Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/SjWiHUuWKVmBjYWm1n-rFJAw7lI.roa
File: SjWiHUuWKVmBjYWm1n-rFJAw7lI.roa (raw, json)
Hash identifier: VFYS0OCjcEpdIvC6x4moQxRj1lLTD/p2ZUblG5ehjdE=
Subject key identifier: 4A:35:A2:1D:4B:96:29:59:81:8D:85:A6:D6:7F:AB:14:90:30:EE:52
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0AC8
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/SjWiHUuWKVmBjYWm1n-rFJAw7lI.roa
Signing time: Wed 21 May 2025 11:08:18 +0000
ROA not before: Wed 21 May 2025 11:08:18 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2760 (0xac8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 21 11:08:18 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=4A35A21D4B962959818D85A6D67FAB149030EE52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:7d:27:b0:b5:d3:49:82:3a:32:ba:9d:76:07:
fc:57:e4:da:25:17:79:e6:ba:8b:39:da:bb:9d:ad:
98:a6:f9:4a:63:1d:a4:76:35:53:68:65:37:cd:6e:
e4:e6:8e:b9:48:8a:26:b7:81:53:2b:49:8b:8f:d0:
5a:f8:60:71:1a:7f:43:7c:cc:b5:8a:82:22:62:a9:
cf:6d:07:48:78:3d:7a:e5:5f:2f:08:24:b7:4d:7b:
ef:9e:68:8c:2a:44:c7:51:40:00:d0:bd:29:43:56:
7b:6d:f6:9d:87:f6:4d:71:51:d2:43:1a:70:3a:25:
d8:bf:41:fb:7f:6c:75:79:6e:85:ab:06:b5:a6:c4:
7c:75:80:a7:93:ac:b7:aa:6b:75:49:c5:04:dd:44:
87:5a:43:87:e8:d1:fe:3f:86:67:a3:61:56:a5:1d:
0e:c3:87:c9:a5:92:12:7b:aa:3f:3a:7e:dd:7f:eb:
ac:62:fe:8f:05:fb:e6:9c:d5:df:15:ef:39:83:bc:
ed:60:51:9d:d5:4c:ff:b7:f1:8c:76:b8:d2:f8:36:
60:bf:b9:e2:93:f1:fb:c9:fb:6a:bb:79:c0:2c:5e:
a4:62:ba:be:1f:cf:33:81:80:62:72:c8:33:d5:65:
0f:c1:84:84:2e:20:75:c1:c1:8f:77:86:b4:c4:b2:
0a:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:35:A2:1D:4B:96:29:59:81:8D:85:A6:D6:7F:AB:14:90:30:EE:52
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/SjWiHUuWKVmBjYWm1n-rFJAw7lI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
00:95:fe:2b:4b:d9:4a:31:10:5d:e6:97:52:30:cc:aa:92:9d:
2d:36:2a:25:f7:87:60:cd:c4:92:d5:8b:49:c9:3d:f8:e4:07:
0a:cf:99:da:b8:8a:d8:a7:16:21:83:2d:45:4c:d4:1f:eb:c4:
0b:f7:83:15:2a:f1:e9:8d:cf:79:65:be:a6:3a:1c:55:72:45:
cd:38:b9:e2:45:6d:41:8b:ad:2c:87:27:2f:c2:9e:a0:b6:f6:
6b:11:7e:d3:a0:8b:25:98:e7:13:46:a4:ff:db:17:c9:d6:4b:
26:d7:26:94:a3:93:6a:19:2a:19:6a:29:d3:22:14:b5:40:1e:
53:49:32:ac:00:f3:5f:3c:46:49:d6:f7:39:b5:b8:53:5b:4e:
07:a0:e6:3b:c4:55:40:2d:5f:1a:01:d9:0b:95:dd:ca:4a:23:
1f:c0:d1:9c:34:4b:0d:12:8b:72:a5:10:32:08:f6:20:83:dc:
09:ec:c1:2b:c1:db:3b:bd:8b:1b:1a:f6:53:41:01:d3:82:4e:
29:4a:b5:de:68:7e:78:de:9a:33:64:65:d9:10:04:dc:3b:cd:
68:0f:01:1b:e6:fb:ee:ff:b2:f0:be:9f:2f:d9:b6:8a:f4:b9:
40:05:61:1b:45:43:1c:d9:ed:84:ad:4e:4c:0e:a6:84:26:fe:
88:4c:59:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 19:16:04 2025 by rpki-client