Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/XP__o7qZFeKZzoWlpjlpyZuPmHU.roa
File: XP__o7qZFeKZzoWlpjlpyZuPmHU.roa (raw, json)
Hash identifier: N0S9CSMf+9lrUJtWgNWHMnC6xt5ttQ+dQbeUPWtmzOs=
Subject key identifier: 5C:FF:FF:A3:BA:99:15:E2:99:CE:85:A5:A6:39:69:C9:9B:8F:98:75
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0E34
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/XP__o7qZFeKZzoWlpjlpyZuPmHU.roa
Signing time: Mon 26 May 2025 00:38:36 +0000
ROA not before: Mon 26 May 2025 00:38:36 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3636 (0xe34)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 26 00:38:36 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=5CFFFFA3BA9915E299CE85A5A63969C99B8F9875
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:0c:d6:d2:4e:d1:c7:b0:c4:15:98:da:c5:b3:
d4:a4:63:c1:a6:7a:19:1a:f9:8f:e4:52:e5:5f:26:
ea:ef:09:f6:73:61:74:39:a0:b7:48:60:e1:36:b5:
f3:d2:f3:a9:ed:91:9e:59:ab:f6:4b:a1:60:d0:2b:
f6:df:f8:6b:d3:73:01:ed:7d:5b:cf:7d:73:3f:42:
8c:0f:62:d1:d5:a8:62:a3:a2:16:e8:72:6c:a7:1c:
ef:c8:55:90:17:89:48:46:ff:b7:70:57:54:cc:9e:
4a:22:de:43:fa:57:95:68:b0:2a:3d:1f:eb:35:ae:
02:65:a2:5e:dd:14:be:48:f4:67:04:27:38:32:08:
23:06:91:e7:da:2e:7f:51:09:3a:7f:f8:f8:8b:58:
9b:09:f8:60:e0:e5:7e:12:e5:ac:69:24:01:c1:f6:
e0:50:ee:6d:b3:c3:6f:df:72:cc:46:53:17:ff:8a:
da:75:0b:d4:a7:7f:54:45:ff:83:0d:7c:a0:31:2e:
7f:0c:b7:31:fd:6d:f9:c5:7c:a1:03:4c:21:1e:b9:
a1:27:24:56:ff:88:90:93:0d:78:83:a2:6e:ce:ae:
71:dd:e9:6d:10:a7:ef:b9:8e:de:33:17:1e:82:d6:
6d:7e:4c:47:b6:62:3a:b1:d3:06:53:e2:39:aa:e2:
c2:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:FF:FF:A3:BA:99:15:E2:99:CE:85:A5:A6:39:69:C9:9B:8F:98:75
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/XP__o7qZFeKZzoWlpjlpyZuPmHU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
6b:c5:64:c6:15:f1:f3:8e:49:dc:9d:48:6a:d6:60:3f:ef:e2:
c4:e4:62:4c:50:f0:fe:b9:e0:f4:b5:03:ba:3b:c1:d8:43:79:
88:28:82:a7:1a:e9:34:d7:ee:6e:6f:55:f1:93:23:29:84:23:
19:f7:94:90:23:fd:0c:80:69:25:20:1d:26:b3:f9:91:51:67:
9d:a2:8b:34:5d:0a:ec:d4:a5:17:8a:5d:df:2c:03:de:71:fe:
64:3f:fb:c7:06:f1:8b:e2:fd:f9:59:49:27:61:ed:0a:ef:08:
30:3b:0e:a1:1f:29:c1:7f:0d:fd:3b:bf:d7:4a:e1:90:02:fe:
97:b5:88:81:77:19:03:b8:da:63:39:a7:24:e5:74:10:0d:fd:
99:58:2f:d7:86:17:5c:bd:ea:90:7c:fa:93:49:17:30:5f:d8:
7d:9d:f4:51:66:81:75:53:3c:4f:1f:96:a7:4d:e0:04:75:65:
52:74:ca:b4:59:f6:a8:0f:10:41:1e:20:5d:81:e6:42:b5:53:
1c:50:9a:50:66:fc:80:f7:4f:36:a3:3b:b9:1b:e3:89:ef:80:
34:c0:47:04:38:8f:1d:8f:dc:d7:06:c7:1e:ae:0f:8f:5a:a4:
f2:ba:09:13:98:11:68:61:d0:d2:42:3f:33:b1:6e:9d:e0:28:
08:05:24:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 01:03:45 2025 by rpki-client