Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/s00BLjBHyheGRVSlEYcRItix6us.roa
File: s00BLjBHyheGRVSlEYcRItix6us.roa (raw, json)
Hash identifier: jbGAFag0TZ4VxtUDfPFHqekjjAj7aENREmbTlPB1/UU=
Subject key identifier: B3:4D:01:2E:30:47:CA:17:86:45:54:A5:11:87:11:22:D8:B1:EA:EB
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1D08
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/s00BLjBHyheGRVSlEYcRItix6us.roa
Signing time: Sat 14 Jun 2025 19:10:06 +0000
ROA not before: Sat 14 Jun 2025 19:10:06 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7432 (0x1d08)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 14 19:10:06 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=B34D012E3047CA17864554A511871122D8B1EAEB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:36:f7:8b:65:54:58:c0:9b:fd:c4:86:0c:ef:
c6:ae:ff:e4:8a:07:8b:60:f7:c1:b1:88:93:ae:e2:
c6:38:4d:6f:71:fd:14:3c:bd:cb:cd:fa:a9:7f:22:
e6:9a:47:d1:6c:0b:5b:89:50:9b:f1:d4:0e:15:4f:
1c:b6:83:ad:2f:79:cd:bd:22:3b:28:10:f6:e0:5d:
26:66:fa:f4:fb:db:7d:85:ed:91:e8:45:a6:20:58:
f8:5a:b3:86:c7:03:aa:a8:9a:2e:dd:dd:ff:9d:86:
c8:6c:9b:51:42:b6:0c:c7:7d:43:51:4d:38:24:3a:
91:8f:c4:36:86:af:9e:0b:44:63:9d:43:32:c6:55:
6f:f5:18:23:2e:ac:3d:7c:0e:52:15:b8:69:e5:95:
f7:3e:0a:f8:5e:df:1d:06:2f:4e:bb:94:a3:4c:af:
e5:29:9b:e7:09:d8:b3:cd:bf:52:07:45:76:ae:56:
d4:4b:d1:be:69:38:f8:a6:c0:a9:81:ba:d8:7c:4d:
bd:1a:85:66:20:b5:5b:b0:f7:05:23:ea:b6:4a:d8:
0a:4a:e8:a7:38:3a:45:f7:04:54:80:02:5f:81:8b:
c4:b2:5d:e8:21:bb:62:97:7a:0d:02:81:f8:5f:1c:
a5:ed:45:58:7a:cc:33:50:a8:d1:fa:45:cd:65:87:
05:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:4D:01:2E:30:47:CA:17:86:45:54:A5:11:87:11:22:D8:B1:EA:EB
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/s00BLjBHyheGRVSlEYcRItix6us.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
68:b8:fe:38:3d:cd:05:13:44:82:3f:0a:f0:d1:47:55:a9:e6:
21:a0:c9:23:0e:e8:52:0a:e6:a2:21:7d:40:82:fe:00:6f:8e:
6b:24:5a:e6:73:4f:f5:7e:cd:27:d7:80:4e:45:83:cf:9d:67:
8d:7d:7d:0d:b7:77:2e:8a:09:94:3c:c7:79:43:b4:10:28:2e:
94:3b:ad:81:8e:dd:9c:ec:e2:36:c7:d2:df:5d:f5:3b:4e:ac:
bb:2e:0e:e7:bd:08:04:37:da:e1:8e:50:84:4c:89:ef:9e:fa:
91:c0:2f:3b:d6:ef:a0:ea:b2:70:11:41:0a:45:d2:db:f1:99:
49:79:c9:4a:9f:b0:e2:89:25:41:e0:a7:d1:26:07:2b:f0:7f:
07:d1:f7:8a:ba:f0:e6:25:c4:a3:06:cd:8a:e8:58:11:93:3d:
b0:bd:16:f0:e0:9a:fa:a7:53:92:aa:fb:91:77:f3:f2:2b:fa:
8d:65:f9:61:69:bf:c7:a8:18:bc:ef:f7:82:46:b7:d9:f7:e0:
c8:8b:1f:40:34:38:60:35:aa:65:35:e3:34:67:ca:58:76:30:
d6:76:ff:70:35:19:11:9e:3f:d1:b4:49:34:3a:5d:ff:6c:66:
e8:82:9e:be:94:f5:33:fd:55:45:b1:2b:3f:e6:1c:3e:fd:da:
86:2d:aa:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 07:16:13 2025 by rpki-client