Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/_Ukku_uYZ3pv2UQixOQSZwRpQmM.roa
File: _Ukku_uYZ3pv2UQixOQSZwRpQmM.roa (raw, json)
Hash identifier: QurusyoudkFhOikp0J2j89uZ464DugRvk/muLzpVJaI=
Subject key identifier: FD:49:24:BB:FB:98:67:7A:6F:D9:44:22:C4:E4:12:67:04:69:42:63
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0E44
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/_Ukku_uYZ3pv2UQixOQSZwRpQmM.roa
Signing time: Mon 26 May 2025 02:38:39 +0000
ROA not before: Mon 26 May 2025 02:38:39 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3652 (0xe44)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 26 02:38:39 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=FD4924BBFB98677A6FD94422C4E4126704694263
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:2d:54:04:47:64:91:6d:45:95:fc:8c:a3:64:
c1:36:c5:e2:69:b2:c6:85:82:b5:64:9a:fe:1d:60:
53:a0:36:85:a8:7a:50:4c:f6:ba:7b:9b:83:86:49:
36:b9:45:39:c3:cb:64:37:e8:7a:77:e2:b8:40:be:
f8:f3:4d:b8:99:26:c9:94:5e:04:c7:9a:dc:38:00:
48:cc:12:8e:ac:32:68:42:18:eb:3d:5f:27:aa:da:
f2:fc:3d:4b:b9:d6:2b:e2:95:08:94:aa:3e:41:07:
a1:92:32:a5:46:49:3a:7e:50:fa:a6:40:4b:b9:a2:
ae:48:c0:97:4a:69:e3:b9:55:7d:a4:c1:22:b9:d6:
70:95:7c:64:27:a5:d2:ab:1f:6d:8a:7d:da:94:37:
98:29:c7:47:05:87:7d:b0:73:e2:8a:ca:90:e6:f3:
69:f0:a1:df:a9:bc:1d:3e:24:42:03:88:f0:74:08:
6f:9f:8d:b1:63:32:23:09:30:1b:58:61:8a:f7:5f:
eb:7c:7a:2e:0d:5f:58:44:2a:30:55:77:f4:12:b6:
ef:bb:cc:c0:3e:3e:f4:46:83:55:6e:71:8d:4f:53:
b2:ba:01:00:0d:e5:04:e7:ea:d0:81:fe:d9:fe:65:
84:0f:bc:f4:9d:4a:6b:b7:1a:af:97:7d:fe:4b:8c:
86:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:49:24:BB:FB:98:67:7A:6F:D9:44:22:C4:E4:12:67:04:69:42:63
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/_Ukku_uYZ3pv2UQixOQSZwRpQmM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
18:fe:78:4a:ec:37:a6:ef:c9:0d:d3:5b:e1:29:4c:85:6b:1e:
41:50:19:4d:86:30:a0:f0:7a:ee:04:8e:e1:ce:4a:7f:96:9d:
cb:29:dd:45:db:89:6b:01:9e:88:89:38:7c:b9:a3:c7:06:e5:
89:11:7c:6b:1e:38:ee:68:e3:5e:46:1f:1b:67:df:32:85:25:
11:b9:fd:30:1c:2a:57:a3:41:42:84:70:55:2a:70:d1:e6:86:
6f:f2:f5:71:58:9b:cc:ad:22:e2:78:ec:19:fb:74:02:f5:c8:
73:75:1f:d2:3f:7b:2a:9e:c0:a4:0f:8c:b6:0f:c7:55:09:db:
3c:19:df:a7:9d:7a:1a:25:9a:68:cd:49:7e:74:bd:68:b4:9d:
c3:80:c8:c7:ed:b1:22:cc:25:ab:10:d4:86:74:39:ed:d9:4d:
f2:82:7e:fb:aa:d4:11:1a:11:1e:a3:07:b7:2c:f2:5b:d0:1b:
85:ec:11:29:da:5f:49:c4:55:bb:af:91:59:7e:84:34:8c:97:
ec:a6:2c:2e:c5:87:47:23:96:34:2f:4b:85:e6:0a:ae:89:ae:
93:9a:c1:4a:d1:a1:97:24:a2:27:cd:c1:ae:0b:9a:69:46:4c:
12:fe:54:e3:3f:59:25:b3:dd:8e:50:5a:2e:89:44:33:86:d7:
7a:7e:54:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 00:40:06 2025 by rpki-client