Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/xQ08oxtxdv65S3neVVSzTUR3Qbk.roa
File: xQ08oxtxdv65S3neVVSzTUR3Qbk.roa (raw, json)
Hash identifier: lqiVp4qvo7/mwbGp77HEEM04NxXe6i6j0fdr5gTn0+U=
Subject key identifier: C5:0D:3C:A3:1B:71:76:FE:B9:4B:79:DE:55:54:B3:4D:44:77:41:B9
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 19C8
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/xQ08oxtxdv65S3neVVSzTUR3Qbk.roa
Signing time: Tue 10 Jun 2025 11:09:42 +0000
ROA not before: Tue 10 Jun 2025 11:09:42 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6600 (0x19c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 10 11:09:42 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=C50D3CA31B7176FEB94B79DE5554B34D447741B9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:3f:eb:50:58:bc:cc:8a:ac:ac:f3:b9:3e:70:
01:26:cd:f1:29:6b:9e:f9:de:e5:26:11:bf:a0:c0:
51:3e:58:94:0e:07:07:bc:b6:22:0b:00:8e:60:39:
42:2a:3b:c6:ff:28:92:5c:7d:80:6b:d5:00:2f:34:
a7:9b:ba:85:0c:c7:3f:f8:49:ed:70:24:ac:c8:2d:
96:5f:d7:af:7d:75:f4:2c:8c:07:6b:3a:c0:e3:19:
8e:9b:27:8d:46:d1:2e:d5:6c:5d:96:80:ce:66:42:
d6:60:c6:86:45:c8:fe:ff:01:58:8f:7f:43:02:c8:
bd:dd:4b:42:61:8a:5e:16:ff:17:80:9c:9e:75:ad:
53:66:ab:0a:88:d0:24:db:88:f0:fb:26:c9:de:73:
20:68:73:cc:27:76:ea:15:51:fb:df:11:3f:cf:1e:
d4:80:91:54:14:cd:b5:a4:1a:ab:4f:ad:c9:29:f5:
c8:8f:07:15:df:e2:a4:52:9d:f5:44:25:af:f4:0c:
57:e0:d1:44:d1:88:33:09:12:ac:9a:4f:41:54:2a:
13:dc:1f:37:bc:aa:07:91:11:9d:83:53:77:d9:39:
45:49:4e:a5:13:9a:2c:e5:12:62:11:f6:b5:f8:cd:
af:cc:4d:b9:fe:4e:4f:a0:31:86:a3:c2:c5:df:8c:
d3:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:0D:3C:A3:1B:71:76:FE:B9:4B:79:DE:55:54:B3:4D:44:77:41:B9
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/xQ08oxtxdv65S3neVVSzTUR3Qbk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
42:90:57:92:7c:3c:2f:48:e9:8e:72:dd:0f:c9:13:d7:bb:75:
28:3e:31:f1:9f:61:36:c2:48:2c:e3:1f:8a:78:d6:25:d9:c5:
27:4e:8e:a8:f1:f3:61:90:97:30:83:fe:8b:70:2b:06:fd:df:
46:cc:51:69:50:50:e4:13:41:e1:29:7b:39:b6:50:95:c0:52:
99:07:f5:7f:05:9f:90:0b:de:40:85:2a:81:be:2c:36:08:25:
53:b8:ef:51:8d:5b:a7:9a:76:03:77:17:d2:71:a1:a7:e8:fb:
0a:65:62:dc:de:cc:93:b5:09:42:55:94:74:49:2b:b0:04:f0:
43:f7:8d:3c:0d:84:39:da:9a:df:e6:71:40:d3:a2:64:f4:af:
df:9f:16:f6:1b:da:a0:a1:e3:b3:a4:a1:25:94:90:39:24:3c:
09:1d:cf:f0:5e:ec:43:74:f8:55:f4:07:6a:13:00:a4:d2:3d:
62:13:85:85:49:7e:fa:65:a4:92:26:2e:ae:3f:ff:e2:35:cc:
0a:20:8f:1b:49:10:69:a9:0b:4d:90:d3:89:34:82:b8:1c:b8:
da:9a:f3:c3:1f:54:32:40:54:b1:8f:f1:cf:07:41:cc:d0:9c:
a1:d9:50:6e:98:71:0f:73:3a:36:12:7d:a5:1b:2a:49:78:95:
1c:48:48:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 16:52:58 2025 by rpki-client