Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/0_s7mWrlPRhEVGmN8ga6V2JzxDc.roa
File: 0_s7mWrlPRhEVGmN8ga6V2JzxDc.roa (raw, json)
Hash identifier: dUD6tC4E250xhVZQVhhpX79ZhDxb+pORyTQUDcW4OMc=
Subject key identifier: D3:FB:3B:99:6A:E5:3D:18:44:54:69:8D:F2:06:BA:57:62:73:C4:37
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0230
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/0_s7mWrlPRhEVGmN8ga6V2JzxDc.roa
Signing time: Sat 10 May 2025 00:07:52 +0000
ROA not before: Sat 10 May 2025 00:07:52 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 560 (0x230)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 10 00:07:52 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=D3FB3B996AE53D184454698DF206BA576273C437
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:1d:b2:f0:03:0a:f0:a0:c9:e6:8a:55:74:95:
00:ab:d7:39:35:50:7d:a6:16:1c:76:35:0b:c7:b9:
0e:45:1c:18:20:ad:2c:71:10:10:91:1e:71:3d:a7:
48:eb:fe:c2:c0:eb:c8:11:64:d3:7b:dc:d7:5d:60:
cc:2f:86:59:5e:b0:15:67:b9:06:c8:01:bc:75:95:
76:6f:b5:0e:7a:b8:23:e5:79:ca:f1:c4:84:9d:61:
dc:56:0a:9e:bd:b9:d7:4f:19:ff:32:e3:f7:43:ff:
ea:3f:f7:87:0b:cf:95:ba:61:39:4b:62:4f:12:bb:
61:e8:80:d0:0c:ad:19:54:80:ad:ef:c6:93:83:02:
c7:3b:b9:9d:35:d8:9d:14:c6:5f:3c:e0:fc:58:9c:
ec:63:5e:ae:f1:04:0b:f9:44:bd:13:58:5a:a0:7c:
2a:1c:42:cd:a6:59:24:71:0f:63:1b:65:0a:26:4e:
03:6f:db:03:4b:96:72:5c:5c:b8:d5:e9:da:87:7f:
2f:ea:48:2f:6a:ef:ad:59:e6:83:cb:c7:b2:be:de:
5d:b9:7c:b3:0c:21:46:3b:4f:77:74:57:3e:26:df:
5b:67:fd:4e:31:2c:6b:a3:9c:ac:04:0f:ae:a3:6a:
af:9b:d0:63:a6:b8:a6:e1:8b:ae:d5:84:04:8c:3c:
7d:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:FB:3B:99:6A:E5:3D:18:44:54:69:8D:F2:06:BA:57:62:73:C4:37
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/0_s7mWrlPRhEVGmN8ga6V2JzxDc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
a7:f9:0f:78:cc:3b:f5:f9:f3:93:d1:cf:46:07:3d:0c:61:00:
aa:26:8d:f6:40:1b:c6:d3:f9:d5:2f:e5:ef:7b:13:dc:f8:16:
56:4f:a4:29:24:24:9f:89:66:ea:5d:8b:c8:59:bd:a7:e9:6c:
c6:9e:be:c4:47:90:5a:bc:8f:cb:24:22:92:e9:23:2e:9e:f7:
c4:c9:ff:1b:b0:b1:4d:f2:1d:eb:e4:60:f4:d1:ec:96:55:ff:
3b:44:a4:47:c5:80:b0:5a:ee:ec:b0:b7:60:8e:5d:82:9e:17:
4c:87:6c:92:39:ab:5c:3b:08:67:d7:3f:07:af:a6:e0:5c:63:
1d:1a:5e:3b:52:d7:bf:ea:6d:0b:38:05:5e:d0:47:07:da:de:
1c:66:10:46:f1:be:3c:fd:3b:5c:4f:27:b8:fc:82:ac:96:79:
30:f4:ad:87:8c:52:a2:c2:29:02:f7:01:b4:59:2b:03:a8:25:
72:1f:07:9b:c3:bf:ff:1d:15:85:35:85:08:77:12:56:23:d1:
7c:84:7b:62:f7:aa:bc:06:a1:e2:82:6a:98:97:c4:ad:be:d1:
80:d3:be:e4:1e:ef:60:a1:07:d8:15:fd:a4:e5:7a:e7:7e:79:
52:0c:91:3f:d0:e3:f1:a1:81:11:e2:84:1a:11:d6:e5:1e:1b:
2f:e2:36:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 02:08:48 2025 by rpki-client