Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/Xv8TuubZ0qdQC3b1l6GVUmgq7y4.roa
File: Xv8TuubZ0qdQC3b1l6GVUmgq7y4.roa (raw, json)
Hash identifier: 1SX220s9ArX08qP4R2iSQmzKeBuVgWauijThoDxltMA=
Subject key identifier: 5E:FF:13:BA:E6:D9:D2:A7:50:0B:76:F5:97:A1:95:52:68:2A:EF:2E
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 02DC
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/Xv8TuubZ0qdQC3b1l6GVUmgq7y4.roa
Signing time: Sat 10 May 2025 21:37:51 +0000
ROA not before: Sat 10 May 2025 21:37:51 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 732 (0x2dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 10 21:37:51 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=5EFF13BAE6D9D2A7500B76F597A19552682AEF2E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a8:d7:b9:c1:53:b3:aa:8c:41:11:d4:f5:77:
5d:54:b4:57:54:2e:9c:df:a7:5c:ad:85:9e:e6:05:
65:e0:90:77:6f:42:e2:5b:f9:2a:fd:d6:c0:a1:4d:
1b:6d:6c:47:d8:a6:c1:69:4c:26:8a:80:f2:e3:75:
98:e0:a6:f1:43:7e:71:0f:7a:46:90:5c:98:1f:b1:
26:c6:33:30:14:88:a4:e4:39:6f:9d:00:b9:a7:59:
03:d4:22:f1:d2:fd:de:49:86:8e:56:a5:0c:09:29:
83:49:60:8e:df:78:30:ee:88:16:c5:f9:bd:84:1c:
e0:db:a4:b8:93:22:d2:c5:6d:d3:74:86:cc:f6:97:
78:f1:c2:98:48:f2:40:b3:98:f8:70:40:68:22:07:
cd:03:5d:f0:8b:df:42:7a:58:cf:ed:d9:6e:66:6d:
0a:3e:b1:b9:e3:65:de:de:5d:7b:b7:fe:1d:83:aa:
85:e0:f9:80:12:56:f3:71:d2:1c:79:5c:ca:fe:c1:
56:7a:89:5e:d9:3a:19:18:25:1b:03:a9:73:80:ad:
ba:d0:6b:3a:89:52:6e:be:2b:c1:2e:17:9a:18:0a:
db:e6:cf:5e:77:c8:0d:87:86:08:da:9a:05:3b:7c:
90:e3:f2:8c:39:b4:ca:ee:f7:ae:30:d6:01:da:e0:
e5:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:FF:13:BA:E6:D9:D2:A7:50:0B:76:F5:97:A1:95:52:68:2A:EF:2E
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/Xv8TuubZ0qdQC3b1l6GVUmgq7y4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
16:71:5a:24:53:44:4f:6d:af:80:6d:c4:ba:4b:b0:f5:0b:6e:
1c:69:c4:25:e1:4b:88:7b:69:84:c7:b1:f4:48:de:22:94:77:
24:ba:a8:30:0e:a7:4b:e5:fb:73:de:c5:09:2c:65:3a:2a:43:
7a:53:62:20:08:78:d7:82:9d:ef:ba:a9:bf:55:d2:9d:27:af:
ae:18:8d:14:10:0e:94:d8:72:18:0c:2d:fa:d5:2c:b8:db:fb:
f0:43:2a:65:32:b1:bb:47:99:66:2e:3a:1f:33:43:a4:dd:42:
f4:9b:6d:30:e6:d9:2b:97:c1:d5:f7:ae:70:f0:c9:32:0d:2a:
8f:82:4d:df:8f:63:11:5c:f6:55:9d:4c:09:a7:8a:64:6d:b8:
43:61:97:d6:17:63:35:08:13:b8:91:24:19:73:42:c3:de:bd:
96:6f:e8:a2:45:46:49:ce:83:10:a8:83:8d:1e:ee:61:a8:59:
a6:17:c1:5f:cc:3c:64:7c:e6:cd:cf:4d:09:ec:30:af:78:0f:
aa:1a:86:fb:d0:91:30:0b:53:b0:ba:44:9f:12:36:09:8c:77:
ac:3b:e6:ea:56:22:d9:df:50:ee:60:60:0e:f2:60:20:d9:f9:
f9:5a:d6:e4:29:4a:8a:3b:69:b3:c3:f9:86:a5:f8:23:ae:31:
36:97:ca:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 01:13:58 2025 by rpki-client