Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/FpS_SXJIqd00gd639O8qEoxFM74.roa
File: FpS_SXJIqd00gd639O8qEoxFM74.roa (raw, json)
Hash identifier: 2iI2YEKMz8bRomvjW1aVI0B3B7XQnOMx8FxaiBNAvos=
Subject key identifier: 16:94:BF:49:72:48:A9:DD:34:81:DE:B7:F4:EF:2A:12:8C:45:33:BE
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0818
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/FpS_SXJIqd00gd639O8qEoxFM74.roa
Signing time: Sat 17 May 2025 21:08:07 +0000
ROA not before: Sat 17 May 2025 21:08:07 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2072 (0x818)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 17 21:08:07 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=1694BF497248A9DD3481DEB7F4EF2A128C4533BE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:02:4a:45:2c:30:33:a6:fb:75:c1:9c:e8:b3:
67:19:db:72:4d:38:74:40:fd:63:f5:67:eb:0c:b9:
c0:dd:b7:18:62:22:6f:72:2d:8e:4b:f0:0c:34:29:
c1:6b:78:ba:1f:96:f5:1f:d0:1b:90:79:bb:19:35:
89:50:b1:fd:a5:eb:42:fc:36:92:9e:73:a5:fc:a4:
92:60:ba:9b:ae:90:ab:66:79:f6:7e:27:a8:e6:47:
08:25:5a:9b:f7:83:46:0c:4c:eb:24:dc:02:e1:bf:
aa:5d:b3:48:64:56:29:18:ae:e5:d2:e4:6a:a1:98:
20:4c:b8:c9:e3:a7:e8:e0:7f:f4:31:47:58:5c:29:
cc:41:95:48:30:d3:0e:46:d6:ef:e3:39:df:04:9d:
04:ea:17:49:4d:b2:2e:e0:64:30:d7:30:75:ed:43:
4f:3f:79:9c:bd:0b:33:76:a3:28:3f:cf:2e:33:ea:
1a:24:9e:1b:06:45:57:b7:21:ad:21:a6:a5:44:0c:
ae:13:20:79:c8:80:4e:40:e7:a9:89:8d:33:ac:f7:
d7:0c:a3:c0:b0:f1:26:af:34:65:6e:fa:d7:39:57:
d5:e7:94:37:e7:b1:ff:48:3f:4d:ec:98:9f:b9:78:
94:a9:d9:0b:cd:f4:09:2f:bb:d5:3a:c9:3e:32:66:
fb:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:94:BF:49:72:48:A9:DD:34:81:DE:B7:F4:EF:2A:12:8C:45:33:BE
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/FpS_SXJIqd00gd639O8qEoxFM74.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
8d:73:18:14:d7:05:72:76:89:c5:d6:ac:e6:b2:b7:fa:ec:a4:
e3:54:a0:3f:ef:b2:71:9e:cf:4f:2a:be:f8:fd:a1:56:c9:51:
a4:0e:3c:f2:a8:28:34:5b:47:47:d2:7d:ea:dd:09:42:67:78:
8c:7b:dd:d0:be:3e:2f:20:03:6a:d9:e1:e6:f7:27:0c:5f:8d:
f5:20:4b:f8:3d:e7:4f:ae:26:99:1d:82:17:ae:f8:49:1e:27:
50:01:9a:db:2e:a9:06:42:39:84:8d:7b:0c:13:03:95:be:99:
b2:24:83:1b:05:f0:4d:57:3e:fd:4c:7a:26:5c:00:01:3f:11:
e5:46:76:62:68:ad:dd:77:bf:85:71:0d:aa:56:b2:38:0d:fd:
a6:19:ae:39:cc:0d:1d:15:12:38:a9:7d:e8:27:a3:20:45:56:
60:17:30:04:18:31:8b:9f:8f:86:36:4c:8e:f4:91:65:6c:9c:
94:d0:fd:a5:9c:2b:39:78:f1:66:1c:50:09:b3:4a:f5:e6:b0:
86:80:d7:b2:b3:a9:7c:d5:e4:f0:ce:82:f2:4d:47:b5:74:41:
cd:a3:ad:89:73:1d:4a:33:bb:76:7c:70:ab:1c:89:d1:7f:f3:
1f:06:3f:ce:b9:40:f2:74:e7:1b:57:36:6b:e9:af:6d:69:ee:
a3:dd:7d:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 02:02:49 2025 by rpki-client