Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/sOCVeqcSHEjjizMqF9b-C75Zhu8.roa
File: sOCVeqcSHEjjizMqF9b-C75Zhu8.roa (raw, json)
Hash identifier: 1X+Hszl2EnAakDTSqwD6Oaw4jwGAho4igGmsuGtvxDQ=
Subject key identifier: B0:E0:95:7A:A7:12:1C:48:E3:8B:33:2A:17:D6:FE:0B:BE:59:86:EF
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 18B4
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/sOCVeqcSHEjjizMqF9b-C75Zhu8.roa
Signing time: Mon 09 Jun 2025 00:39:34 +0000
ROA not before: Mon 09 Jun 2025 00:39:34 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6324 (0x18b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 9 00:39:34 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=B0E0957AA7121C48E38B332A17D6FE0BBE5986EF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:42:05:5c:ae:16:33:dc:68:81:c4:04:92:4d:
54:b6:cd:d3:ee:a1:4c:be:9e:04:5e:6e:79:4e:a8:
8f:2b:fc:25:36:1d:44:98:75:9e:c2:18:75:a9:79:
12:97:6b:61:ca:09:50:9c:f2:c1:a1:f7:dd:51:49:
9e:9b:74:f1:8a:d1:73:c2:17:57:27:2e:da:83:b2:
b8:db:86:d8:eb:a1:ce:2e:8e:a1:9c:9d:8c:eb:8a:
4e:81:ee:7b:ec:5c:f8:8c:61:57:cd:31:f7:45:65:
06:7a:85:27:a8:25:b5:27:f6:5f:7c:02:5a:27:d1:
b1:c2:ae:fc:f9:7f:f3:a6:95:f7:d3:6b:50:66:2f:
b0:b0:80:49:b9:89:0a:4c:2a:0f:fe:e7:5b:64:27:
99:f5:6f:57:d5:bb:f2:60:64:68:62:01:2a:15:6d:
af:e0:c5:01:38:04:fd:fc:94:18:db:08:75:de:83:
ec:52:81:93:33:ca:6e:96:c1:7d:93:e0:8c:c4:9d:
55:fb:7f:f6:a2:d5:69:5d:f2:95:c4:58:49:e4:a9:
67:c6:d2:79:cc:61:73:e5:a0:bf:60:9d:11:fb:e3:
55:df:9e:80:08:d6:51:31:83:85:94:f5:71:96:a8:
b3:e8:05:d8:ba:73:7e:9f:e7:41:81:63:d0:7b:66:
ea:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:E0:95:7A:A7:12:1C:48:E3:8B:33:2A:17:D6:FE:0B:BE:59:86:EF
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/sOCVeqcSHEjjizMqF9b-C75Zhu8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
5f:eb:24:79:cf:14:6b:51:40:a5:51:e9:e4:45:8e:37:a3:6b:
7e:2e:d1:3c:5c:c7:c2:ae:ea:60:2d:3f:47:b0:2e:36:cf:65:
59:62:66:82:e7:bf:69:68:21:36:3a:29:88:40:fc:dd:3f:0d:
ae:76:51:ff:fd:c3:1e:e1:f7:b6:27:b0:b4:f3:0d:40:1d:42:
25:8e:be:72:90:18:06:82:8a:d6:47:62:29:b4:96:f4:50:a0:
0d:ed:ae:3c:99:a3:69:9d:ae:17:56:98:11:ab:ee:92:a2:46:
a8:c8:ac:41:25:b8:f7:4e:04:e0:8d:b3:c0:3b:75:d3:e2:ae:
ce:a6:08:eb:b3:08:ed:7e:6d:26:70:82:26:40:7a:51:67:7c:
24:e0:7e:7f:96:94:ba:e7:e6:16:25:46:3f:ad:2f:32:1b:03:
3d:64:3b:9d:f6:03:83:b9:53:97:23:bb:ee:24:62:43:bf:06:
83:0d:3d:14:60:59:bc:50:0f:c7:b2:23:6e:6f:12:e0:13:53:
41:a1:bc:f1:71:41:4c:d3:67:b7:b7:83:13:39:08:12:7a:23:
23:58:43:2e:89:2a:4b:43:69:66:d6:e2:f1:4f:21:45:37:5a:
ed:1c:b5:33:a8:b5:6e:97:3c:93:06:de:5a:b6:8b:45:b2:ad:
ad:5a:ae:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 12:32:20 2025 by rpki-client