Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/P2ij4UdIC8QX-cQR1hJ_d_1aoeA.roa
File: P2ij4UdIC8QX-cQR1hJ_d_1aoeA.roa (raw, json)
Hash identifier: dMRxYluAvy2MWrcFJlw4x1Dxql30yAFNcZUd3bNN1Q4=
Subject key identifier: 3F:68:A3:E1:47:48:0B:C4:17:F9:C4:11:D6:12:7F:77:FD:5A:A1:E0
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0EBC
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/P2ij4UdIC8QX-cQR1hJ_d_1aoeA.roa
Signing time: Mon 26 May 2025 17:38:41 +0000
ROA not before: Mon 26 May 2025 17:38:41 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3772 (0xebc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 26 17:38:41 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=3F68A3E147480BC417F9C411D6127F77FD5AA1E0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:4d:24:2d:89:4e:31:69:06:ef:ca:8d:e9:a2:
59:ff:3d:b4:44:c4:75:e3:11:02:ba:eb:ef:94:21:
c6:70:31:44:f2:d7:73:8a:f1:74:86:43:fe:99:0b:
c0:8f:c8:af:4a:79:43:d2:51:40:07:0b:22:8e:ee:
ca:ca:46:2e:32:8a:04:9d:c3:e7:a9:5d:7f:85:8a:
72:e5:19:01:87:04:66:da:75:6c:74:75:43:8f:a1:
7e:88:ec:af:20:ab:fc:e4:a7:dc:aa:e1:8e:5d:e7:
ef:4f:f9:96:76:99:97:49:e7:7b:1b:9e:62:77:2b:
96:eb:21:2d:1c:38:e6:ee:fc:43:c0:7d:36:07:f6:
1b:60:76:c8:00:98:17:c5:f2:05:8d:97:fc:07:d7:
78:de:e0:de:78:24:af:37:cc:50:56:a2:f4:21:a9:
42:41:11:b6:4a:9a:a7:69:e0:95:cc:38:08:50:c6:
ac:09:06:91:03:dc:7c:35:fe:59:c4:ab:ce:6a:d9:
53:02:65:88:ba:a5:63:2e:df:0f:a1:21:46:e8:a9:
f4:f8:af:12:dd:53:ad:81:d5:e1:eb:f7:1a:a5:ff:
ae:ef:8d:a4:84:e0:7a:34:53:1d:aa:ab:12:e0:50:
db:bd:26:5e:da:be:5a:1e:67:08:aa:31:42:7b:48:
de:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:68:A3:E1:47:48:0B:C4:17:F9:C4:11:D6:12:7F:77:FD:5A:A1:E0
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/P2ij4UdIC8QX-cQR1hJ_d_1aoeA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
a7:ec:b8:34:73:22:bc:d2:db:16:b3:7f:62:d0:40:92:3e:91:
fe:ad:20:4c:b5:11:43:fe:7c:69:8d:ff:4b:11:bc:42:0e:bc:
da:8e:ea:a2:13:23:34:50:35:88:ca:46:41:59:1f:e5:8e:1d:
91:e9:97:06:a7:06:9a:bf:eb:f4:be:d0:7d:c1:f3:ca:c4:df:
47:af:a7:29:5b:3e:20:f9:55:c8:e9:00:8a:1a:85:38:7c:31:
db:91:94:13:49:95:ca:7e:0f:72:76:a0:5b:83:9b:d0:d1:c2:
db:24:67:86:51:f0:0f:75:be:79:06:10:e8:e1:3d:c7:04:6f:
da:18:33:c1:ba:f0:ac:2c:d5:bc:0e:e6:14:19:55:76:70:5a:
1e:eb:26:58:e0:18:1c:a7:2c:92:47:08:25:d9:76:4b:1f:a8:
6d:08:19:10:b0:22:e0:74:08:b0:3a:c0:b0:93:06:70:3c:e7:
be:bd:1f:82:8b:46:e8:5b:7a:c9:ba:7b:05:25:fb:59:89:d9:
a7:cb:21:74:10:c7:b9:cf:a9:b8:69:ed:50:1a:b7:ed:16:dc:
58:14:16:dd:c0:bd:d8:47:fc:67:7a:d3:89:c3:05:87:c8:fb:
e2:85:13:9c:17:4e:8c:ed:1e:13:78:6c:bb:3f:e1:1e:e0:6a:
93:2c:ea:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 00:57:09 2025 by rpki-client