Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/PdRzoAONDlQTaIEdA1icyXRyoCo.roa
File: PdRzoAONDlQTaIEdA1icyXRyoCo.roa (raw, json)
Hash identifier: SZ7tdvn++JW3m1G+Lxm7imKEFoCh5rruNVuygqjxxvw=
Subject key identifier: 3D:D4:73:A0:03:8D:0E:54:13:68:81:1D:03:58:9C:C9:74:72:A0:2A
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0DB0
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/PdRzoAONDlQTaIEdA1icyXRyoCo.roa
Signing time: Sun 25 May 2025 08:08:35 +0000
ROA not before: Sun 25 May 2025 08:08:35 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3504 (0xdb0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 25 08:08:35 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=3DD473A0038D0E541368811D03589CC97472A02A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:e7:dc:31:d6:f6:61:63:ee:c9:ba:1a:31:67:
24:9b:66:15:9e:f1:ef:66:a6:00:de:ce:c6:7f:59:
88:06:48:5a:e5:3c:6d:e2:46:8e:57:a9:0c:48:47:
05:16:8b:71:2a:53:a3:d6:f0:6e:45:94:0c:d6:0f:
32:1b:9b:a4:45:52:cc:11:ac:1f:3e:07:5a:ea:3c:
45:9e:29:af:d9:f8:3a:1c:b8:48:2b:46:4e:f7:ea:
a5:fb:37:4a:70:87:af:7d:6a:22:85:3a:79:ef:88:
71:31:05:17:34:33:1b:a3:5c:fa:34:49:3e:bf:00:
32:2a:f4:c4:fc:2f:79:97:2c:8b:c4:2e:a6:4d:59:
34:48:92:a9:a3:b7:37:40:71:ac:06:ab:86:68:05:
c5:39:98:99:21:2e:fd:d2:3c:c6:77:b7:6e:b9:0d:
c6:13:b4:3a:86:90:f8:03:07:a7:c3:40:54:05:99:
f6:c6:9f:7f:0b:96:9e:8c:2f:47:a5:11:05:98:b6:
d6:5a:9a:a8:c7:cb:bc:89:5d:09:23:e6:3b:71:72:
6f:36:7a:8d:d9:67:ae:39:10:eb:10:12:09:6a:04:
7e:93:b7:87:fb:f0:72:13:4a:03:7d:32:b4:3a:c1:
e1:52:54:a8:4a:c4:4c:d2:b6:cd:57:e4:4b:89:60:
31:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:D4:73:A0:03:8D:0E:54:13:68:81:1D:03:58:9C:C9:74:72:A0:2A
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/PdRzoAONDlQTaIEdA1icyXRyoCo.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
30:2d:d7:47:6e:a4:fb:3b:02:6e:c8:bb:d1:52:b4:23:35:47:
ce:41:d0:de:da:f7:ad:6b:63:c7:39:f9:f9:fd:91:ae:47:ac:
1f:fd:98:2f:85:fb:3d:fe:c5:ca:8f:a5:fe:31:31:42:ba:94:
8f:5c:6a:df:84:5b:98:a9:aa:d4:dc:55:98:53:64:c3:8a:d5:
33:6b:bd:cf:4a:3d:5a:34:8f:51:cb:8a:75:74:dc:6c:ca:a9:
2c:96:d0:cf:79:12:a3:88:07:4a:19:e6:dd:45:b6:71:49:90:
c7:de:64:01:8d:9f:ba:de:11:23:e0:88:d3:df:e7:73:04:72:
f0:e5:2c:bd:77:83:cb:12:64:b2:d1:6f:f6:dc:f7:67:35:b0:
60:65:d1:b5:36:26:10:33:5f:f0:60:0b:b8:d3:da:07:43:14:
33:cc:71:ad:ae:b4:81:dd:55:14:6e:9c:c4:70:fb:d7:38:eb:
0f:c5:b5:85:49:e3:d0:89:3e:ca:7b:5c:e8:3a:bb:6b:d3:85:
2a:d9:de:e4:a2:48:29:ee:e2:02:55:8b:7f:5c:41:aa:96:7f:
71:59:f0:68:2c:a9:c0:22:15:b3:c7:e6:e5:ea:e7:0f:52:12:
99:36:7f:8c:9d:a7:b1:e8:4b:28:de:d1:ad:27:6c:7e:2c:4d:
3d:e2:72:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 00:57:38 2025 by rpki-client