Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/wWNz3Q_h-uueXEnf4dZouHsnagE.roa
File: wWNz3Q_h-uueXEnf4dZouHsnagE.roa (raw, json)
Hash identifier: Sog6S9Qa/bO1ZBI9RNCyufG9oZjzW68K2cTjmKgePjI=
Subject key identifier: C1:63:73:DD:0F:E1:FA:EB:9E:5C:49:DF:E1:D6:68:B8:7B:27:6A:01
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 01EC
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/wWNz3Q_h-uueXEnf4dZouHsnagE.roa
Signing time: Fri 09 May 2025 15:37:46 +0000
ROA not before: Fri 09 May 2025 15:37:46 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 492 (0x1ec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 9 15:37:46 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=C16373DD0FE1FAEB9E5C49DFE1D668B87B276A01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:9b:b1:ae:a7:7b:12:d3:df:ce:9d:6e:a8:09:
32:21:4a:65:81:55:2c:e5:57:78:d7:28:3d:8c:0c:
a0:37:68:94:91:5b:fc:ec:d4:f9:d7:4e:20:26:01:
aa:f4:44:13:38:78:03:f3:c7:14:96:a7:83:8d:c4:
03:a9:50:3f:62:44:52:c8:89:4d:c0:6f:a7:e9:18:
b6:6f:9f:45:9e:10:47:79:ec:69:0d:f2:8d:b4:ce:
c6:52:ac:fe:f4:f6:94:4e:43:14:11:92:8e:e0:05:
1c:5a:bf:03:b5:68:0b:0d:70:42:01:78:10:21:5c:
b4:80:9f:d0:3f:43:5b:4b:1c:6e:26:d4:bf:a1:16:
f0:02:dd:cf:a3:95:af:76:8e:18:23:11:43:58:11:
69:4a:d5:31:91:4d:1f:85:74:ce:cd:6b:7d:27:81:
8c:60:2a:7a:5e:cf:db:41:0d:e9:63:47:f0:e3:34:
86:86:c0:ce:c4:5b:dd:2d:7d:63:ec:38:84:3e:ec:
ae:ce:5e:14:16:fb:bb:92:7a:9f:de:15:68:0d:81:
e9:13:9d:0f:a1:24:ea:11:fd:20:ef:79:36:a6:48:
21:ff:93:70:03:84:4b:0f:61:ac:b4:4a:ec:e3:38:
9f:81:a0:be:d9:06:40:8e:ef:ae:7f:03:7f:c8:5b:
2a:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:63:73:DD:0F:E1:FA:EB:9E:5C:49:DF:E1:D6:68:B8:7B:27:6A:01
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/wWNz3Q_h-uueXEnf4dZouHsnagE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
24:28:34:05:07:70:e3:2a:a5:0b:b0:8d:e7:db:bb:b9:5e:31:
a3:f3:8c:74:4d:7b:69:52:13:2a:e1:98:ba:54:6f:ed:a1:2e:
e0:50:a5:38:f9:2d:2a:89:1d:db:89:e5:b1:0a:06:f0:06:34:
d7:c4:1a:5b:4b:5d:ff:ac:fe:2f:e3:88:4e:28:0b:22:c1:ce:
a2:dd:5b:84:49:05:ae:61:e4:54:69:cb:cd:d5:8f:48:1d:54:
14:bc:aa:79:a7:0e:57:22:62:49:75:3f:00:3c:e6:f5:52:08:
5b:95:4d:03:6b:a3:b3:c1:a1:e2:f5:f0:87:49:96:91:97:81:
94:3e:6f:8d:cd:f9:2d:34:a2:4d:b9:9d:c5:5c:4f:68:c0:a8:
bd:12:02:85:a3:88:fb:38:b5:ec:b9:7d:4e:89:95:f3:13:c8:
95:d3:35:dd:b0:ad:c2:d9:c6:fb:5c:3f:44:c2:7c:27:6b:2a:
b8:89:c1:80:de:73:6b:15:9a:6a:cf:77:56:7d:5f:92:58:59:
29:c5:ab:38:e9:d5:f8:95:d4:49:90:04:33:77:b8:a0:19:40:
98:bb:f0:6f:80:69:54:c8:ec:df:ef:b2:9a:09:ff:2b:7a:ba:
56:f2:42:77:ea:b0:9e:8e:8c:f6:f4:ec:05:8d:2e:17:19:3d:
38:30:26:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 00:57:03 2025 by rpki-client