Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/rzGs-YmyodJ1lGzm5zMCu9VBzUs.roa
File: rzGs-YmyodJ1lGzm5zMCu9VBzUs.roa (raw, json)
Hash identifier: CV5GMlIHLsGNUu4G8nlGhV8aWny8HDRgkU13yj3cL+Y=
Subject key identifier: AF:31:AC:F9:89:B2:A1:D2:75:94:6C:E6:E7:33:02:BB:D5:41:CD:4B
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0110
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/rzGs-YmyodJ1lGzm5zMCu9VBzUs.roa
Signing time: Thu 08 May 2025 12:07:42 +0000
ROA not before: Thu 08 May 2025 12:07:42 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 272 (0x110)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 8 12:07:42 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=AF31ACF989B2A1D275946CE6E73302BBD541CD4B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:e3:86:77:80:9f:9a:c2:d9:6e:eb:b4:87:90:
c2:64:76:b3:a8:c4:d0:3d:92:b6:74:fd:05:f6:a5:
6b:44:5f:c2:ce:54:e3:b4:e1:a4:fc:97:08:f3:2d:
13:cb:39:e7:24:18:94:55:42:86:18:f6:21:cb:9b:
bb:c0:51:b0:ff:f5:c4:1b:29:b7:84:d9:f5:82:05:
ad:5a:6c:12:ba:1f:d8:18:23:40:a8:7a:49:a3:d2:
e4:27:40:7a:c9:34:44:4f:8c:53:89:b9:b2:26:28:
25:98:0b:2c:d4:37:4b:72:2d:e6:1f:55:5c:26:a8:
0d:bf:a2:b1:18:b4:21:a9:a4:31:cd:f8:97:19:bc:
e6:37:06:f2:50:d1:96:3a:b3:27:46:6f:8c:c3:27:
4a:b7:7f:16:ed:a1:58:a1:af:9e:fe:ca:18:11:91:
01:82:a1:8e:3d:77:58:56:05:1e:f7:11:03:a8:2e:
b9:90:9f:92:ed:53:99:53:3f:4c:da:b2:4d:a8:f8:
94:d9:55:69:16:24:ba:d8:c5:93:73:20:3b:39:3b:
67:56:6f:94:b7:08:35:2e:23:33:de:4e:c0:eb:30:
f1:a7:32:49:45:c4:34:0d:ff:72:eb:c4:61:84:9c:
50:13:fb:ff:39:7c:05:fa:97:21:44:be:4d:0f:a9:
b0:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:31:AC:F9:89:B2:A1:D2:75:94:6C:E6:E7:33:02:BB:D5:41:CD:4B
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/rzGs-YmyodJ1lGzm5zMCu9VBzUs.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
72:b7:6b:53:22:94:18:b8:a5:1d:25:05:0d:f2:dc:4c:14:5e:
cf:4c:77:0b:49:1a:70:d7:57:10:48:92:27:f9:d3:2a:3f:18:
19:0e:7d:72:4d:32:83:d5:9f:61:09:8c:ba:f4:da:b9:96:bf:
0b:37:e3:41:b3:f8:d1:c5:0d:4f:72:27:a8:8c:9b:c8:83:47:
2c:3c:9f:81:d9:a0:7e:8f:70:91:fa:41:94:2a:1b:af:43:7e:
b3:06:82:20:be:bc:df:2f:34:95:3f:de:e3:3b:0c:23:87:9c:
97:fd:c3:f0:96:4b:0d:e8:bd:21:ac:fc:68:07:e7:5e:34:0b:
c9:74:5b:58:2e:bc:01:a3:97:ec:75:00:de:cf:5b:a4:76:79:
bd:93:a9:d9:ac:68:bd:dd:e7:51:b4:44:9b:50:98:da:07:6c:
f9:e9:ae:80:13:c1:86:38:08:5f:93:d2:97:b2:ab:27:c6:ad:
3b:9e:2f:a3:95:07:b2:f2:65:77:8b:53:b2:69:43:b9:a9:13:
09:b2:7f:fe:d7:eb:df:c4:62:29:56:10:30:6b:3e:36:0f:04:
82:77:9a:01:56:3f:fe:0c:60:4e:11:4f:1a:14:98:05:19:18:
48:99:09:88:d7:b5:c5:18:6c:5d:67:83:57:9e:82:8d:41:15:
1a:b0:18:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 02:12:04 2025 by rpki-client