Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/vNR2SG0zU-Z9K1-u9yN2pbeqjbw.roa
File: vNR2SG0zU-Z9K1-u9yN2pbeqjbw.roa (raw, json)
Hash identifier: WEIgc7aenaYv3FpBTV9aURjcu7J/lK8xKzlAWAmHnnw=
Subject key identifier: BC:D4:76:48:6D:33:53:E6:7D:2B:5F:AE:F7:23:76:A5:B7:AA:8D:BC
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 19E0
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/vNR2SG0zU-Z9K1-u9yN2pbeqjbw.roa
Signing time: Tue 10 Jun 2025 14:09:51 +0000
ROA not before: Tue 10 Jun 2025 14:09:51 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6624 (0x19e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 10 14:09:51 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=BCD476486D3353E67D2B5FAEF72376A5B7AA8DBC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:73:de:b7:a1:74:31:81:32:64:87:c7:f5:9d:
59:82:04:7c:fd:19:4a:1a:e8:77:a4:2f:6b:e7:96:
51:b8:7c:b4:5e:e1:07:6a:ad:76:be:b2:f7:26:c7:
61:95:ed:f0:57:73:a3:0f:e9:5e:e9:f9:dd:3d:06:
1d:da:74:09:3d:39:e5:9c:a8:bd:81:21:5a:c5:01:
31:22:1c:5e:b9:18:85:c3:d3:16:eb:dc:07:41:c7:
22:f0:3c:01:a3:0a:59:b1:1c:b0:66:78:5e:3f:72:
73:66:a2:d8:9b:e0:dd:eb:a1:24:71:8c:39:48:6f:
81:0e:d9:62:d6:06:d3:1f:40:b1:87:b0:b7:a3:c1:
7a:f8:ab:a3:b2:07:3e:db:cf:62:1c:24:ed:ea:36:
6b:ad:a3:b8:93:d4:81:9e:c3:5f:e2:e0:f4:a1:d1:
8d:be:19:7c:70:68:2c:a3:43:4a:4d:c6:43:5f:cc:
93:a6:c9:31:2d:15:e6:f6:32:5e:5b:73:b4:e1:c7:
70:a8:5d:9d:d9:75:0f:4f:2c:24:fe:dc:cf:7b:4c:
91:43:c7:38:07:b8:0b:ea:f7:93:26:19:b7:cb:fc:
d8:da:83:14:59:01:b9:fc:d9:c7:bb:2b:dc:a7:2f:
bf:f6:e4:e3:78:a7:0f:f2:9b:6c:e8:83:63:90:3a:
d2:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:D4:76:48:6D:33:53:E6:7D:2B:5F:AE:F7:23:76:A5:B7:AA:8D:BC
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/vNR2SG0zU-Z9K1-u9yN2pbeqjbw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
a4:c1:e1:eb:ab:75:81:b2:5d:89:92:a7:c4:3e:27:81:90:72:
59:f3:3c:54:3d:cc:1a:e4:27:73:28:52:46:d3:87:1e:eb:06:
9b:90:c1:85:f7:35:58:b0:c5:d6:bd:1f:d2:4a:4d:ba:0f:90:
2c:a2:9b:9c:93:54:45:d9:82:c6:f0:32:21:4a:80:20:2e:79:
ad:e8:d1:53:3c:c0:5e:e6:f8:35:d0:cb:11:2d:35:50:f4:16:
6a:65:f5:d7:b7:a2:c1:23:36:ff:d2:31:f2:c6:15:e5:db:0d:
63:a4:9c:43:f1:c2:12:a4:2f:c3:5a:d2:b3:cc:5c:95:26:bf:
ce:bc:d8:a2:d5:6e:71:ad:64:7f:2a:4d:a1:b2:f3:4f:53:bf:
c8:85:fb:5d:a3:45:41:66:2d:4d:0d:2f:fb:2d:be:2f:31:6f:
3b:6f:7f:03:dc:00:3e:98:a8:d6:da:fe:f2:31:09:3e:c8:de:
c6:0e:af:a5:ac:ca:f6:42:69:28:46:b4:1f:38:c2:c6:cb:42:
63:8d:05:1b:2c:96:df:7f:fd:9f:dd:2e:69:63:3a:9f:cf:7b:
4b:b5:ac:4e:78:ca:dc:42:9a:5b:14:16:af:22:72:a1:0a:9b:
ab:f5:9d:42:ed:c5:0e:2e:f1:e5:2d:42:21:33:0a:15:87:24:
62:58:ce:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 12:21:13 2025 by rpki-client