Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/71qDnaLXz9uP3MS-xzRj8BDJ7w0.roa
File: 71qDnaLXz9uP3MS-xzRj8BDJ7w0.roa (raw, json)
Hash identifier: 0azyjx3JdzqCsHAJ1AxRvLIBcRPOAjlSos8BRFWkMaQ=
Subject key identifier: EF:5A:83:9D:A2:D7:CF:DB:8F:DC:C4:BE:C7:34:63:F0:10:C9:EF:0D
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0AFC
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/71qDnaLXz9uP3MS-xzRj8BDJ7w0.roa
Signing time: Wed 21 May 2025 17:38:19 +0000
ROA not before: Wed 21 May 2025 17:38:19 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2812 (0xafc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 21 17:38:19 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=EF5A839DA2D7CFDB8FDCC4BEC73463F010C9EF0D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a3:ac:fb:ff:90:13:35:93:2d:30:02:91:3a:
ec:bf:e9:03:58:cd:f8:c1:21:b5:1e:70:54:04:33:
eb:91:63:21:ee:06:94:2f:9c:b5:bc:ff:7d:65:1e:
19:4b:0f:44:9e:fb:6b:3e:44:e8:e8:21:97:9a:ec:
37:4c:f0:c9:f8:17:ae:6c:89:34:60:58:b7:70:b9:
17:f7:c7:7e:eb:e0:53:e8:2f:00:46:f1:b8:74:7a:
66:44:5a:bd:91:a8:11:b9:99:6d:11:08:9f:99:e3:
5d:03:0f:05:46:10:11:0f:28:91:21:c6:eb:51:aa:
79:22:14:dc:89:c8:77:4e:20:e4:4f:80:e6:48:4e:
83:77:8f:aa:a2:9b:e4:1a:21:50:7c:3d:9b:ce:09:
64:cd:a4:70:0c:c9:32:5b:32:06:9b:b9:30:c3:1d:
f0:3f:6a:34:c3:58:fc:9a:84:d6:5e:da:60:a6:df:
8e:d7:9e:70:5f:4c:b4:ed:59:b7:24:91:ec:ce:fc:
f8:65:0e:43:59:0e:9a:cd:34:13:d1:46:83:8c:fd:
4e:e2:5e:73:50:46:0f:8a:53:f9:a3:f6:7d:23:85:
45:2a:dc:03:9c:16:0d:3a:49:72:7a:89:fa:0e:37:
2d:49:88:c6:98:45:b0:0d:4a:dc:09:1e:e9:25:31:
9b:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:5A:83:9D:A2:D7:CF:DB:8F:DC:C4:BE:C7:34:63:F0:10:C9:EF:0D
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/71qDnaLXz9uP3MS-xzRj8BDJ7w0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
18:8b:3b:9f:1e:d1:35:b5:fb:1d:2b:41:70:3e:1c:86:47:f1:
ae:ee:2a:a1:d0:46:08:16:7f:ed:4a:8f:f3:ae:08:86:44:62:
94:fa:0f:57:0c:fc:ce:82:57:c2:59:5c:e5:80:72:eb:26:ca:
7f:92:80:66:d0:7f:f8:2e:38:9f:70:4a:02:d2:db:43:d1:be:
eb:36:29:fa:6e:09:cf:48:48:7a:b3:be:74:8d:e9:7f:c1:19:
cd:d5:12:59:d0:a3:8d:f3:08:33:3f:e9:7a:f9:e3:0f:6a:e3:
ed:41:7a:9d:87:55:ec:54:60:08:31:f9:b2:7c:f1:36:d1:8f:
c7:02:b2:d6:12:05:8d:ce:d9:35:43:88:72:68:78:62:f4:23:
c2:ad:e3:34:37:a5:87:d0:9e:cb:e1:71:cf:3b:5b:11:ff:e7:
3d:07:70:66:cd:c8:08:84:14:8c:59:0f:cd:55:6a:ff:44:95:
75:9c:a8:fb:24:6b:26:a7:10:80:d2:fd:2b:49:7d:51:6a:0a:
d7:37:82:47:bd:9f:8d:a7:38:7b:5d:9d:ae:f8:f7:e7:28:65:
a4:fc:46:65:4f:bd:d0:51:d9:01:94:04:8f:9c:fd:46:13:4d:
64:4f:86:86:6a:31:6f:c7:4e:43:a1:79:b0:bb:e3:e1:96:ae:
86:fd:60:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 20:36:57 2025 by rpki-client