Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/EjU-SaKzZ1Mps98yoypS-l6hkiY.roa
File: EjU-SaKzZ1Mps98yoypS-l6hkiY.roa (raw, json)
Hash identifier: pLD4O8T0j8gl6eTkwoXjlHvoqa7VzyJIXMz2OqLddxM=
Subject key identifier: 12:35:3E:49:A2:B3:67:53:29:B3:DF:32:A3:2A:52:FA:5E:A1:92:26
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0CA4
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/EjU-SaKzZ1Mps98yoypS-l6hkiY.roa
Signing time: Fri 23 May 2025 22:38:30 +0000
ROA not before: Fri 23 May 2025 22:38:30 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3236 (0xca4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 23 22:38:30 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=12353E49A2B3675329B3DF32A32A52FA5EA19226
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:03:f2:f3:e6:2a:d5:c1:c3:ac:c4:e8:a4:49:
f7:6f:26:d1:bb:43:bb:8a:13:cf:b5:42:78:70:44:
3a:ff:55:db:7f:4b:5d:1c:07:13:2b:d4:38:a7:69:
a9:2e:f3:b1:c6:70:f2:22:3f:ed:a0:25:0c:f9:07:
53:93:d7:f7:e5:ba:81:31:1e:28:54:0d:9b:d0:00:
43:7e:60:bb:96:70:16:af:82:0d:d8:9d:c7:31:bd:
a4:97:66:d3:7c:e6:7e:8a:d9:b1:37:31:eb:bd:d5:
2f:af:99:c8:9e:c0:09:ec:b0:1b:7a:d4:d9:dc:d3:
33:bf:f0:fa:e0:11:2b:1e:d7:bd:fe:b5:1d:5e:6c:
9d:43:e3:2e:1d:6a:17:c5:68:48:b8:79:1d:91:fd:
fb:37:97:74:c6:cd:df:e1:87:7e:7d:e4:69:1d:10:
3c:06:4f:05:f3:c1:57:27:aa:f1:69:57:b9:73:77:
56:02:6c:59:6b:7a:41:01:59:2e:6e:50:af:98:a0:
6c:bc:e2:06:4c:cd:b0:2b:f1:65:01:c8:e0:62:57:
88:b6:0b:c8:bb:2a:58:87:0b:20:5d:c0:fe:fa:3b:
b5:f0:7b:e3:3e:cc:be:6d:d2:57:b5:27:56:ef:13:
e7:03:dc:aa:9a:7a:28:a0:6a:7b:62:bc:5f:85:6f:
6b:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:35:3E:49:A2:B3:67:53:29:B3:DF:32:A3:2A:52:FA:5E:A1:92:26
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/EjU-SaKzZ1Mps98yoypS-l6hkiY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
4e:35:b4:d8:b9:34:ad:68:4a:81:d0:82:5e:a5:f4:38:10:c4:
ab:90:e7:3f:89:6b:5f:b1:34:b9:de:f2:8f:c4:f8:07:fe:71:
08:ab:0e:3a:1e:d8:8d:6c:a8:07:a6:e3:55:c6:c2:bf:14:f5:
e5:da:66:0e:94:7a:44:a9:16:0e:3d:cb:b0:9a:51:22:8f:63:
03:a8:dc:90:b7:3b:e0:78:62:e2:9e:48:d6:96:d3:2c:c3:18:
a5:f8:2a:3d:bb:1f:c3:14:6b:98:15:70:2e:0a:8a:69:0b:be:
77:ba:71:69:20:5d:70:41:92:ba:8a:29:12:2e:7a:ff:1c:46:
48:71:d4:55:b0:7e:c5:ec:32:e8:58:b0:55:f4:51:b6:72:a1:
fa:aa:8b:75:a9:07:e6:61:13:53:ed:4a:5f:a7:08:3d:3a:d8:
b3:e3:dd:14:92:2f:d0:d0:f6:34:a3:4c:dd:97:de:ac:3a:f4:
36:71:da:48:64:e2:0e:a1:aa:78:1e:e5:19:28:f6:b0:c7:4b:
77:a3:44:14:cf:c8:83:af:b3:0c:63:24:59:6c:93:85:29:d9:
1d:d1:de:c3:58:2c:8e:b0:53:27:85:fc:e8:39:5c:66:85:3c:
60:e1:2e:c1:c5:47:c2:21:4f:0c:bc:7c:bb:67:96:c0:96:a8:
04:b1:d6:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 01:16:07 2025 by rpki-client