Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/wGotGCcT1WT91jSSMzquY4A6QYE.roa
File: wGotGCcT1WT91jSSMzquY4A6QYE.roa (raw, json)
Hash identifier: kzJdDyibF1xZtXfxdxm2GB0jy04/K3mWriSUel/0RW4=
Subject key identifier: C0:6A:2D:18:27:13:D5:64:FD:D6:34:92:33:3A:AE:63:80:3A:41:81
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0BE0
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/wGotGCcT1WT91jSSMzquY4A6QYE.roa
Signing time: Thu 22 May 2025 22:08:24 +0000
ROA not before: Thu 22 May 2025 22:08:24 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3040 (0xbe0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 22 22:08:24 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=C06A2D182713D564FDD63492333AAE63803A4181
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:f0:5e:0e:7e:d5:15:9b:45:21:97:c8:5c:01:
92:12:9a:df:33:33:ff:e8:2f:17:f0:64:96:9b:d5:
75:2b:fa:9c:01:59:cc:ee:fa:be:a1:83:51:d6:43:
6a:81:01:9e:60:ce:aa:d9:19:17:1c:55:80:9f:91:
8a:ea:5c:37:17:c0:b7:2a:a7:40:d5:bb:ca:44:a3:
a8:85:f5:77:76:70:f8:32:0d:da:b7:fc:4a:66:66:
5e:f4:2e:da:bc:99:b1:e9:46:f5:4e:dd:9e:c8:90:
ce:60:c1:49:b7:7f:12:23:5f:5e:f7:34:93:16:14:
9d:c9:4d:32:b7:99:59:8d:09:37:5f:60:dc:30:cc:
2e:77:40:ce:44:8f:e2:fd:6b:a3:d4:e4:d8:bb:e3:
50:0e:88:55:3c:60:de:4e:45:ad:26:5f:bb:0e:5b:
be:23:02:75:5c:64:91:bf:bc:33:73:76:09:af:28:
11:36:81:70:16:1f:0f:96:79:91:d8:7e:eb:ab:b0:
e6:f4:47:08:63:ac:68:03:37:62:59:e7:9b:18:5e:
0f:a7:09:20:7e:e7:cb:0b:8c:e7:ce:e4:a1:89:80:
f0:78:b7:ea:1d:1d:d9:6f:53:48:5c:90:19:50:ff:
6c:2d:c3:a6:99:cc:6e:e1:b6:72:a7:63:3d:3a:3b:
4a:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:6A:2D:18:27:13:D5:64:FD:D6:34:92:33:3A:AE:63:80:3A:41:81
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/wGotGCcT1WT91jSSMzquY4A6QYE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
70:02:f4:5c:70:ce:73:f4:94:b8:88:fc:75:ff:83:9a:52:3e:
84:7a:33:87:35:d5:c8:20:2b:a6:0d:93:de:e5:07:f4:56:2c:
1b:7c:e4:c0:20:6f:48:40:f4:f9:73:a7:77:5f:4c:04:f9:15:
e9:50:eb:50:6d:22:69:3c:5b:06:55:d2:94:98:71:b1:c0:07:
63:90:ee:d4:4e:c6:e9:50:36:12:1f:67:bd:9b:1f:22:e7:78:
93:e3:a5:98:61:6e:3b:58:f3:3d:3d:07:c9:91:00:b8:6e:49:
6b:13:aa:de:ab:01:32:04:13:f1:13:23:08:ee:4f:02:b1:5b:
de:6c:96:1d:52:2e:ad:ab:82:dc:00:66:6a:ee:c2:15:31:da:
9b:b0:e1:db:36:40:27:73:32:fa:61:51:de:dc:f9:9c:27:fb:
6b:3a:7b:eb:b9:1e:ab:8a:52:b3:db:77:08:d5:fa:d5:eb:59:
ed:ac:ca:50:2b:db:bb:08:e3:34:a6:07:ec:89:6c:1a:8c:27:
18:10:b6:08:22:87:e2:01:eb:0a:0f:9c:c0:3b:f5:d9:a7:92:
a0:ce:86:5c:ae:89:a4:c3:3c:83:c2:1f:94:81:75:9c:48:59:
1e:0c:b9:5e:6b:11:2c:3a:40:b5:e1:34:f9:00:20:54:6d:a5:
1a:69:4b:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 00:53:53 2025 by rpki-client