Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/-XRDvYyYE-8UsTFDMAeAfILNa6s.roa
File: -XRDvYyYE-8UsTFDMAeAfILNa6s.roa (raw, json)
Hash identifier: NpgxAdP2y5nOttVJrkfcambrciPpl9mwGvWnF1MJlDY=
Subject key identifier: F9:74:43:BD:8C:98:13:EF:14:B1:31:43:30:07:80:7C:82:CD:6B:AB
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0EE8
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/-XRDvYyYE-8UsTFDMAeAfILNa6s.roa
Signing time: Mon 26 May 2025 23:08:46 +0000
ROA not before: Mon 26 May 2025 23:08:46 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3816 (0xee8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 26 23:08:46 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=F97443BD8C9813EF14B131433007807C82CD6BAB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e4:69:64:fd:5a:29:4d:db:13:af:d2:cd:ef:
33:47:f0:4e:f7:c3:a9:33:76:7e:d6:ee:75:98:4c:
a8:0c:fa:03:a2:33:eb:ce:57:c9:37:46:2d:09:5c:
3d:a5:d6:69:ad:60:10:3b:d6:0d:93:40:16:45:b9:
bc:6c:f2:12:40:ce:bb:44:7f:8a:60:59:56:88:e1:
7e:60:f9:05:9b:53:4e:3a:b8:4f:23:e7:11:1a:71:
3c:6c:6e:01:78:38:22:88:ae:97:90:c0:c0:07:1b:
06:39:4e:76:1f:45:83:91:53:0c:61:27:80:04:4b:
5f:12:3a:f1:79:25:a2:e7:76:5b:22:d4:81:7d:a4:
47:1b:32:45:cf:61:54:53:e3:ee:8b:b1:d6:ad:58:
e9:bb:c7:33:8b:a7:25:75:59:45:95:ca:b6:1a:7c:
cf:89:e4:83:bc:ec:ff:e2:f9:5c:40:f3:c8:77:7f:
e9:bb:5e:ee:a6:0d:6a:77:d8:76:ff:ca:af:00:c3:
79:e4:d0:5e:d1:be:ed:07:36:ee:3b:14:47:79:ab:
4f:9e:e1:87:c4:ed:cc:d6:f0:c0:2f:9f:2c:9b:79:
f7:d7:20:e6:a6:ec:e4:6c:8b:d9:f1:ce:7a:a3:cd:
4f:43:68:31:b3:42:69:bd:d6:17:df:51:18:ce:1b:
4a:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:74:43:BD:8C:98:13:EF:14:B1:31:43:30:07:80:7C:82:CD:6B:AB
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/-XRDvYyYE-8UsTFDMAeAfILNa6s.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
25:d1:90:14:7d:49:e8:3b:33:19:9e:b6:b8:72:ec:98:43:6d:
55:5f:8f:03:11:ce:4a:5e:65:58:98:ef:06:28:c8:a6:1d:39:
70:df:9a:1c:bb:8b:ec:8a:74:a8:e4:40:fb:83:fe:d7:73:84:
77:ea:b9:9d:29:4a:92:35:2a:5a:a8:dd:5f:13:f5:97:ed:3a:
24:54:2b:f2:2a:ff:33:53:2b:13:45:81:fc:4a:c0:15:2d:37:
56:28:c9:83:7f:60:0a:e1:3c:e1:36:ad:30:dc:0d:c1:e4:d0:
f2:06:21:12:f0:9b:36:8e:8d:e8:8a:a4:8d:29:b4:19:1d:ca:
5d:d1:7a:b6:f7:68:6c:e4:d0:2c:02:68:15:81:d8:40:f9:84:
c4:ed:3a:dd:3c:6f:86:6d:4d:33:27:8b:f7:91:09:47:30:c8:
d5:4a:b0:1a:3a:90:a2:d0:14:4e:8b:9b:60:af:0e:9e:53:e3:
30:c0:dc:12:5d:8c:c1:0a:91:1c:b0:2b:97:21:f1:56:4d:31:
9c:e1:2c:d6:f7:ed:fb:1a:48:04:ec:ba:dd:99:72:5a:5c:41:
f3:43:7a:e1:5b:f7:9f:66:50:1a:e0:14:ea:73:ae:23:c0:d5:
b0:c2:48:28:20:23:e1:78:57:a2:a0:3e:4f:89:9d:13:2e:47:
0f:b5:6c:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 01:50:53 2025 by rpki-client