Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/UFS_xfNS0V6Or6Ml5UKclw1dlRA.roa
File: UFS_xfNS0V6Or6Ml5UKclw1dlRA.roa (raw, json)
Hash identifier: 8m3Njp52jTQsAb+D8QgfbGgd1urHXMOLnCzRVpCVGxg=
Subject key identifier: 50:54:BF:C5:F3:52:D1:5E:8E:AF:A3:25:E5:42:9C:97:0D:5D:95:10
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0290
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/UFS_xfNS0V6Or6Ml5UKclw1dlRA.roa
Signing time: Sat 10 May 2025 12:07:52 +0000
ROA not before: Sat 10 May 2025 12:07:52 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 656 (0x290)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 10 12:07:52 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=5054BFC5F352D15E8EAFA325E5429C970D5D9510
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:64:7e:11:13:b7:cc:c5:59:b0:0d:4a:7d:3c:
b6:d2:31:f4:38:7f:ea:51:b3:35:be:6d:f1:ef:0a:
45:5b:fc:42:7f:a0:e3:8d:c6:14:61:f3:b8:b4:b6:
64:90:e0:ab:a9:dd:9a:d0:c3:74:d4:5a:3c:d6:53:
1c:fa:a5:68:44:7c:16:27:58:01:fd:ce:54:a0:67:
0f:6f:19:69:08:7d:f6:ca:a9:38:1f:32:95:54:79:
53:18:1e:7c:32:e3:95:e2:cf:c4:b3:4d:15:d1:b4:
80:1a:eb:67:0e:77:b8:3c:cf:b3:33:d9:9a:44:76:
c7:9d:0f:c2:95:07:8a:64:c2:67:62:ad:46:ca:9d:
3b:94:f0:a9:78:49:2e:9a:30:0a:58:80:35:81:2e:
7d:25:74:65:f3:57:91:fc:be:b8:73:8b:d8:5e:33:
df:e9:5c:82:cb:17:70:ce:f5:57:b3:6b:16:c6:ff:
69:d9:f5:99:3d:60:34:84:23:11:56:48:85:14:f2:
8c:c5:f7:db:ee:bb:5b:a4:4e:64:ba:f4:73:86:82:
f1:98:89:80:98:e7:9c:3a:f9:4f:21:c6:f0:67:9f:
ec:9c:66:fe:ee:5e:ae:b6:ae:81:4a:0e:8b:cd:ee:
7c:6d:45:2b:c5:87:ce:48:b3:a9:9a:05:9a:cd:51:
0e:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:54:BF:C5:F3:52:D1:5E:8E:AF:A3:25:E5:42:9C:97:0D:5D:95:10
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/UFS_xfNS0V6Or6Ml5UKclw1dlRA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
0f:d9:50:3f:2e:2a:f0:ae:92:14:46:5e:02:7b:49:2d:8b:63:
05:9d:f5:47:01:ad:09:8e:8d:5d:77:e9:f8:3d:30:82:aa:12:
00:de:61:96:cf:cc:36:be:43:f0:41:ae:0a:d2:fd:4f:9f:00:
7e:1c:ee:5f:44:48:e9:f4:bf:ef:65:88:c8:17:cc:37:81:7c:
be:3e:ed:de:7a:09:c4:fe:f4:5e:61:20:5c:09:6d:08:fc:be:
4a:14:d3:ef:03:78:23:c0:be:4c:e3:94:12:a3:5b:f0:7c:9d:
a3:b8:01:fa:75:5d:8b:b4:68:35:98:5b:d7:c5:6d:3d:97:60:
66:bc:23:d7:aa:77:e5:73:03:84:ef:ee:f5:41:98:7f:ed:59:
93:4b:3f:71:92:21:8a:e8:0c:77:12:08:92:8a:a3:97:f5:59:
dd:e9:ce:41:4e:33:90:5a:b3:56:6c:14:eb:9b:73:23:f4:e8:
01:4c:ca:d6:cf:3b:10:a8:a7:29:b9:5c:fe:d7:ed:f2:1b:2e:
ae:fc:8c:77:c2:68:45:f0:79:ef:5a:46:65:e5:8e:04:b3:10:
98:39:d4:0d:6e:db:a1:a5:19:33:3d:32:68:da:27:a0:2c:56:
5e:8d:8e:c3:80:af:50:16:f5:c8:ef:6d:f1:e7:71:95:83:74:
94:4a:e0:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 20:29:49 2025 by rpki-client