Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/Iv0lb3pFmM_dF0sWcbcveokFSM4.roa
File: Iv0lb3pFmM_dF0sWcbcveokFSM4.roa (raw, json)
Hash identifier: /z5IvksDlgVgJXZoWDi7KD5/xSCq8nrg6veNaG4C+F8=
Subject key identifier: 22:FD:25:6F:7A:45:98:CF:DD:17:4B:16:71:B7:2F:7A:89:05:48:CE
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0C6C
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/Iv0lb3pFmM_dF0sWcbcveokFSM4.roa
Signing time: Fri 23 May 2025 15:38:27 +0000
ROA not before: Fri 23 May 2025 15:38:27 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3180 (0xc6c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 23 15:38:27 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=22FD256F7A4598CFDD174B1671B72F7A890548CE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f9:a8:78:c2:b6:a9:94:d8:20:42:f5:f9:e2:
c9:e7:66:45:9b:ab:ac:e4:36:62:23:59:0b:c2:e1:
9b:e2:7e:37:b8:99:fc:5b:76:38:ba:7b:7d:48:94:
d5:9d:87:90:92:2c:2d:6a:3d:7c:bf:82:de:1b:fb:
ba:04:c7:f0:f1:28:4d:63:25:7a:b8:a7:66:10:67:
48:4a:b8:00:8d:4a:f2:65:af:03:65:c2:1d:b8:75:
7e:7d:85:e3:63:c2:ee:0b:bb:24:92:6e:7b:0c:42:
95:d1:92:a0:7a:c3:f0:f6:2a:13:7e:42:8b:6e:b8:
11:59:04:d9:f0:a2:4e:c5:84:b3:35:c5:19:5c:65:
e0:89:1e:67:71:03:47:06:23:6b:2f:dc:46:92:5d:
4d:a8:12:53:db:73:3e:2c:10:cc:7a:b1:77:e1:bc:
e3:46:8e:46:b2:59:ab:38:e0:6e:f8:34:53:12:52:
6b:37:67:9e:a0:a1:02:0d:a0:6b:9c:29:ad:73:25:
b0:39:5e:15:f0:ce:2d:7e:b8:68:c3:d0:a9:11:99:
8d:40:30:53:ec:5b:ac:9a:dd:94:7e:a6:f7:0b:0d:
20:46:16:87:1c:61:f7:08:1d:14:20:e8:20:eb:ec:
ac:1c:2e:04:0f:8d:49:1a:48:e6:96:29:81:dd:73:
bb:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:FD:25:6F:7A:45:98:CF:DD:17:4B:16:71:B7:2F:7A:89:05:48:CE
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/Iv0lb3pFmM_dF0sWcbcveokFSM4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
00:61:22:bd:40:9f:e3:ed:6a:53:a0:85:5c:ad:ad:53:92:6f:
f5:b6:36:5d:ce:7d:35:cf:9a:d7:0d:cb:47:b6:c4:ab:9b:d0:
32:37:3f:de:81:37:69:83:3d:d1:88:29:d4:fc:7f:cb:a2:41:
60:1d:49:c4:52:8f:bf:02:7f:37:8c:36:52:5a:ce:cc:be:48:
92:45:07:66:bf:a9:19:46:65:b0:a6:af:ea:c7:97:ab:07:ab:
64:c7:90:0a:2a:0e:da:39:aa:e1:36:91:fa:a7:83:6f:30:61:
b6:9b:1e:09:c0:36:65:40:fe:8a:83:77:21:fd:de:71:68:ea:
62:84:60:f2:51:ab:a1:f3:b3:7c:73:bf:ce:18:02:a1:e2:59:
04:b3:10:c4:02:6e:cf:68:6a:f0:e9:43:e2:72:41:42:c4:f9:
30:5a:d2:f9:82:c8:f5:82:a4:63:42:42:52:bd:92:43:9b:83:
f1:7e:b7:f1:76:69:81:24:ee:89:e5:2f:61:6c:68:0c:c2:fb:
7d:1c:83:57:12:89:5f:18:91:51:d8:d1:4c:c5:c7:ed:48:47:
11:96:75:31:4f:c5:7b:f0:d2:9d:18:e8:3a:e1:5d:53:b9:d1:
74:08:97:54:6b:d6:3a:6f:fd:15:d3:04:07:82:61:3d:12:44:
85:f9:56:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 19:17:39 2025 by rpki-client