Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/P-a50i-vKpweoSnUh81I2EvVqWA.roa
File: P-a50i-vKpweoSnUh81I2EvVqWA.roa (raw, json)
Hash identifier: 9l7YjI/lbCC7SOdZKgGdRrgrQv6Ai1CS9+bTaORXJe8=
Subject key identifier: 3F:E6:B9:D2:2F:AF:2A:9C:1E:A1:29:D4:87:CD:48:D8:4B:D5:A9:60
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 095C
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/P-a50i-vKpweoSnUh81I2EvVqWA.roa
Signing time: Mon 19 May 2025 13:38:50 +0000
ROA not before: Mon 19 May 2025 13:38:50 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2396 (0x95c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 19 13:38:50 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=3FE6B9D22FAF2A9C1EA129D487CD48D84BD5A960
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:60:bd:af:a4:f3:ac:e3:cf:63:7d:2e:40:68:
f4:d9:84:d1:66:6e:f6:33:66:49:6d:0b:b6:f5:ce:
90:05:da:3a:d6:dd:4e:92:6f:19:57:1e:64:b6:71:
fc:14:fd:cc:ba:a1:ec:e6:5b:00:dd:f2:51:93:c8:
81:19:f3:11:0d:80:40:1c:01:fa:b9:b0:5e:1d:c4:
c0:bf:20:b3:5f:af:db:f9:3a:c6:ec:f5:a0:6c:bb:
64:a9:06:40:d2:0b:7b:2e:cd:58:d7:2d:59:19:e3:
6d:5c:cc:98:ed:0b:a9:b2:d2:ed:41:d9:9a:be:82:
ff:f4:50:20:f3:77:f2:59:a7:42:f4:59:a6:b1:e6:
42:8a:23:85:15:9e:2b:d7:26:e2:98:67:39:ac:aa:
a8:0d:3f:07:be:2d:f0:34:40:a2:22:36:06:90:3b:
54:41:2e:16:b1:e8:06:fc:0f:6f:8a:23:80:6a:10:
b6:38:2b:27:8b:f8:61:ae:82:ad:c2:75:bb:4b:91:
2a:59:72:e5:80:0e:a3:b2:83:2c:08:c0:a0:43:ae:
5e:62:ff:3a:c2:ac:db:e7:a2:fc:7f:5b:b2:92:19:
a5:b0:c4:79:53:7a:9c:b3:10:f0:b7:4e:7c:4b:6b:
fe:72:5f:4a:67:6b:a2:c6:3b:dd:c2:17:34:17:30:
ac:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:E6:B9:D2:2F:AF:2A:9C:1E:A1:29:D4:87:CD:48:D8:4B:D5:A9:60
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/P-a50i-vKpweoSnUh81I2EvVqWA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
5f:c5:63:5c:bb:67:b7:8e:a7:86:c4:00:75:af:d0:7a:10:8c:
0d:f4:ce:2e:b2:df:48:86:85:5f:30:e7:d0:66:ad:39:9c:13:
5c:ca:25:9e:c9:d3:bf:fa:9e:c8:3d:40:57:65:8a:3c:39:17:
19:d0:fe:a6:11:03:94:6a:7a:1a:a7:f4:b6:3e:92:33:16:91:
5a:19:65:b1:55:64:74:15:a0:82:1e:ac:d5:ac:0d:3c:b2:6c:
3d:c7:a5:49:fb:6a:e8:8f:7e:16:f4:88:99:12:c5:38:57:9e:
1c:08:47:0d:1b:74:c7:26:79:58:36:a2:1f:29:67:b3:52:5f:
d9:13:9f:84:64:2b:37:14:bb:af:91:ca:b8:1d:55:07:e1:99:
90:87:d3:54:b7:11:57:86:e1:53:a8:d5:62:76:dc:eb:10:d7:
19:74:29:71:ba:25:c7:40:07:7a:9f:3f:f6:40:06:0f:d0:34:
f9:e8:98:aa:c8:46:57:7d:31:ae:bb:3c:9b:e6:88:33:d9:a0:
ec:a6:9e:74:64:97:08:8a:ca:65:56:d4:13:75:4d:05:f7:2b:
06:fc:f9:06:4e:7f:68:de:f4:bc:5d:35:ec:e5:f3:bc:1d:1f:
c7:d0:c3:69:5b:4a:61:5f:12:f9:77:e6:ca:78:98:6c:31:c6:
69:10:14:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 00:58:46 2025 by rpki-client