Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/UOEll2_3jZxcnTN9FGPy75WCqVE.roa
File: UOEll2_3jZxcnTN9FGPy75WCqVE.roa (raw, json)
Hash identifier: 0MklWAHqb2XfxQpk/yM1gW10lMMvH2qZpdRP5c0KMzU=
Subject key identifier: 50:E1:25:97:6F:F7:8D:9C:5C:9D:33:7D:14:63:F2:EF:95:82:A9:51
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 2378
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/UOEll2_3jZxcnTN9FGPy75WCqVE.roa
Signing time: Mon 23 Jun 2025 20:42:01 +0000
ROA not before: Mon 23 Jun 2025 20:42:01 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9080 (0x2378)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 23 20:42:01 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=50E125976FF78D9C5C9D337D1463F2EF9582A951
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:22:c6:c4:89:74:bb:7a:2f:f1:42:4a:84:0e:
93:94:7a:d0:dd:bd:f2:82:28:85:35:6a:d7:60:01:
66:9f:d4:eb:aa:80:f6:0a:b4:54:1a:0d:49:01:5c:
e4:2f:61:32:d5:ec:1b:4a:5b:d0:7c:09:52:db:f8:
f4:40:e5:4f:34:2f:90:20:86:a6:1e:f2:24:42:b0:
eb:9d:e6:31:31:08:ab:fe:ff:dc:84:86:9b:19:54:
b1:e5:1e:d5:ec:4f:8b:42:e6:29:6c:fb:9a:7f:e4:
12:7b:38:f3:6c:fd:41:e5:cd:1c:fb:6c:f3:86:e1:
f8:05:6a:e3:80:2d:ce:d7:4a:a1:a7:16:fb:c2:9e:
d0:8b:23:3d:1c:cd:de:58:db:8a:e0:0b:0c:f9:6d:
10:77:ba:bc:59:21:c8:ef:92:b3:f4:0e:0f:6f:b8:
c3:f4:47:b8:91:99:63:d6:4e:9c:cd:cd:65:cf:0c:
a8:00:3f:f8:5d:37:31:1f:29:13:4b:e4:91:42:7c:
1b:48:73:68:94:4c:08:f0:e1:10:51:17:3d:fb:ab:
87:1d:ae:33:a7:d8:51:fe:c3:02:4c:7a:8f:51:27:
82:cb:f2:67:d0:00:20:4e:5b:16:17:f3:5a:99:e1:
38:a2:d0:f4:04:f8:37:fb:f2:1e:99:55:84:a3:10:
14:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:E1:25:97:6F:F7:8D:9C:5C:9D:33:7D:14:63:F2:EF:95:82:A9:51
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/UOEll2_3jZxcnTN9FGPy75WCqVE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
16:c6:50:6b:a9:7a:0e:f8:64:89:42:86:c1:9d:b4:58:18:5d:
c1:57:1c:df:9c:a5:ad:12:cf:1e:61:95:80:74:59:e9:1d:69:
24:82:46:f4:e6:51:fc:96:43:71:06:da:10:89:1d:39:f0:31:
05:3c:4b:50:b7:3f:29:c8:cc:9c:6e:ae:92:8c:73:b7:ed:b1:
fe:f9:74:e7:7d:73:06:0e:53:9b:fa:ad:21:22:28:72:b7:45:
6c:52:7c:0a:d0:73:45:fa:f1:d2:bc:cc:f0:2f:36:97:f3:a0:
f2:0f:51:69:5a:6e:4f:c5:12:0e:f8:af:c9:72:59:2f:b2:3a:
b3:44:29:c0:7e:83:ce:4c:9e:b6:a3:3f:11:6e:bb:32:fc:4e:
56:26:6a:be:47:66:91:ee:28:2b:01:70:a0:e0:4b:e7:a4:72:
97:54:74:79:69:95:b6:7d:45:1a:2e:14:8c:6d:e5:08:04:72:
6e:0e:35:fe:70:9b:62:e9:9a:a9:e4:4d:a4:b9:cd:f1:c1:e9:
c4:b0:44:7c:01:20:26:04:6f:c4:60:ae:f4:59:ee:4a:01:93:
3d:94:62:13:5a:3a:7a:3c:9d:c5:62:40:5c:0e:cf:60:62:41:
02:10:d2:d5:fa:93:95:d7:ec:33:44:de:f2:79:34:70:11:d7:
3f:35:4e:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 19:07:10 2025 by rpki-client