Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/FWR38_CZbFmJdeaKHHerUO0y1_w.roa
File: FWR38_CZbFmJdeaKHHerUO0y1_w.roa (raw, json)
Hash identifier: iI8JCR9lolLlDGnffndaVg6tdfScvrwyQdxZN3ssOxk=
Subject key identifier: 15:64:77:F3:F0:99:6C:59:89:75:E6:8A:1C:77:AB:50:ED:32:D7:FC
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 2350
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/FWR38_CZbFmJdeaKHHerUO0y1_w.roa
Signing time: Mon 23 Jun 2025 15:41:54 +0000
ROA not before: Mon 23 Jun 2025 15:41:54 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9040 (0x2350)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 23 15:41:54 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=156477F3F0996C598975E68A1C77AB50ED32D7FC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:1e:0a:14:d7:d2:f7:52:f4:b3:32:4e:eb:88:
eb:20:ab:e7:54:60:0e:33:24:e5:41:e1:c0:12:95:
6c:b9:ff:ea:e6:76:7c:fe:c0:f9:c2:f5:14:c6:e7:
ac:ab:97:50:e8:12:78:fe:ef:31:8f:a2:6b:17:7c:
28:3a:3f:0d:bb:ad:88:7f:2d:f4:7d:9b:1b:67:b9:
7b:e5:49:b8:22:d7:ef:c3:7c:d4:51:e3:1c:f6:f3:
c5:6f:65:dd:d3:46:30:50:7c:c4:e5:fe:b3:63:48:
5e:69:d2:94:99:85:24:3d:02:84:b1:e8:18:d2:dd:
eb:7a:2f:ca:b7:09:88:ae:47:38:18:48:5e:1e:a1:
31:72:0f:89:fa:91:95:78:be:f2:43:82:bf:2d:8d:
9f:62:99:0b:e1:f0:50:bb:70:6b:69:c5:94:11:c6:
38:31:5a:c0:d6:09:24:93:53:8b:dc:1f:cf:3a:55:
43:93:00:25:68:0c:b2:1e:d4:3f:88:73:35:9e:2f:
cb:64:37:d1:53:7d:0f:3a:aa:fe:5b:c1:31:bd:b4:
cc:03:1c:10:21:8d:53:ef:42:ea:90:ec:45:b4:97:
dd:46:74:57:df:72:7d:55:24:69:e4:e7:25:0d:a9:
cb:5f:21:6c:56:e2:e4:ce:0e:e2:3f:41:8a:1b:b9:
a5:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:64:77:F3:F0:99:6C:59:89:75:E6:8A:1C:77:AB:50:ED:32:D7:FC
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/FWR38_CZbFmJdeaKHHerUO0y1_w.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
8a:34:8e:00:ab:fa:4b:7d:5c:ca:08:35:7f:0c:78:89:6e:0b:
04:17:7d:f2:f4:1c:dd:73:a5:b0:91:bc:50:88:7c:d6:33:a2:
a2:fe:8e:30:f5:a5:a9:59:5e:fd:65:c6:bf:2b:71:2f:b6:d5:
9d:b2:e8:87:40:ad:4b:cc:a9:30:36:e5:54:3d:ab:56:2e:9c:
5c:62:66:56:e6:ab:48:72:18:dd:d7:95:3f:cd:d7:9f:26:c0:
bf:ea:a7:ba:64:8c:dd:b3:6d:8d:81:e6:31:28:28:99:24:35:
ef:2e:08:af:28:ee:f3:ab:e0:c6:9d:98:7b:69:46:17:a3:f9:
27:0e:e7:82:fa:fe:dc:a0:b9:2d:54:44:5c:e3:13:5d:93:2a:
0c:63:49:8f:07:a7:47:64:d6:16:88:88:ed:22:b3:f1:33:e2:
53:e0:41:68:23:27:63:4d:81:72:2b:0b:5a:65:e6:7e:c8:7e:
e4:95:2c:28:25:61:03:87:0f:70:ee:10:f6:88:53:b1:90:7a:
b6:de:af:c9:0d:7e:4d:78:e5:a1:12:0a:c8:bb:a5:69:c2:c3:
9e:61:c6:a9:f6:56:f3:2f:5f:60:44:00:16:77:4c:69:d8:ff:
c2:d2:9f:20:ba:da:b0:40:e3:87:d6:d6:17:58:ef:e0:d3:06:
86:ec:1d:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 08:05:41 2025 by rpki-client