Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/O4Evlh8_cfRKcY1hER4AkLqBbHo.roa
File: O4Evlh8_cfRKcY1hER4AkLqBbHo.roa (raw, json)
Hash identifier: bBN58J17Fvl5TY1/9NULCDRlKuE4xB3tgPOuvV23KT8=
Subject key identifier: 3B:81:2F:96:1F:3F:71:F4:4A:71:8D:61:11:1E:00:90:BA:81:6C:7A
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 2FF8
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/O4Evlh8_cfRKcY1hER4AkLqBbHo.roa
Signing time: Tue 21 Oct 2025 13:34:43 +0000
ROA not before: Tue 21 Oct 2025 13:34:43 +0000
ROA not after: Mon 03 Aug 2026 08:44:40 +0000
asID: 9391
IP address blocks: 124.29.0.0/17 maxlen: 17
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12280 (0x2ff8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Oct 21 13:34:43 2025 GMT
Not After : Aug 3 08:44:40 2026 GMT
Subject: CN=3B812F961F3F71F44A718D61111E0090BA816C7A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:4d:8f:91:4e:8d:51:1d:08:ff:98:fe:ca:86:
d2:cc:b0:ff:d2:49:b1:86:fc:b3:b6:6b:90:8a:33:
4f:3a:39:51:9f:1a:94:d2:a6:2c:30:aa:68:27:a2:
b2:7c:52:8d:e5:25:7b:33:78:68:a1:19:7f:ca:d8:
e6:80:a5:e5:f7:89:94:da:4d:bd:b9:05:ac:3f:dd:
8b:98:20:68:58:ea:ae:bc:ec:f8:a9:ad:21:46:ce:
de:49:f0:47:dd:46:21:5a:9f:c2:30:1d:31:98:61:
0f:ab:1c:82:1d:1d:5d:a7:71:39:43:1e:aa:f7:f2:
94:3c:a4:cd:c2:33:66:e7:d3:87:d8:88:f4:6c:92:
8c:9c:c4:c7:23:4f:3d:33:ae:b5:4e:9d:01:43:0b:
ba:ae:38:cd:c7:5f:09:88:72:bc:74:bb:65:be:a1:
40:5b:69:35:7c:98:06:df:7a:8a:1e:19:22:07:3e:
35:b6:26:59:f3:18:d5:64:2a:92:0a:cf:5e:b2:21:
df:a2:4a:79:a9:7c:5a:96:51:79:d4:f9:de:e5:1d:
b3:0a:4e:14:94:62:7a:e9:3e:b3:d0:2b:bf:6c:5d:
e4:70:26:2a:b2:a6:37:62:04:74:c1:97:a8:ae:87:
92:87:c1:fd:41:cc:08:b9:d0:e8:64:dd:d9:1f:43:
22:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:81:2F:96:1F:3F:71:F4:4A:71:8D:61:11:1E:00:90:BA:81:6C:7A
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/O4Evlh8_cfRKcY1hER4AkLqBbHo.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
124.29.0.0/17
Signature Algorithm: sha256WithRSAEncryption
83:b5:28:a1:da:47:94:26:38:55:33:57:2c:d7:99:6f:10:2f:
45:b4:ea:b5:07:d4:2c:17:22:5d:01:a5:f7:46:7d:2a:e4:78:
3c:58:75:ad:d7:d3:4b:16:17:82:83:6e:07:41:f5:a9:f3:fd:
54:79:ec:3a:32:bd:c8:d5:d6:df:6d:3b:ae:df:bc:de:ef:5f:
15:d6:f2:cb:9d:74:22:f2:3e:88:4c:d0:2e:a4:80:81:8e:9e:
73:f1:34:cd:55:34:30:bf:c6:50:df:e3:af:54:43:16:24:b3:
aa:8e:eb:9e:12:70:bc:44:58:fc:df:89:33:c8:33:88:50:8c:
95:3f:f6:df:b9:4f:c7:f4:f6:8b:68:4e:b4:a7:e0:e0:c8:a1:
71:85:20:ab:97:48:78:65:32:0e:3a:8e:7a:88:1e:0c:ec:73:
7c:72:fa:98:d7:be:f5:e1:d5:4f:a0:e3:3d:48:7c:c8:5b:f9:
4c:79:8b:77:19:12:7e:e3:ca:43:1a:7e:c7:62:9a:b8:4d:eb:
61:ae:73:5c:f6:a2:96:a6:01:28:0d:c2:83:a4:71:28:a9:77:
2f:17:b5:65:55:15:05:97:3b:df:79:db:a0:95:84:33:f5:6f:
04:b8:69:10:62:ba:d2:ba:09:04:94:c8:fc:08:9b:1e:7e:77:
5f:ab:6f:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 23:36:23 2025 by rpki-client