Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/FsRlnRyCNqwiioHdAUoSE_FucaM.roa
File: FsRlnRyCNqwiioHdAUoSE_FucaM.roa (raw, json)
Hash identifier: f1rqFMtd7lObJE12Jpd3gARNUaHB5RDN1RHk//WxVmA=
Subject key identifier: 16:C4:65:9D:1C:82:36:AC:22:8A:81:DD:01:4A:12:13:F1:6E:71:A3
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0138
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/FsRlnRyCNqwiioHdAUoSE_FucaM.roa
Signing time: Thu 08 May 2025 17:07:43 +0000
ROA not before: Thu 08 May 2025 17:07:43 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 312 (0x138)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 8 17:07:43 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=16C4659D1C8236AC228A81DD014A1213F16E71A3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:68:c3:a1:3d:5f:ba:8f:11:42:da:f4:ec:16:
60:14:e3:fa:44:62:05:33:32:4d:3a:65:2f:2a:62:
ec:9b:ae:bc:09:52:a2:1c:21:e6:00:49:58:1f:62:
3f:b6:65:aa:6e:08:51:78:ad:d9:a0:15:94:62:33:
8a:27:cc:83:68:78:9b:cc:eb:ae:fe:d3:9c:a0:e2:
b8:54:80:9c:8e:ab:a1:3c:79:26:09:20:12:8a:0c:
c1:d1:17:75:fe:53:1d:89:42:12:62:ed:62:58:2d:
7c:0d:52:fd:a2:f1:e2:84:fe:33:5d:d4:61:86:e0:
20:09:de:50:c0:15:90:b2:fa:9e:fc:1c:52:c0:ef:
b4:b6:a6:82:16:83:18:e1:53:b2:de:b2:12:4b:49:
36:bd:fe:e1:8a:26:99:5c:17:f5:da:5c:d1:49:c0:
62:24:21:f4:f3:74:02:12:3a:8f:47:28:1c:6b:17:
b2:15:ae:5c:32:bc:4a:f3:8e:ce:52:e5:f2:9b:d8:
72:ac:f7:11:02:af:2c:a4:fa:c2:5e:40:f2:bb:04:
35:3a:65:71:44:9b:fb:f7:fb:7e:c0:dc:ea:ce:e9:
ce:51:d4:18:ff:94:6e:5f:a8:7b:8a:70:23:fc:a8:
5b:cc:80:86:5d:b0:02:b7:d7:74:03:9f:c3:07:47:
94:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:C4:65:9D:1C:82:36:AC:22:8A:81:DD:01:4A:12:13:F1:6E:71:A3
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/FsRlnRyCNqwiioHdAUoSE_FucaM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
92:01:c9:f5:60:fd:f4:86:c5:63:f7:d8:d2:c1:8f:5f:bc:2d:
5b:5f:12:24:c3:6e:9d:07:09:4c:27:83:c8:50:d2:90:58:8e:
97:72:59:c4:87:cc:2c:cf:ee:2f:cf:7d:af:86:d3:6a:9a:9b:
6f:7e:4c:95:f4:ff:c0:fe:47:c4:66:20:15:99:96:ae:07:22:
c6:d2:a3:8e:14:ee:d8:ad:58:76:32:6f:c0:14:cf:fe:1e:ff:
ab:2e:af:a9:8a:2c:ba:a3:e8:f6:35:e7:a2:c5:bd:49:10:57:
c6:d1:c5:a5:52:70:be:82:60:3e:c3:df:85:49:0d:c6:19:63:
7d:cc:77:0a:d7:4f:1c:4c:fa:c3:0b:71:c8:2d:09:4f:22:b2:
3c:41:7e:2d:d5:9a:cd:d0:8a:79:99:4d:fb:23:cd:20:29:be:
f1:4f:f2:f7:93:5c:84:ba:d5:95:c2:0d:b4:3c:2a:b2:d6:da:
4f:4a:5a:df:0b:54:01:9e:20:5d:10:5b:26:94:14:31:12:51:
6b:2e:c4:58:8f:55:83:e2:d3:fb:1e:66:63:f4:3b:72:fc:bc:
16:b3:7c:b2:48:7e:31:05:f6:12:5f:5a:cf:68:bb:fd:e2:23:
8b:7c:40:f1:f9:8f:2b:32:f7:6f:4f:9c:5c:60:86:84:6f:57:
dd:88:1a:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 20:27:00 2025 by rpki-client