Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/GHsCFsYycG5HRGuB4Y68lUaw2H0.roa
File: GHsCFsYycG5HRGuB4Y68lUaw2H0.roa (raw, json)
Hash identifier: LbnMcZrXTPMZk7fA/qSmN8tlxeeO/X98GyEiEtCegGc=
Subject key identifier: 18:7B:02:16:C6:32:70:6E:47:44:6B:81:E1:8E:BC:95:46:B0:D8:7D
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 03D8
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/GHsCFsYycG5HRGuB4Y68lUaw2H0.roa
Signing time: Mon 12 May 2025 05:08:15 +0000
ROA not before: Mon 12 May 2025 05:08:15 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 984 (0x3d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 12 05:08:15 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=187B0216C632706E47446B81E18EBC9546B0D87D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c8:1f:93:c5:15:ae:83:cf:21:8b:e9:8b:84:
1f:be:b3:40:1c:1f:0a:3b:aa:ec:79:5c:b2:d1:1d:
c0:8b:69:09:1c:94:81:1b:f3:42:cb:01:86:cd:ec:
6e:16:47:ee:b3:86:f9:4d:59:71:bf:f8:14:d7:ee:
c2:a4:40:24:ea:c9:28:77:2f:82:d0:58:95:f9:4b:
cb:86:24:8a:21:b2:2f:89:4c:a1:ac:e7:1c:79:c1:
83:f8:02:fc:50:39:5a:b0:7f:99:b2:84:e3:1e:53:
b3:6e:64:11:79:dc:69:b4:51:14:a0:e0:53:6a:8d:
0e:2f:c5:88:0a:06:b1:d4:8a:5d:c7:b5:ea:73:0b:
dd:a8:16:94:79:db:43:b6:87:8c:b2:8d:ef:03:59:
bb:13:87:47:0d:e9:be:5b:6b:75:fd:19:4d:63:23:
a4:6a:cf:7b:01:68:f2:02:a8:c0:d6:ac:6c:6b:f7:
b3:4c:6b:11:43:0d:ad:fe:43:72:12:d4:9b:06:0b:
ce:46:5c:a5:6b:f3:11:65:30:88:ba:4e:47:58:17:
10:f2:73:c2:cf:66:ab:8c:cf:51:83:17:0d:85:9c:
77:c2:2a:9d:b8:77:de:81:ff:5d:e8:40:3b:f1:1a:
5b:a6:52:ac:85:0e:f0:6d:a2:2c:dc:8e:5a:47:e4:
52:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:7B:02:16:C6:32:70:6E:47:44:6B:81:E1:8E:BC:95:46:B0:D8:7D
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/GHsCFsYycG5HRGuB4Y68lUaw2H0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
61:c6:6d:fc:f1:8e:99:ec:a5:2f:e1:85:18:84:89:29:58:8b:
31:fa:ec:3e:2e:ef:89:53:24:9d:b8:42:9c:06:87:0f:ad:a3:
02:cc:6d:01:9e:be:c1:85:5c:ce:28:d5:2b:d6:51:cc:c5:c5:
b0:ba:d3:94:19:fd:25:dc:3a:40:57:18:f0:81:cd:d8:60:3a:
4f:a3:5c:d4:00:af:43:7f:9a:1c:b0:28:52:c9:37:7c:6f:08:
c4:ef:46:4d:90:3a:d2:60:31:96:2f:58:54:95:c5:44:c1:af:
68:57:a6:58:82:be:d9:78:ff:a3:e3:b0:5b:bf:02:5b:69:5b:
30:6c:e2:26:cd:a5:8d:d1:09:06:36:21:12:d5:0d:ba:18:2b:
b8:c5:a4:8a:43:fe:a6:c9:9b:c3:94:00:6d:b1:2c:53:ed:14:
6e:1e:01:8b:f5:6f:b2:d8:6f:f4:05:ac:d6:3c:ae:42:ee:ac:
98:c9:61:49:d0:03:7d:87:d4:3e:c8:91:62:76:7d:59:01:86:
04:99:ca:97:d2:ef:1f:7b:e7:ab:a9:81:a5:a8:d3:59:ad:87:
bd:c0:e6:b4:b4:3e:f0:27:bf:03:38:d8:c5:f6:4d:fd:39:41:
fe:8d:6a:98:9c:42:da:2f:3e:21:5a:5b:36:25:d2:7a:08:80:
85:02:ce:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 01:16:25 2025 by rpki-client