Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/mnCQpJKwp8A0024ulkGmOmmHQnY.roa
File: mnCQpJKwp8A0024ulkGmOmmHQnY.roa (raw, json)
Hash identifier: hOJtvSa1UZbSuo4Kr4JOZp+qg0Fymu8FmWeMC8McMq0=
Subject key identifier: 9A:70:90:A4:92:B0:A7:C0:34:D3:6E:2E:96:41:A6:3A:69:87:42:76
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 01C0
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/mnCQpJKwp8A0024ulkGmOmmHQnY.roa
Signing time: Fri 09 May 2025 10:07:47 +0000
ROA not before: Fri 09 May 2025 10:07:47 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 448 (0x1c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 9 10:07:47 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=9A7090A492B0A7C034D36E2E9641A63A69874276
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:92:6c:ca:23:33:21:97:8a:88:b3:fd:79:c0:
0a:63:ca:26:08:d7:60:69:2f:78:50:34:84:4f:0c:
58:25:27:0f:59:74:f3:fe:63:e2:08:8a:06:05:5c:
4d:c2:4a:fc:c7:83:3e:b7:31:f6:3c:fb:4f:fd:00:
18:dc:2e:27:00:ea:cb:e1:8a:ec:fe:76:5f:1d:1b:
a4:f0:54:05:a3:87:0a:dc:0d:60:62:22:3f:88:de:
b0:43:52:c6:06:d3:82:f6:db:41:b2:08:a8:84:52:
78:02:24:78:96:6b:ea:4f:d7:b4:95:03:92:57:5b:
99:76:ea:78:d1:6d:3c:29:2c:97:0a:b8:ea:72:16:
b9:23:61:cc:24:44:b3:9d:12:ea:0f:5e:db:ef:a9:
2d:26:12:d3:35:40:6d:ff:4a:93:b2:b6:84:9a:db:
b2:21:d7:b9:10:11:a7:43:25:59:da:d2:35:32:d4:
c7:8f:40:ae:b0:53:fa:24:19:49:13:60:b0:f4:70:
06:39:a1:64:da:82:7c:6b:ef:d7:d0:61:a3:41:d0:
76:f8:a9:b3:45:f1:42:3b:3d:8b:a9:5e:9a:45:88:
c1:60:a2:16:70:18:ee:bd:5e:9f:4c:68:2f:8b:f7:
e8:91:64:65:e1:b1:71:21:60:5e:90:44:5a:6a:65:
64:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:70:90:A4:92:B0:A7:C0:34:D3:6E:2E:96:41:A6:3A:69:87:42:76
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/mnCQpJKwp8A0024ulkGmOmmHQnY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
0a:77:62:b1:b8:28:86:28:40:a0:45:6d:39:8b:23:6f:d0:47:
9a:c6:f7:bc:c9:b6:dc:f0:46:e7:f2:07:9e:05:44:c5:bf:1b:
27:03:a0:d2:6b:ed:f7:3f:ce:ad:a0:ec:60:b1:4e:ec:bd:7d:
43:4c:f5:5f:48:e2:ca:cd:0b:58:8d:0e:4b:80:53:6c:3e:72:
72:c2:4f:a7:04:13:30:d2:9e:bd:0d:0a:c9:a1:57:ca:bb:79:
0a:de:97:98:41:12:42:70:66:69:13:fc:17:45:72:a2:f3:b3:
ba:8a:3b:81:19:c0:2a:87:c8:15:f8:73:f8:e2:ed:52:b9:31:
2f:f5:d9:10:db:1e:ff:9d:2e:44:ce:a3:ea:6f:93:ea:ad:f1:
d1:bd:44:b3:11:e7:7c:25:ea:c2:d4:e7:68:9b:e6:fd:57:c1:
8a:dd:33:c2:3b:2a:3e:43:70:48:da:e1:57:b1:81:79:11:a7:
53:ee:af:5c:0a:81:16:c7:90:57:6b:ae:b3:6b:9b:3c:4e:b4:
63:17:22:c7:ad:bb:db:43:04:07:df:8e:78:4f:a9:b8:23:34:
10:71:4a:e5:98:d6:78:0e:be:3f:67:de:12:79:91:15:20:f4:
c5:44:c0:99:52:51:3d:78:ad:75:3a:22:88:c3:65:ae:7a:e3:
f7:61:e5:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 03:50:50 2025 by rpki-client