Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/MfmRO-y34IsRGhjpwuGVDAgqeYs.roa
File: MfmRO-y34IsRGhjpwuGVDAgqeYs.roa (raw, json)
Hash identifier: /APZY+CDHDNebYEJ6s/2peDHtoz7s9Hs+uYchdDw038=
Subject key identifier: 31:F9:91:3B:EC:B7:E0:8B:11:1A:18:E9:C2:E1:95:0C:08:2A:79:8B
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0E60
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/MfmRO-y34IsRGhjpwuGVDAgqeYs.roa
Signing time: Mon 26 May 2025 06:08:37 +0000
ROA not before: Mon 26 May 2025 06:08:37 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3680 (0xe60)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 26 06:08:37 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=31F9913BECB7E08B111A18E9C2E1950C082A798B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ea:d6:f2:7c:ad:c9:cc:f7:ab:c0:e1:4b:5a:
ca:50:39:42:d2:ef:36:fc:57:bd:52:f3:b5:2c:80:
52:e4:4d:74:e5:a2:5b:c2:ea:82:ff:8e:a1:e2:6e:
24:a1:83:e7:31:34:80:7a:5e:91:f0:5e:12:94:cd:
f1:2b:a4:f5:88:8c:56:79:73:56:d6:2d:2b:8f:5d:
be:93:5f:69:78:73:d5:0d:55:b8:c0:08:2c:0d:d8:
f4:e6:84:a9:37:ea:a0:da:5f:a0:80:75:17:d7:28:
44:ea:9d:6a:a1:79:20:fc:d9:a3:02:06:ad:a2:f3:
2c:d0:69:aa:39:db:f4:3d:c0:3e:51:9c:72:fa:ea:
5b:8b:a3:31:c7:dc:b3:ad:8f:df:84:b6:9c:23:0a:
09:18:cf:05:82:89:37:d1:b3:db:62:d3:10:4d:c6:
6b:26:27:44:fa:d7:74:b5:94:a9:ef:3c:c4:ae:d8:
e8:1d:d4:b0:4f:27:67:e8:6a:84:13:29:cd:71:e3:
3f:53:2e:5d:25:f8:67:be:62:f4:2f:dd:bc:5e:73:
da:1d:00:85:3f:3b:cd:c9:33:d7:01:96:39:41:5d:
a9:51:cf:f3:bb:6d:8e:b5:c1:4a:22:dc:2d:d1:68:
4b:a0:36:c9:40:d2:db:1f:8f:7a:d1:19:1c:0c:71:
b5:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:F9:91:3B:EC:B7:E0:8B:11:1A:18:E9:C2:E1:95:0C:08:2A:79:8B
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/MfmRO-y34IsRGhjpwuGVDAgqeYs.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
35:35:13:2b:e7:cc:32:45:6a:92:e0:60:9e:a5:c1:0f:d2:d2:
49:09:44:89:fc:7c:b8:5b:bf:2b:49:d4:ec:8b:4d:6b:0c:d5:
d7:f3:c3:23:06:c1:4d:aa:27:96:a0:8c:29:e9:25:4a:8b:fa:
c1:10:37:80:db:32:1f:17:1d:99:68:ba:d0:c5:d5:22:9b:4a:
d0:63:91:95:46:50:84:e1:b3:bd:b4:48:6b:1f:90:f7:48:2f:
82:2a:f4:d9:86:fc:05:01:31:81:7d:ed:ef:cd:e5:7c:34:54:
be:be:c0:77:f4:22:b8:1a:9b:0c:a4:26:d9:75:6f:08:63:a9:
f6:e4:a8:14:e9:85:33:cd:57:20:e7:5c:a5:b8:a7:96:ad:a0:
d1:63:35:90:51:af:0c:c0:d0:b7:80:c5:12:ba:ad:64:b4:e1:
7b:4d:57:e1:e2:ed:10:6e:8f:10:f3:c2:3f:e1:9f:0f:56:75:
91:f1:9b:76:fe:5b:7f:20:02:ab:d0:37:55:d1:02:8f:b0:41:
3c:a1:75:81:4c:49:25:11:5f:f3:2f:60:39:31:d2:ff:9d:f0:
cd:5c:74:2a:52:26:57:ee:47:71:dc:97:3f:e3:d9:4d:f4:64:
28:61:07:83:e9:e6:6a:66:29:a5:01:97:a5:e5:3c:cd:4a:da:
31:0f:b5:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 00:57:26 2025 by rpki-client