Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/xFwpGLtKSiQwajMc_UyPXE0ncQk.roa
File: xFwpGLtKSiQwajMc_UyPXE0ncQk.roa (raw, json)
Hash identifier: Gs8ekaU4LUSg48Pq+yrAsDcphKSQZq9A2uI8FLyGK1E=
Subject key identifier: C4:5C:29:18:BB:4A:4A:24:30:6A:33:1C:FD:4C:8F:5C:4D:27:71:09
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 021C
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/xFwpGLtKSiQwajMc_UyPXE0ncQk.roa
Signing time: Fri 09 May 2025 21:37:47 +0000
ROA not before: Fri 09 May 2025 21:37:47 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 540 (0x21c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 9 21:37:47 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=C45C2918BB4A4A24306A331CFD4C8F5C4D277109
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:e1:17:84:74:f1:da:6d:70:96:d4:14:15:e5:
cc:9a:c7:00:26:79:66:19:92:38:98:1e:a2:5d:8e:
76:04:4c:99:e4:0f:b8:e0:93:6b:8c:07:75:db:a0:
b4:db:d2:51:1f:d9:80:54:34:37:16:2a:f9:7e:ff:
0c:d2:2c:7d:0d:14:2a:a2:fb:72:56:0d:a7:5e:b6:
77:9b:cc:9d:47:9d:4c:83:73:55:f2:15:9f:6a:3c:
c8:f8:83:4e:10:41:ee:66:13:b1:85:5e:0d:dc:f2:
3b:20:f5:df:8c:3c:ed:10:61:76:11:9e:a3:b4:a6:
c0:a9:58:58:d5:38:cf:8a:df:9f:89:d9:38:e6:21:
b1:3f:79:91:5f:4f:b7:4f:ff:9b:a3:b4:d7:cd:f4:
7b:c6:c1:16:6b:11:41:08:f7:ea:c3:f8:9d:12:ca:
30:3d:5c:12:08:02:7a:8e:40:2f:31:68:49:fa:2c:
49:18:82:68:82:67:54:5c:bd:5b:2c:11:dc:83:7f:
48:6d:2c:4e:4b:41:c7:ed:18:51:cf:8c:c6:e6:63:
b7:40:07:35:9c:9d:83:84:9a:3f:36:c7:ba:2e:3e:
07:d3:77:aa:e0:1b:ce:6d:7b:81:0d:17:b7:6d:a7:
0c:bf:2a:75:a8:21:e8:be:01:84:33:20:f9:16:03:
10:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:5C:29:18:BB:4A:4A:24:30:6A:33:1C:FD:4C:8F:5C:4D:27:71:09
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/xFwpGLtKSiQwajMc_UyPXE0ncQk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
29:6a:88:1e:dc:e3:9c:cc:05:fc:44:64:52:5d:f0:96:95:2b:
4c:3b:d1:13:e3:7a:cb:00:76:d1:f3:94:a2:aa:21:7b:42:06:
b8:56:be:96:29:5d:61:41:78:34:ad:90:a2:ff:a1:b8:d4:93:
7a:a6:9d:7d:af:c7:83:df:b2:95:0c:da:d3:4d:b2:37:3f:57:
79:23:ed:d6:03:d8:55:2d:6d:01:1a:59:d0:a4:8e:a5:23:39:
59:3c:14:b5:58:26:ad:91:a7:5a:54:23:e1:be:ae:0d:c3:44:
64:2d:8c:b3:28:ac:61:df:71:98:9e:96:6b:06:b7:6e:88:ec:
53:cf:8d:bb:f7:e9:30:1a:ed:d0:1e:1d:ca:97:46:78:58:ed:
ed:5a:87:98:d5:ad:f4:66:2f:8e:2b:87:3f:ac:ce:68:55:02:
d0:7a:61:cd:5c:20:c3:d7:11:90:7a:a2:8a:c3:8a:8e:5d:1a:
c1:78:ab:b4:6c:8a:5a:41:85:d3:a3:cc:5b:0c:88:5f:b8:bc:
c1:97:36:dd:16:cf:99:57:fd:84:0c:6d:54:98:d3:9b:10:3c:
6c:44:c9:81:3f:75:b7:39:17:3d:e1:12:0e:c1:2b:6a:55:ca:
16:a8:6c:48:59:d7:f6:7f:3e:a4:8c:07:b3:cf:99:e0:1b:9d:
d9:b0:a2:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:45:42 2025 by rpki-client