Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/sdc6Xyo4pwYoXa3hDbC2Z9idrS0.roa
File: sdc6Xyo4pwYoXa3hDbC2Z9idrS0.roa (raw, json)
Hash identifier: 65oZ/6o0NAy+g6LTk7u7mFTjRzAcdkXWir5BBgg65qk=
Subject key identifier: B1:D7:3A:5F:2A:38:A7:06:28:5D:AD:E1:0D:B0:B6:67:D8:9D:AD:2D
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 09D0
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/sdc6Xyo4pwYoXa3hDbC2Z9idrS0.roa
Signing time: Tue 20 May 2025 04:08:54 +0000
ROA not before: Tue 20 May 2025 04:08:54 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2512 (0x9d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 20 04:08:54 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=B1D73A5F2A38A706285DADE10DB0B667D89DAD2D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:26:a3:e0:81:10:22:01:11:99:cf:0f:85:6c:
8b:de:96:70:dc:78:be:ae:a0:9c:8c:93:1b:6e:c6:
b1:38:91:7b:7d:a1:58:08:f1:c0:18:c3:14:fc:07:
f5:17:93:97:5e:a0:bd:88:4f:1f:cd:91:da:c3:96:
ab:f5:d5:98:27:d0:f7:74:e8:52:06:66:a0:f8:3a:
77:6c:81:ad:bb:4c:99:6c:45:f5:ec:5e:28:85:a1:
5e:7f:4c:6f:c6:17:8e:dd:5f:eb:c6:5a:b8:46:20:
99:7c:6d:8d:69:a9:a3:4e:01:c0:23:dd:0b:9c:82:
60:fc:e8:0e:d4:35:16:52:f3:21:ee:57:31:0b:08:
37:6d:3b:ae:1c:6e:a3:a9:7f:0e:f0:d8:7e:be:b0:
8a:ba:45:42:f6:33:df:ef:78:f2:61:70:9e:df:fb:
c8:ef:d8:1e:dd:05:96:bc:e9:8c:84:d2:6b:19:ad:
64:e5:f4:07:9f:e3:82:b4:b2:0c:eb:a6:63:c8:82:
73:cf:c4:64:26:cb:7a:29:72:83:94:28:41:6c:23:
36:f4:e7:1b:4f:bd:9d:59:65:1b:a9:97:c8:a7:c8:
b2:a8:e5:bc:82:2e:03:80:ed:f9:55:3e:71:54:29:
13:f3:d3:78:cf:b0:03:44:4c:cb:95:6e:df:2d:b0:
af:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:D7:3A:5F:2A:38:A7:06:28:5D:AD:E1:0D:B0:B6:67:D8:9D:AD:2D
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/sdc6Xyo4pwYoXa3hDbC2Z9idrS0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
74:8a:a5:f7:97:a5:d9:92:fe:24:2d:4f:85:24:60:91:44:f1:
78:e4:46:79:4e:a7:47:ba:3f:ce:0f:a0:df:d1:90:35:4b:65:
9b:17:d3:7e:a0:72:04:43:48:57:0b:6f:f4:30:bb:15:72:92:
fe:9f:b7:9f:6a:41:76:e7:b0:02:29:b0:93:b6:4a:94:14:32:
43:2a:fd:32:7d:a2:21:50:37:e7:ce:4d:50:3c:25:fd:c2:e2:
2d:f1:cf:1f:6c:9e:b9:70:48:12:ee:ea:fa:b8:fb:9b:25:b7:
0b:eb:af:7d:74:e5:36:a4:89:4f:23:75:69:ce:7e:97:19:28:
61:06:e5:d6:7e:2f:e5:30:67:be:0f:39:da:47:1d:a0:75:5c:
93:58:35:fa:54:af:5e:5f:e2:0c:7b:d1:f8:26:9e:87:a7:df:
d6:54:41:58:6b:7c:50:e7:9b:48:4e:00:3d:a5:38:13:ea:3d:
39:01:d5:04:ea:2c:48:f0:bd:d7:23:be:bd:54:2e:42:e4:46:
16:c8:13:fc:74:f9:0a:02:ad:22:81:e4:68:70:c6:33:0d:34:
6d:79:9f:2c:7b:96:5f:e9:a5:ac:9a:fa:bb:c7:d6:d2:cf:de:
31:65:ee:c6:67:68:45:7e:d9:cb:3f:12:e6:d6:5f:84:d5:3d:
44:f4:35:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 01:04:25 2025 by rpki-client