Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/o2W3p8zvlcm0rh_7frhyok6_Eqk.roa
File: o2W3p8zvlcm0rh_7frhyok6_Eqk.roa (raw, json)
Hash identifier: cEZP8rmYhRXumNX0v05iNIFnhOKYdv7H+1lBDNn/PKc=
Subject key identifier: A3:65:B7:A7:CC:EF:95:C9:B4:AE:1F:FB:7E:B8:72:A2:4E:BF:12:A9
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0B50
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/o2W3p8zvlcm0rh_7frhyok6_Eqk.roa
Signing time: Thu 22 May 2025 04:09:02 +0000
ROA not before: Thu 22 May 2025 04:09:02 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2896 (0xb50)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 22 04:09:02 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=A365B7A7CCEF95C9B4AE1FFB7EB872A24EBF12A9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:0e:42:a9:b2:45:35:5d:60:83:9f:1b:89:cc:
9a:2f:f7:be:b3:fa:8d:89:d1:69:31:b3:3e:22:41:
48:4e:de:9d:9a:7a:b3:10:52:60:1c:b5:bc:50:65:
30:a9:53:02:aa:33:61:05:88:de:bd:8d:6c:15:53:
9c:7a:41:cf:d1:82:9b:dc:47:35:fa:3a:3d:79:c4:
c0:e0:64:85:84:58:f8:19:6e:73:3c:66:a5:04:d9:
95:dd:f2:8d:09:f8:fe:a5:e5:c3:58:17:80:75:9a:
e0:e2:db:77:a0:d2:41:5b:8f:24:26:9c:62:15:d9:
2c:80:09:c8:ad:cc:6b:e6:f1:68:28:27:da:16:cb:
c3:a1:48:36:ad:16:2d:0a:8d:6b:f8:4a:43:c6:d4:
e2:fa:ee:10:80:1e:26:d4:c8:f2:3d:d4:ab:8b:05:
a9:8f:ef:68:2e:ec:33:45:17:0a:36:56:84:15:f8:
2f:7b:99:50:a7:bc:d8:ef:b9:23:fd:3b:d0:ad:73:
d5:14:cc:65:47:d4:cd:ca:bc:af:d4:c0:84:04:f6:
08:1e:e3:18:19:04:7e:43:60:3f:96:27:f9:81:a5:
69:29:66:f0:46:a7:fc:fc:68:50:60:34:4a:e2:c6:
d0:95:33:dc:dd:51:60:02:a8:60:37:5b:0b:d8:95:
cf:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:65:B7:A7:CC:EF:95:C9:B4:AE:1F:FB:7E:B8:72:A2:4E:BF:12:A9
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/o2W3p8zvlcm0rh_7frhyok6_Eqk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
72:94:cf:06:b8:d8:0f:4d:8c:c9:94:17:e1:31:e5:cd:b4:97:
c9:aa:e8:99:05:31:23:99:55:f3:95:10:38:c4:6b:15:57:b2:
f1:5e:dd:fa:c7:09:8a:92:52:02:dd:26:de:f7:12:b2:5e:2f:
9f:ae:2f:f3:04:be:b4:48:f2:02:13:0a:88:09:1f:f7:36:95:
77:94:37:05:3d:53:64:de:c2:c6:3d:6a:51:82:e3:61:5e:f1:
10:f4:7f:a5:bd:d9:8a:75:69:95:5f:7c:b0:b2:b6:d2:e2:ae:
c7:8d:8d:be:d2:45:e8:6d:45:54:b1:02:22:26:a1:f2:e4:34:
2b:fe:aa:4a:13:a0:1c:cd:40:54:ec:9e:d5:45:2d:45:92:c1:
6b:89:2d:08:e6:5c:0a:e3:8f:cb:0d:ec:79:1c:2e:5f:ae:29:
84:fa:1e:b4:bb:d0:ea:10:0a:0c:7a:8a:e3:99:84:f7:eb:9e:
91:f5:28:7b:38:c2:d8:bf:a1:52:e9:3c:1d:0d:2e:32:0d:97:
32:09:4c:b2:0b:36:75:aa:95:53:1c:05:b3:eb:0f:62:75:7b:
ae:9e:f2:de:a2:a8:37:eb:fb:47:f2:9e:02:ca:70:d6:07:34:
f1:17:9a:73:53:d5:3d:80:88:0f:ac:97:ad:12:db:26:5e:21:
cb:ae:ab:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 20:27:10 2025 by rpki-client