:12:89:a2:3c:39:26:6f:8e:a8:b7:01:f4:1d:d9:
9f:4b:d4:2c:73:5b:a5:4a:ba:24:fe:d7:05:1f:6f:
70:fd:55:a8:20:c0:9b:94:33:ca:d4:a4:de:ec:33:
e7:01:3d:5c:20:65:ce:18:20:7f:bf:c8:20:68:a1:
df:45:0b:7a:87:61:19:f1:5a:94:0f:95:6b:ad:47:
53:c1:2a:43:f6:fa:97:d7:40:00:93:17:a7:73:1c:
03:05:55:0e:70:8a:1a:a2:ef:98:ba:66:ae:57:ce:
00:3d:29:58:a6:28:52:3b:e0:c5:74:00:2c:78:5d:
e9:c2:75:6f:10:9d:46:44:c1:b3:4a:4e:38:6b:66:
60:e5:9d:86:65:12:b6:0d:3e:86:bb:cb:63:00:5b:
a6:d8:19:c4:fa:60:18:a7:8d:a7:90:66:e4:58:aa:
ac:71:12:c5:ea:0a:55:20:e0:b0:b3:a3:c1:67:61:
ec:a0:fd:4c:2e:1f:69:ac:f2:6b:8e:2e:50:b0:44:
6c:76:29:0f:a3:04:f9:ef:08:7a:57:76:5d:38:56:
5a:69:e6:28:f5:07:8a:35:33:34:50:b0:1e:c2:29:
04:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:12:1E:59:47:98:1D:7B:02:F0:7C:88:28:53:62:DF:67:85:5A:85
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/rxIeWUeYHXsC8HyIKFNi32eFWoU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
af:3a:42:7b:45:e2:a6:44:3b:3e:99:e7:57:f2:67:16:b8:7d:
a5:30:d6:88:c7:4a:4d:b8:b6:9e:2c:3f:ca:84:3e:32:f4:e7:
ac:d7:dd:dd:6f:10:39:2e:99:6c:43:dd:eb:98:85:2a:f3:18:
6d:cf:86:f5:5b:ff:38:c1:1e:d1:5d:1f:5a:48:b5:ed:17:64:
5b:43:45:ec:0f:f0:9d:40:49:6a:0e:40:a7:cb:59:ef:ce:c2:
c9:e0:69:d1:6b:81:13:bb:a8:7e:38:c6:a4:aa:42:b1:ec:06:
33:cc:df:33:4c:e0:2e:21:1b:5b:d9:7f:4e:25:53:fd:10:41:
99:43:3f:fb:78:66:12:93:78:cb:49:ef:9d:2a:4a:72:c9:43:
9c:f5:ba:e7:ca:6e:af:17:8a:4c:5b:52:4c:72:09:4c:2d:76:
ac:f4:c8:3f:79:5a:19:44:aa:36:4a:0b:34:8c:6d:cb:04:31:
66:37:64:40:31:0a:50:71:ba:f5:69:86:f2:ad:44:f1:ec:35:
ff:70:e5:aa:8f:8e:7d:5e:56:08:ff:0c:3c:9e:7a:2e:8e:cc:
bd:69:38:d1:68:b3:03:0a:4d:18:9d:dd:43:33:48:f8:27:59:
39:8b:ab:d8:5d:6d:a2:50:df:f6:f5:63:e3:f7:b1:46:c2:d9:
0c:59:e5:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 06:25:08 2025 by rpki-client