Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/7MSgE8woT2gyJKGkBCOd3IUWmak.roa
File: 7MSgE8woT2gyJKGkBCOd3IUWmak.roa (raw, json)
Hash identifier: mWV0WuHt0tAyeMWsERQE0WLKDJYHdn9VNeAKKrIrRhc=
Subject key identifier: EC:C4:A0:13:CC:28:4F:68:32:24:A1:A4:04:23:9D:DC:85:16:99:A9
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0910
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/7MSgE8woT2gyJKGkBCOd3IUWmak.roa
Signing time: Mon 19 May 2025 04:08:07 +0000
ROA not before: Mon 19 May 2025 04:08:07 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2320 (0x910)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 19 04:08:07 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=ECC4A013CC284F683224A1A404239DDC851699A9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:78:be:ec:31:0c:7b:a0:be:e1:02:b3:d8:d0:
be:18:ca:db:ad:94:6b:07:7d:c1:99:9b:46:c0:d9:
44:57:63:81:6d:be:1a:f9:e3:1a:a7:14:09:30:01:
bf:51:ea:0b:b1:8e:b9:36:85:b0:a7:51:af:f8:47:
41:a8:93:1d:1f:a1:8e:a0:5e:d7:93:6f:6d:ad:d2:
44:f0:ea:3a:2a:5b:9d:9e:61:8a:b6:83:cb:3a:df:
02:e3:2c:d1:70:b4:ae:40:d5:27:8d:d7:d9:b5:6e:
8c:37:85:f5:b9:8f:0b:2f:ce:90:b6:08:7e:32:b9:
97:fb:ae:56:d8:58:92:5a:ce:b5:fb:cb:bb:eb:dd:
61:b4:b9:fc:29:e7:50:b3:20:73:97:21:13:52:06:
cb:9c:90:34:93:9e:32:2d:ab:a8:e8:2d:51:9b:ed:
7c:c7:cf:e9:f3:d8:74:fe:2b:51:54:95:90:1a:40:
fe:b4:41:3b:f4:ff:53:14:6d:6d:d8:00:2d:50:f2:
53:7c:b7:00:9b:06:10:34:69:32:bf:7d:45:9c:fe:
04:36:08:89:ba:25:ea:a3:31:f0:83:d0:5a:f9:b9:
04:c6:a3:ce:24:5e:e1:15:48:7e:8c:a6:ec:c1:54:
35:39:ba:73:39:4d:47:1d:2f:2c:41:ed:4c:17:c3:
0b:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:C4:A0:13:CC:28:4F:68:32:24:A1:A4:04:23:9D:DC:85:16:99:A9
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/7MSgE8woT2gyJKGkBCOd3IUWmak.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
90:44:18:5e:1c:e4:e6:1a:50:75:cc:1d:17:8d:4d:03:0d:61:
d4:2d:a8:33:ab:c2:a8:ba:3a:15:c3:35:66:75:c5:ea:b3:ac:
27:e8:44:e3:73:13:ae:1b:22:5c:94:25:b7:28:f3:a1:f0:8c:
48:28:15:91:44:44:ec:09:f8:dd:32:b3:1d:11:9c:f8:a2:3c:
64:1d:cf:bb:ff:be:62:a1:02:ed:69:0d:34:65:a2:a6:45:d6:
cd:c0:fe:1f:97:95:48:ee:c7:b5:b1:db:d2:73:36:25:42:b5:
b1:c9:c9:97:34:31:f9:20:e1:5c:b5:05:e2:8c:d9:70:8f:b8:
46:7f:86:da:74:85:cc:7e:55:62:7b:f5:ed:18:f6:09:f6:2c:
a2:0b:0d:2b:4b:d0:be:25:33:cd:c3:da:26:82:fc:9e:bb:c4:
37:79:d9:67:43:fc:4b:d9:92:55:75:ca:8e:c4:51:b3:7e:3b:
f4:fa:15:09:af:3c:8c:00:17:9f:0a:55:46:40:4d:dd:e6:6a:
1e:2e:c8:81:84:61:81:37:b2:20:12:3b:39:b9:76:fc:2b:fc:
97:4f:4d:20:e0:48:e3:85:a7:74:b2:de:96:73:93:ef:d4:c9:
4f:9d:22:e1:56:c3:95:f7:d9:ed:c6:f6:c4:5f:62:ff:c4:bd:
7b:cb:03:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 01:12:14 2025 by rpki-client