Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/ymtdfL4o_bTokwrppmOislwuRTU.roa
File: ymtdfL4o_bTokwrppmOislwuRTU.roa (raw, json)
Hash identifier: NmqOwhe9R5bkfXpLmx7mqCimerxgiiSe2m+6kx9D6jE=
Subject key identifier: CA:6B:5D:7C:BE:28:FD:B4:E8:93:0A:E9:A6:63:A2:B2:5C:2E:45:35
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0CF8
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/ymtdfL4o_bTokwrppmOislwuRTU.roa
Signing time: Sat 24 May 2025 09:09:16 +0000
ROA not before: Sat 24 May 2025 09:09:16 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3320 (0xcf8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 24 09:09:16 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=CA6B5D7CBE28FDB4E8930AE9A663A2B25C2E4535
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:35:9e:73:cb:d6:78:bb:ba:f1:93:a1:aa:8f:
7b:5c:7a:67:af:f7:c9:7a:44:76:7a:70:35:50:17:
fb:95:09:a1:01:60:67:92:0a:23:80:c2:74:79:b8:
91:2f:bb:5a:9c:ba:f2:14:b9:ba:b3:33:42:53:5e:
ba:00:ea:ac:0b:44:b9:f0:81:6e:4b:a4:1f:7b:d5:
56:b4:d3:2b:1f:8d:04:f1:be:fc:da:25:6a:a5:d1:
b2:e4:b8:01:54:4a:a7:73:95:18:55:42:79:a8:b3:
b6:3e:d4:fe:09:0e:fc:97:6c:06:91:91:35:fa:c6:
30:6d:d8:c1:48:51:d7:90:14:4a:77:46:d4:5f:01:
a0:30:e6:e4:c0:e2:4c:07:80:5c:df:90:74:9d:cb:
f4:cb:75:14:6b:53:43:f7:f5:1b:7d:fd:41:31:14:
4f:ce:32:8e:98:76:b0:c5:af:ef:cd:60:12:1c:7d:
85:36:9d:24:1b:28:d2:89:f8:1e:b8:9c:9c:0b:16:
84:9c:63:05:46:d8:b2:77:02:31:0a:40:83:cd:07:
0a:7c:0c:af:d9:90:80:10:19:ee:e1:bf:0f:51:d4:
a4:21:c8:e8:0c:f7:6a:cb:ba:97:e8:b7:0b:17:a3:
bd:ed:1d:2b:47:d6:a1:b5:dc:3c:a3:67:f1:d5:79:
f0:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:6B:5D:7C:BE:28:FD:B4:E8:93:0A:E9:A6:63:A2:B2:5C:2E:45:35
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/ymtdfL4o_bTokwrppmOislwuRTU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
24:63:e3:d3:eb:f5:97:da:08:4a:4a:10:8e:04:bf:4f:c7:46:
f2:e8:24:2f:bf:43:a0:e8:0e:a5:4b:0f:ce:dc:e3:51:fa:8b:
12:ee:49:71:57:fa:f0:b8:77:51:52:15:d5:78:b2:32:fa:1b:
02:af:86:ff:94:91:7a:a9:db:47:8c:1d:e6:46:59:98:93:f0:
49:3f:e5:60:a5:b5:5a:57:85:fd:b7:b2:fe:00:47:a6:05:c7:
be:b4:2c:57:b9:8f:7c:65:12:0d:8d:56:5e:08:7c:51:8a:40:
f7:89:f2:b2:2e:34:a5:02:14:c0:89:ac:d9:a7:6a:d8:c1:d6:
b6:07:7a:25:d1:dd:48:c5:8a:c1:83:ca:73:30:23:ff:fb:40:
7b:cc:6b:3f:c9:3b:d6:f4:5d:19:7b:d0:c7:1f:48:00:e8:20:
55:7f:85:52:06:49:09:66:6b:1c:fa:47:1b:39:c8:43:1b:bc:
36:3a:47:18:31:c4:a5:c6:bf:f5:c8:ff:2e:7a:eb:44:75:3f:
13:49:42:a0:98:f6:5a:76:38:42:8b:06:3b:79:4e:08:83:d7:
38:7e:e7:22:02:86:10:01:a5:d3:b8:df:fe:95:18:1d:72:6c:
a4:67:4d:7a:76:41:a0:12:15:16:05:52:ea:c7:66:b6:df:07:
04:11:23:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 01:04:18 2025 by rpki-client