Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/nsFCvKKqa5DbTsNR8GN_56HEWls.roa
File: nsFCvKKqa5DbTsNR8GN_56HEWls.roa (raw, json)
Hash identifier: x/0T0brOpxvAoBnNrAFmAWrkQ+pl6O8M9bmPzfELAp0=
Subject key identifier: 9E:C1:42:BC:A2:AA:6B:90:DB:4E:C3:51:F0:63:7F:E7:A1:C4:5A:5B
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0AB0
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/nsFCvKKqa5DbTsNR8GN_56HEWls.roa
Signing time: Wed 21 May 2025 08:08:17 +0000
ROA not before: Wed 21 May 2025 08:08:17 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2736 (0xab0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 21 08:08:17 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=9EC142BCA2AA6B90DB4EC351F0637FE7A1C45A5B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:5b:d2:bc:8e:12:28:91:5a:71:1b:e0:b5:bd:
bf:be:b8:9a:35:15:67:c9:a5:56:c4:ea:4f:88:d5:
b7:c6:a7:7a:57:07:b2:2b:c2:7e:15:66:6b:4c:e2:
58:a5:61:de:50:ae:5f:47:f4:e5:65:ed:2c:18:04:
eb:c0:02:50:7f:a7:6b:ad:69:49:ba:ff:03:f2:e3:
ec:8f:c1:1d:9d:8c:20:63:b1:05:c1:8a:f3:59:86:
a0:9a:25:58:7d:3f:f2:6d:7e:ae:a8:15:1f:8b:c3:
c3:4c:f6:32:13:cd:cd:61:31:82:a9:17:a8:b2:d8:
87:cd:a9:39:8f:95:85:ce:e8:62:f5:e7:9b:b0:ba:
eb:f4:09:e8:5d:9d:14:c5:33:99:90:02:90:da:0a:
6b:8b:db:7f:76:a2:09:f1:f2:4a:5a:b0:c3:85:49:
3c:68:c6:46:cb:a8:75:99:ca:31:e0:47:b7:da:fa:
70:3c:ad:f5:65:42:93:bc:e1:89:c8:73:6e:09:b9:
76:6b:28:77:8a:9a:2a:79:77:02:08:b3:a8:ef:eb:
17:99:78:08:6b:1f:70:aa:0e:68:12:51:be:2b:81:
ca:b6:d4:ab:73:06:90:94:ab:17:04:e0:0f:a5:57:
fa:8e:b3:12:5b:6c:95:32:8a:f8:14:cb:b0:55:ec:
79:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:C1:42:BC:A2:AA:6B:90:DB:4E:C3:51:F0:63:7F:E7:A1:C4:5A:5B
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/nsFCvKKqa5DbTsNR8GN_56HEWls.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
20:a9:8d:ee:d0:14:d9:2e:b0:7f:0f:31:c2:db:5b:51:4e:f8:
d3:76:94:6b:60:4a:30:d4:88:23:b1:58:72:b9:bf:f7:c0:79:
e9:c1:e8:91:82:3c:a2:6b:87:f5:71:69:d8:c5:1b:3a:8e:ee:
d8:f7:f0:57:df:25:6a:01:7d:18:0a:bb:52:db:40:b5:d2:6e:
b0:22:1f:28:14:1c:05:0b:92:44:65:30:81:97:4d:d2:1d:cd:
5b:69:bc:06:ee:15:2d:7f:e0:ca:e0:d3:4d:5d:64:29:4a:de:
9e:92:a3:0a:1b:37:6d:13:1c:8d:89:0c:e5:ae:cc:f4:63:e0:
cd:cc:42:5c:c9:ce:62:43:5a:15:fc:90:dc:7f:cf:36:63:cf:
40:7d:3b:69:76:67:3b:40:5a:dc:f1:2a:2e:42:8c:da:21:10:
17:d8:af:27:26:57:23:9a:5e:2d:50:57:1e:09:80:67:ae:44:
53:a1:87:f1:58:09:a5:75:96:c1:2e:88:fc:49:a0:62:2f:fc:
dc:82:9b:22:de:2b:0c:cf:e4:59:cb:e6:e7:4b:0a:e3:9a:b1:
85:24:6e:31:69:0e:1a:4f:e3:a9:29:09:73:b3:91:1c:d2:2e:
e7:db:03:9b:83:84:59:bd:cb:65:5a:19:62:d9:c7:e6:d9:80:
d0:b3:4f:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 01:27:37 2025 by rpki-client