Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/t9wOwk-YMZaltco79Grfgg4AlUs.roa
File: t9wOwk-YMZaltco79Grfgg4AlUs.roa (raw, json)
Hash identifier: ACYEtOo0NXageVWK083yQA1WB6eR11OHoVCKEVwvjY4=
Subject key identifier: B7:DC:0E:C2:4F:98:31:96:A5:B5:CA:3B:F4:6A:DF:82:0E:00:95:4B
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1B5C
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/t9wOwk-YMZaltco79Grfgg4AlUs.roa
Signing time: Thu 12 Jun 2025 13:39:52 +0000
ROA not before: Thu 12 Jun 2025 13:39:52 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7004 (0x1b5c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 12 13:39:52 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=B7DC0EC24F983196A5B5CA3BF46ADF820E00954B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:60:18:d4:a5:5a:92:f7:95:40:a5:7c:13:b7:
5a:ba:d0:85:6b:4f:83:c1:da:cb:1d:3b:82:b5:c1:
50:36:31:da:72:49:4a:f3:16:28:30:21:89:6e:0e:
12:49:5d:1f:af:f5:93:4f:64:32:e6:e1:be:d2:7a:
0c:fa:0b:13:13:73:aa:2e:fc:86:fc:c7:af:5d:1a:
8a:00:83:fb:85:ae:98:c5:a6:b3:bb:44:c5:4b:fa:
04:b3:2e:cb:4c:7f:19:2d:eb:6f:7d:fc:f1:eb:88:
a8:72:32:b5:a0:60:81:9c:93:f8:ac:ae:45:c5:8b:
1b:3a:ce:c9:b8:cc:56:30:0d:0b:ea:1c:9d:2c:59:
ef:7d:66:71:9b:b2:02:eb:1f:66:22:0f:4e:91:ae:
dd:4b:fa:dd:4c:fa:a0:f2:1b:fd:e6:29:9f:af:ad:
88:70:20:9b:20:ab:76:0c:e0:9d:85:36:e0:68:28:
1c:d9:0b:0f:74:6a:0d:19:54:19:e7:c4:3a:88:81:
10:99:62:e3:f7:d8:e4:0e:59:14:d1:fc:30:42:88:
02:62:fd:68:fd:a3:d9:ea:7b:d5:1f:64:c1:18:3e:
25:cc:75:c0:18:54:92:fc:ce:ae:20:6e:fc:58:2f:
6d:79:8e:05:ff:39:2c:92:38:e3:6e:95:fc:8e:c1:
b4:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:DC:0E:C2:4F:98:31:96:A5:B5:CA:3B:F4:6A:DF:82:0E:00:95:4B
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/t9wOwk-YMZaltco79Grfgg4AlUs.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
60:ee:1f:a7:25:fc:04:99:8c:db:85:ae:0e:50:57:6d:b6:7a:
a8:ef:1a:a9:bb:b7:de:6f:f8:ed:3e:2a:64:5f:b6:7a:d5:bf:
b5:b3:45:ff:93:87:f5:ad:52:2d:f2:20:23:76:39:da:7b:0c:
6b:91:78:32:03:73:f9:a1:e9:e1:50:67:8e:aa:2f:2b:10:3a:
76:d0:d8:d1:f6:e9:0a:b6:8f:55:cf:b6:21:5a:ac:b1:6a:ee:
19:24:63:81:b3:4e:74:99:a7:45:99:0b:94:7e:90:f2:af:7e:
34:4e:51:cc:3b:e7:a0:d3:28:d7:8c:a6:bd:4e:55:2c:a5:b9:
e1:bf:e2:89:a7:b0:52:a2:16:37:7c:41:d6:b4:7f:5d:db:88:
59:b7:9e:44:f5:50:4e:ce:9c:dc:84:1c:61:d2:5a:8e:59:a6:
cf:fa:e8:b7:ac:f5:dd:59:e7:f0:71:e4:88:65:41:fd:7b:4b:
5e:fd:74:d2:10:d2:74:09:48:3c:5e:a5:1b:ee:83:a5:95:c5:
3a:05:ca:47:4f:98:02:d6:7c:3d:02:e2:e0:03:1c:0b:3c:d2:
df:f2:41:7c:a8:e7:cb:5b:9a:15:18:9b:70:f2:87:38:48:d9:
d0:fe:e9:3d:75:dc:bc:e2:24:55:22:2d:0e:2f:0f:00:78:cb:
27:ce:98:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 03:58:05 2025 by rpki-client