Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/zeOSX08epXhqWxZRy0anz2lSJSI.roa
File: zeOSX08epXhqWxZRy0anz2lSJSI.roa (raw, json)
Hash identifier: 7zk7K5fKuS21jQXoiEHejUcIprI9aXokho3Vc1B9SDk=
Subject key identifier: CD:E3:92:5F:4F:1E:A5:78:6A:5B:16:51:CB:46:A7:CF:69:52:25:22
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0904
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/zeOSX08epXhqWxZRy0anz2lSJSI.roa
Signing time: Mon 19 May 2025 02:38:18 +0000
ROA not before: Mon 19 May 2025 02:38:18 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2308 (0x904)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 19 02:38:18 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=CDE3925F4F1EA5786A5B1651CB46A7CF69522522
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:e1:5e:83:aa:41:0f:04:e8:3a:9b:22:21:34:
61:1a:fc:85:0e:2f:93:e5:94:77:de:13:81:a6:9e:
4d:f5:7b:b7:a1:c6:c4:7a:b1:ed:c3:11:c0:11:87:
4d:fe:87:a5:1c:e5:fb:23:ac:c4:a5:25:6f:db:ed:
02:f4:4b:b6:09:ae:1d:c3:c8:1c:c8:ce:e5:76:5a:
91:a7:f3:96:9d:8d:0d:2b:63:61:ec:72:2d:80:48:
09:f4:58:b6:76:3d:cd:be:05:19:14:5a:2c:95:e9:
e6:a6:7a:09:b4:f4:2a:c0:32:d8:0a:52:52:6a:8c:
75:df:58:e5:f4:31:92:98:2e:0d:f3:e2:35:e7:8f:
3f:c6:1e:b4:df:f8:cf:2c:f5:b7:ea:c7:f9:dd:52:
d7:14:e0:36:06:c9:64:63:2f:52:f3:ec:d2:8b:16:
b8:7f:88:f1:6b:96:7d:78:83:84:b5:b8:be:74:e0:
8a:38:f6:85:0f:4a:f8:22:51:3b:3d:92:97:96:96:
c4:97:4c:6f:1f:b8:95:1b:7e:11:f2:f6:49:78:79:
ca:7d:04:79:e0:62:a5:9e:2b:e1:9a:f7:2b:09:55:
06:11:41:8c:9d:8b:72:1c:01:59:02:86:ab:56:a4:
c6:a5:1e:3d:4a:0d:22:59:e0:89:cd:e7:35:7b:65:
42:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:E3:92:5F:4F:1E:A5:78:6A:5B:16:51:CB:46:A7:CF:69:52:25:22
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/zeOSX08epXhqWxZRy0anz2lSJSI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
73:db:a4:0b:b2:6a:87:30:87:6d:d6:24:74:18:5d:19:9a:72:
a8:90:2a:d0:63:6c:28:d6:f0:e2:86:56:18:02:85:1b:39:19:
15:db:06:6b:bf:a2:66:72:fa:ec:37:65:7f:d6:a6:49:f7:9c:
be:30:20:e0:4e:84:ca:67:58:59:7f:09:88:5d:3f:98:f3:6a:
18:10:60:ee:1c:a0:f5:d5:8c:61:35:95:ec:9a:9c:8d:ea:11:
fa:1e:66:2c:f2:4a:df:36:3d:52:7d:bb:ce:48:09:a4:1d:09:
0e:21:9b:d8:89:59:83:79:2f:c7:42:df:51:7a:f1:3c:35:13:
95:61:be:ce:08:3b:2b:e2:81:f7:b4:5f:39:1d:f6:e1:19:19:
4b:3e:19:99:5c:6c:7d:6a:49:3d:d6:5e:85:9e:f5:9b:de:9f:
61:65:c5:2c:78:27:4b:cd:97:2e:c8:21:de:b3:2b:2c:15:9a:
5e:53:83:9a:db:88:d8:25:80:72:3d:31:c7:a2:d7:f7:82:23:
33:b2:af:6d:e6:22:e4:28:75:3a:e5:b0:11:ee:01:8a:54:86:
4c:a1:d4:c3:7c:30:09:43:83:00:3e:00:f5:e6:c2:d8:f2:ad:
74:f6:56:88:de:72:cd:dd:5c:53:2a:81:56:e4:fa:71:77:ac:
4d:ee:7c:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 00:57:20 2025 by rpki-client