Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/rlEOlhS6IlaSdzbAilLWZAmYit8.roa
File: rlEOlhS6IlaSdzbAilLWZAmYit8.roa (raw, json)
Hash identifier: wPNxsmybFcj4LXd/47zTsiNDpa/Q3J/WHCikGacmBe8=
Subject key identifier: AE:51:0E:96:14:BA:22:56:92:77:36:C0:8A:52:D6:64:09:98:8A:DF
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 09DC
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/rlEOlhS6IlaSdzbAilLWZAmYit8.roa
Signing time: Tue 20 May 2025 05:38:25 +0000
ROA not before: Tue 20 May 2025 05:38:25 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2524 (0x9dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 20 05:38:25 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=AE510E9614BA2256927736C08A52D66409988ADF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:10:25:6f:95:8a:c0:fc:b3:c4:12:ab:44:77:
bc:37:6b:4e:93:40:bb:e5:68:a5:25:9c:d1:2d:25:
7d:b5:97:5e:86:1d:c1:35:fa:e8:f2:a2:08:36:8b:
df:e5:04:21:12:59:87:c7:39:55:bb:ee:40:e2:32:
03:0b:e9:32:b2:21:66:d4:12:0b:3d:82:79:17:ea:
11:43:32:ce:bb:3f:80:c1:c4:31:63:11:c8:b0:c3:
bb:66:d4:0d:44:b3:ea:16:93:0b:90:f1:9d:02:2d:
75:80:b4:5f:e9:38:a4:e2:e4:b0:c3:be:6b:b6:e1:
a5:9e:04:39:46:a0:aa:da:ed:d9:8d:99:64:1a:77:
9d:6b:e0:78:4e:9d:06:36:a3:8f:66:50:e9:c0:94:
5a:6b:5d:28:f4:b0:dd:6d:53:aa:57:9f:2d:82:38:
f0:da:22:73:f7:70:d4:e3:e1:86:77:49:0b:5d:c5:
d5:73:7f:0b:a4:8e:bb:fa:19:2d:29:5c:74:40:b8:
76:e2:61:1c:92:bd:eb:fe:d6:e1:42:dd:65:a6:08:
4c:18:b3:39:50:74:3d:d7:8b:a6:ec:01:f8:02:dd:
63:8b:ae:05:67:ed:01:20:49:64:65:39:83:e9:31:
63:d4:57:ce:43:97:16:da:47:7a:eb:4a:3e:25:80:
e5:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:51:0E:96:14:BA:22:56:92:77:36:C0:8A:52:D6:64:09:98:8A:DF
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/rlEOlhS6IlaSdzbAilLWZAmYit8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
66:13:72:ae:35:29:22:93:48:37:c2:a9:ec:4b:14:80:ff:56:
df:e5:4d:f9:25:e3:06:7e:d8:4e:aa:49:49:e7:ca:59:2d:82:
f2:35:99:9c:8c:2c:1c:a5:09:a4:a4:77:a6:5c:88:20:02:6a:
ad:fb:b8:a3:a8:2a:b0:25:15:3a:c2:2e:b1:4b:c7:e1:05:33:
06:9f:7b:d6:99:24:7f:db:1e:af:78:a1:30:46:0c:e4:ef:d0:
db:8a:b6:ed:c3:a6:10:46:14:64:d7:d5:ee:e1:40:9e:25:f1:
b8:60:a9:17:60:0e:58:9d:e7:96:11:98:b1:44:84:f1:05:58:
00:b7:cc:1d:e6:87:83:53:03:06:3d:10:e4:e9:22:45:08:33:
0f:74:3e:26:43:46:44:8d:9a:d0:c5:9b:34:18:5b:81:f8:82:
f9:d8:e1:f4:77:84:5f:63:13:95:c3:62:5e:49:58:f8:1a:dd:
b9:73:c9:e5:f8:c5:96:f1:5e:0b:1d:32:5f:9f:71:e3:fe:35:
c7:e9:b6:fc:fb:41:56:c6:ab:39:3c:93:6e:88:d7:b2:61:f3:
d1:20:83:53:11:10:97:d1:be:ed:8a:ed:18:cb:6c:7d:2a:ec:
7c:88:6f:ca:b7:b1:d5:6a:32:00:7c:ce:20:56:22:96:c4:d6:
17:d1:79:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 02:10:38 2025 by rpki-client