Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/dMZKL5HYCv7QU5cjcgSmqoTzAWQ.roa
File: dMZKL5HYCv7QU5cjcgSmqoTzAWQ.roa (raw, json)
Hash identifier: p+1YdcRabBuMKuLNHaUMlQzHtSzijxAI+urU+7h1kkY=
Subject key identifier: 74:C6:4A:2F:91:D8:0A:FE:D0:53:97:23:72:04:A6:AA:84:F3:01:64
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 05DC
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/dMZKL5HYCv7QU5cjcgSmqoTzAWQ.roa
Signing time: Wed 14 May 2025 21:38:01 +0000
ROA not before: Wed 14 May 2025 21:38:01 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1500 (0x5dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 14 21:38:01 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=74C64A2F91D80AFED05397237204A6AA84F30164
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:1e:ea:8d:03:4f:a1:13:16:2c:e9:a2:31:36:
d1:ac:96:b2:ea:ff:c7:38:10:99:44:49:4f:16:7c:
64:50:f8:8b:7c:d8:93:80:d1:82:46:e7:66:93:d3:
ca:2f:1b:6d:e2:6a:b8:8d:f0:1c:ab:0f:49:93:2b:
0b:d9:e1:f5:64:91:72:91:98:11:54:5c:c1:3d:86:
c2:f3:2d:ae:70:74:5a:47:fd:66:0b:35:52:ca:d8:
16:71:19:18:4b:0a:91:a6:9b:cc:29:44:82:d1:20:
be:27:be:f0:01:a8:97:69:9e:54:24:3f:64:57:8f:
c2:d5:f2:3c:c2:81:bb:7a:e3:a9:18:5c:cb:09:3f:
38:0f:d5:2a:74:49:6d:7b:29:a5:e2:7a:ac:a6:eb:
d4:02:ac:92:5a:44:8f:bc:d7:fe:f3:62:e7:f3:e1:
e2:f8:d1:ae:45:34:d3:c2:ae:fb:39:75:0f:6f:87:
cb:5b:db:66:00:19:fa:64:ec:45:e7:1a:a4:3d:4a:
3c:46:5b:23:01:15:90:1c:16:3f:26:03:17:2e:cc:
af:30:b7:db:63:7e:1a:2a:75:de:8b:67:5b:2c:7e:
ad:3b:b1:61:a6:21:38:38:a5:9e:d4:b9:bf:c0:df:
1e:09:b7:ab:ad:d0:de:99:ea:4e:a9:57:13:ef:e8:
02:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:C6:4A:2F:91:D8:0A:FE:D0:53:97:23:72:04:A6:AA:84:F3:01:64
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/dMZKL5HYCv7QU5cjcgSmqoTzAWQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
3f:4b:de:f1:d8:b0:db:33:26:18:cd:f5:0e:b5:6f:f8:2f:bf:
b8:cb:54:89:a3:06:49:0c:1f:99:48:f7:b6:70:e9:c6:61:5a:
fd:ef:a9:dc:49:0e:15:dd:10:82:78:25:74:5f:e5:86:b9:04:
4d:86:52:d1:6d:c6:55:08:e6:fe:38:09:e1:2f:b2:3a:c7:51:
df:80:6b:47:a0:e1:86:ab:36:e2:90:5e:58:1a:e5:3b:04:20:
bd:bc:ab:0e:d9:0b:b9:f2:cd:be:8e:16:60:7c:e9:17:da:d3:
1f:63:87:3f:3d:ce:a8:11:74:c3:21:52:8d:75:33:1a:d4:cc:
84:19:c7:bc:e1:6f:a0:8a:f7:73:7d:ae:ad:cd:21:73:a9:4b:
9d:7e:b8:ac:39:2f:6f:e9:c0:34:29:f1:94:ec:54:3f:ad:dc:
da:42:03:1f:d3:a7:8a:1f:5e:93:c6:eb:0f:53:2c:2b:36:99:
e7:5d:f1:ec:97:12:a9:92:9d:d3:f5:bc:13:5b:d2:f4:a7:dc:
e3:6c:12:d9:6a:be:4f:d2:c9:70:eb:b4:d8:99:97:76:22:58:
23:a4:96:30:ab:2c:c1:13:42:4c:66:64:58:78:5f:01:d0:08:
d3:82:cf:fc:ab:93:dc:2c:dd:b1:d0:26:64:a4:a5:df:47:70:
05:f0:7e:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 02:02:46 2025 by rpki-client