Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/eX-cSVvVJWhcgokUfAga7WW7nPk.roa
File: eX-cSVvVJWhcgokUfAga7WW7nPk.roa (raw, json)
Hash identifier: koJZJf2mpGl9EuCrrgR9pt8pO13eHXYYfivIBk0+dGk=
Subject key identifier: 79:7F:9C:49:5B:D5:25:68:5C:82:89:14:7C:08:1A:ED:65:BB:9C:F9
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0998
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/eX-cSVvVJWhcgokUfAga7WW7nPk.roa
Signing time: Mon 19 May 2025 21:08:13 +0000
ROA not before: Mon 19 May 2025 21:08:13 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2456 (0x998)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 19 21:08:13 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=797F9C495BD525685C8289147C081AED65BB9CF9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:dc:f0:09:49:3d:b3:a5:a7:59:5b:76:0d:c3:
bd:a5:38:fd:5c:6c:e3:18:24:ed:b6:00:ba:09:a8:
b3:5e:28:6b:ee:1f:4b:a3:e9:f4:98:99:da:87:b4:
03:89:fa:99:62:9b:82:26:a2:d9:d6:21:4d:a2:78:
22:ef:1b:df:5b:5c:3d:2d:f4:c9:4c:ca:8a:b1:67:
a6:ad:aa:29:ff:6e:4d:f5:82:bb:01:45:97:b0:bf:
8f:7e:ad:ed:ca:a0:a1:c2:28:7d:62:0f:58:ad:c0:
ef:7f:5d:61:4d:2f:55:42:3f:af:45:d5:44:e5:2a:
f5:b5:ae:8c:f4:26:5c:5d:02:bb:f4:f8:87:27:e2:
22:7f:9a:6d:a3:8f:6b:ce:dc:51:17:0d:c4:58:e7:
f5:36:e8:94:8c:da:9c:76:72:ea:0c:96:b6:af:62:
0a:8a:39:3f:a5:a3:ce:76:e5:eb:f1:7a:f7:ab:e3:
e2:ac:f3:15:b4:9e:11:70:5f:33:46:39:13:38:bb:
34:58:4e:a6:69:08:68:6e:26:9a:63:fe:de:6d:10:
b7:a8:97:ab:c6:cf:04:56:75:bd:af:43:2b:be:f6:
bf:35:09:1b:1f:44:cb:41:32:85:4d:ab:01:dc:cd:
b5:01:25:19:8b:63:6c:3a:a0:ef:cc:84:12:f1:e6:
90:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:7F:9C:49:5B:D5:25:68:5C:82:89:14:7C:08:1A:ED:65:BB:9C:F9
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/eX-cSVvVJWhcgokUfAga7WW7nPk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
8f:da:95:c9:7a:61:68:fe:69:a5:0d:b2:4b:75:1b:92:4f:33:
d5:db:27:e6:83:5c:25:28:4b:1f:eb:52:f8:04:09:48:f1:88:
61:50:1b:53:09:ec:6e:b1:0e:10:3d:f0:19:ed:30:87:86:f7:
00:45:9a:7c:58:9a:ba:68:f3:b9:95:29:90:ce:d5:48:9c:a0:
e8:ed:b1:74:66:4a:42:6f:98:2c:98:38:26:c7:0c:79:67:41:
3c:51:7c:c0:93:e9:4c:09:5d:60:64:13:aa:db:7f:ec:be:fe:
10:7e:1d:51:07:c5:f7:d5:4e:56:1e:e7:85:cb:66:c4:d6:91:
a6:a7:3f:d7:f0:75:df:6f:ba:fa:78:15:69:7e:28:c8:54:8a:
f3:8e:88:67:29:84:04:e0:33:04:8c:a8:60:be:64:8b:d8:33:
9a:07:75:05:32:2c:b8:7c:fb:fb:f4:72:98:93:1f:2f:8a:40:
60:6d:52:4b:c8:93:18:c0:40:38:46:23:c6:9b:5a:8f:a1:2e:
32:79:05:7b:fd:6f:70:62:d8:79:f8:29:c0:34:f7:96:c6:20:
f4:7e:9d:45:91:21:a1:06:59:7e:e9:b7:6c:a2:ad:22:75:dd:
08:96:01:40:fb:b0:b0:58:dc:71:57:bb:4e:22:18:02:f1:fc:
ae:36:4a:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 01:35:50 2025 by rpki-client