Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/pogkj_r9WHPHC-T6jOL5-k5z3CQ.roa
File: pogkj_r9WHPHC-T6jOL5-k5z3CQ.roa (raw, json)
Hash identifier: /PmHzjN9GLfrakLXO8jvcJzusWMnW0XBl71j4bitbXM=
Subject key identifier: A6:88:24:8F:FA:FD:58:73:C7:0B:E4:FA:8C:E2:F9:FA:4E:73:DC:24
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 03EC
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/pogkj_r9WHPHC-T6jOL5-k5z3CQ.roa
Signing time: Mon 12 May 2025 07:46:47 +0000
ROA not before: Mon 12 May 2025 07:46:47 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1004 (0x3ec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 12 07:46:47 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=A688248FFAFD5873C70BE4FA8CE2F9FA4E73DC24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:8a:05:63:f3:c2:47:e5:02:fb:ae:e5:1f:d1:
c4:10:25:d0:fc:46:33:d8:23:22:14:e7:e0:c9:1c:
24:5e:0b:5c:26:51:0e:5d:fd:f7:6e:c0:47:79:a4:
88:57:bb:a7:cd:e9:05:92:7b:49:37:89:4a:91:3d:
96:a8:f8:fe:a9:96:f1:19:5c:2c:1d:af:ac:8a:48:
86:4a:6b:31:12:c8:98:7b:85:be:c1:07:8f:cb:ec:
05:52:92:d1:1f:56:5a:e7:c2:5b:e3:02:d2:15:5f:
c4:bb:f0:83:ef:31:3b:e4:12:06:5b:83:86:a9:5f:
62:91:94:3c:b6:08:b8:47:2a:52:71:29:2e:ca:99:
0d:0c:15:70:e3:e0:de:1f:cc:cd:59:10:9c:cb:32:
9e:8f:55:50:a4:28:b9:7a:96:03:8f:ab:db:aa:16:
7b:35:58:f2:64:be:0e:03:25:64:13:14:4a:0d:5c:
38:0e:00:5e:de:1e:49:7a:0a:41:23:5c:36:0e:81:
1d:6e:2b:77:b7:06:af:16:35:fe:4b:ec:ba:78:79:
09:d9:d1:d0:12:84:6e:18:c2:52:3d:87:98:a0:f3:
2d:93:63:29:95:1a:f0:05:bb:c8:73:3d:91:2a:55:
b4:9e:d4:fe:51:4d:fb:53:74:eb:3c:bf:02:a4:51:
a2:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:88:24:8F:FA:FD:58:73:C7:0B:E4:FA:8C:E2:F9:FA:4E:73:DC:24
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/pogkj_r9WHPHC-T6jOL5-k5z3CQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
74:b6:10:b4:29:d3:c5:5a:92:48:d7:69:cf:8d:43:4f:bc:c9:
86:d5:c3:22:31:dc:ba:68:42:c0:c5:32:eb:a0:fc:27:a6:fc:
0d:2e:c8:a7:04:5e:21:7a:11:00:43:e8:33:96:42:bd:40:be:
02:61:4b:0d:ad:51:6b:b9:f0:47:77:d5:96:75:9b:84:ed:ea:
88:75:05:75:78:64:fa:44:0b:c5:ab:9e:7e:05:83:9a:ba:a4:
e0:24:06:d8:26:74:9e:c9:fa:11:69:12:31:b3:80:80:16:8f:
03:34:03:98:e5:5a:ae:27:75:93:02:7d:02:bd:b2:f0:d9:c0:
63:e9:61:7f:a5:ff:b6:e3:d6:c2:de:9b:c6:a2:0c:96:f4:9b:
63:7b:c5:3e:58:1a:a9:20:c2:5a:9a:67:d9:88:fb:32:a4:34:
17:58:63:7b:c7:3a:73:28:97:a1:36:f6:ef:a5:93:b8:d5:32:
f3:44:35:eb:3c:ac:a5:6b:d2:d5:bf:e2:91:4c:1b:c6:06:61:
b1:ef:b7:10:54:0a:1f:56:cc:b5:57:a6:7d:e4:ed:2d:cc:ec:
19:9f:8b:89:34:f3:e2:b5:9c:51:97:2e:44:fc:72:75:c7:e7:
fc:4b:71:77:c9:ff:27:0e:ba:16:68:b8:bb:eb:99:5d:ba:e7:
1f:0f:f2:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 00:43:07 2025 by rpki-client