Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/traUogdZae_E8xFzqWsubJOjNkU.roa
File: traUogdZae_E8xFzqWsubJOjNkU.roa (raw, json)
Hash identifier: EZFLG7GgiWiuXWQhmft/24yS/AJMoeRwypnXJsPD6pM=
Subject key identifier: B6:B6:94:A2:07:59:69:EF:C4:F3:11:73:A9:6B:2E:6C:93:A3:36:45
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 19BC
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/traUogdZae_E8xFzqWsubJOjNkU.roa
Signing time: Tue 10 Jun 2025 09:39:46 +0000
ROA not before: Tue 10 Jun 2025 09:39:46 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6588 (0x19bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 10 09:39:46 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=B6B694A2075969EFC4F31173A96B2E6C93A33645
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b9:e6:01:92:b9:81:93:d7:b6:b6:d5:83:38:
bd:22:78:3d:f9:a3:b4:98:3c:e8:7f:7c:7a:80:9d:
c1:0e:ed:04:0f:d6:e2:9e:43:51:a9:d9:34:14:9f:
5d:1a:64:3a:1d:95:30:16:e7:08:d6:14:fc:d7:1f:
bd:10:cc:89:8b:fe:f1:a2:8c:0f:11:da:6e:71:34:
b4:23:5c:df:2b:4e:67:cb:3d:c7:f6:4a:f5:ad:ef:
fb:1c:6d:df:c6:a9:78:e0:1a:96:ea:4f:ca:fb:7d:
86:65:20:59:e3:ad:ea:67:43:49:f5:eb:90:18:27:
28:a2:5f:dd:68:32:13:5a:cb:9f:a3:15:6f:f7:ee:
f2:a1:f3:64:90:91:f9:6c:6f:2f:b3:dd:73:b2:05:
e9:ce:3c:72:71:9a:67:88:c6:a3:20:ef:5d:a4:27:
ca:66:c0:50:eb:65:12:e6:a5:68:60:e3:ba:55:0f:
a6:8b:f7:2e:5a:d5:f6:d8:01:bb:60:99:46:88:86:
9d:0e:a5:55:b5:11:74:6b:23:e0:26:9a:63:c6:f9:
c7:e8:ac:d8:ca:81:5a:2a:a9:1f:54:29:fe:96:c5:
9a:1f:9b:ff:ba:13:c1:17:e0:b7:11:bd:f1:5a:84:
a6:3b:25:3f:6b:37:7d:56:37:dd:b4:84:61:ab:05:
68:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:B6:94:A2:07:59:69:EF:C4:F3:11:73:A9:6B:2E:6C:93:A3:36:45
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/traUogdZae_E8xFzqWsubJOjNkU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
11:0d:54:db:4f:5a:02:0f:a8:e4:a2:2c:f5:5a:7c:c3:06:43:
89:a9:a5:7d:74:75:6c:d7:9a:91:4f:78:77:e2:20:43:d0:30:
28:84:26:3b:96:22:63:ba:dd:f4:3e:ab:6f:f0:69:af:c3:ad:
d0:b1:ae:54:ea:92:0d:11:f5:55:27:1d:fc:88:18:68:db:f9:
91:e2:4e:a3:03:33:ef:71:c6:90:cc:87:75:20:05:df:b8:99:
f6:b4:41:12:1e:f0:09:64:ba:20:9a:48:f5:49:36:51:a7:35:
b9:ca:24:33:61:30:2d:d2:67:89:1d:9b:a2:34:ac:26:fd:ed:
19:50:ab:82:6f:b4:84:93:8e:d7:dc:c3:40:64:cc:07:1d:a3:
49:65:de:b5:c3:f7:4d:fc:07:ac:a3:71:f1:24:43:50:b6:3d:
82:ef:96:24:32:8b:08:ef:98:73:9a:61:8e:1d:4d:63:2d:84:
bb:d8:5e:2e:f0:70:d7:ab:51:24:34:66:ef:7e:6e:ed:1c:80:
10:61:e7:85:77:55:db:1b:8b:24:04:45:79:3e:85:05:9a:13:
5c:0f:20:a7:9f:8e:14:cf:3c:c0:8a:1e:a8:e2:5a:66:0c:cf:
c4:2f:d9:72:3a:21:25:9e:8d:8c:be:bd:01:3c:89:d2:2d:37:
d9:45:eb:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 20:41:21 2025 by rpki-client