Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/-WuOxI2XxMACXlnqVOKYbatzGB0.roa
File: -WuOxI2XxMACXlnqVOKYbatzGB0.roa (raw, json)
Hash identifier: ftLa9gsFkNih/V3mFHHvFtRvX2P+6C/FYacIXGsK5PM=
Subject key identifier: F9:6B:8E:C4:8D:97:C4:C0:02:5E:59:EA:54:E2:98:6D:AB:73:18:1D
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 07BC
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/-WuOxI2XxMACXlnqVOKYbatzGB0.roa
Signing time: Sat 17 May 2025 09:38:07 +0000
ROA not before: Sat 17 May 2025 09:38:07 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1980 (0x7bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 17 09:38:07 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=F96B8EC48D97C4C0025E59EA54E2986DAB73181D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:a0:bc:01:e0:6c:b2:7b:33:c4:e8:c4:77:e9:
53:99:67:76:b1:30:e6:17:d7:d8:88:44:51:f9:70:
0d:41:fd:56:e1:e0:0e:61:e7:36:cb:e7:1c:b3:cd:
f4:70:20:e7:d0:72:25:f2:cf:7d:87:4b:05:4f:35:
4a:02:79:31:30:d5:96:fc:43:a8:d7:3e:91:71:9a:
1b:5c:48:bd:fe:cd:00:36:42:36:06:3e:63:77:ce:
05:5d:b2:9c:89:5f:23:b4:4c:5b:83:70:2a:b9:ed:
8d:da:f2:0c:e1:f9:10:f1:25:19:d1:3a:31:d2:88:
c1:ba:f7:47:c9:96:ee:c5:47:7d:fb:b6:74:5a:35:
7f:26:f1:10:e5:b1:70:3c:85:e5:b7:84:a1:3d:4d:
2c:d7:0f:9e:7d:b4:94:e7:7c:f6:bb:4d:08:8c:51:
2a:bb:cb:2f:d0:ae:a0:1d:a3:79:bc:0b:02:cd:c2:
2c:8c:a9:30:34:41:08:c1:b7:62:30:96:c7:c8:2f:
89:d2:60:93:32:19:31:5e:29:5a:d2:55:f3:25:ea:
c6:ad:51:e0:e2:d9:0d:82:f4:e1:f4:f9:f3:ea:ed:
f3:b0:1b:04:ae:c4:d9:d8:02:97:28:bb:08:a1:73:
d2:92:45:ac:64:f6:4e:da:1c:cb:0e:9e:93:63:1c:
4d:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:6B:8E:C4:8D:97:C4:C0:02:5E:59:EA:54:E2:98:6D:AB:73:18:1D
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/-WuOxI2XxMACXlnqVOKYbatzGB0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
2c:36:15:be:b5:11:cb:08:69:9b:f0:60:8f:65:93:ac:ee:57:
c2:15:51:ea:f3:52:c5:58:42:9e:8c:4f:ab:54:fc:3f:7b:62:
0c:00:b9:99:b6:43:0b:ad:42:dd:97:45:30:ac:a7:6b:5f:fb:
11:b0:31:97:67:8e:db:42:15:67:99:31:ce:b2:c5:86:bc:a1:
ad:cc:0d:19:a4:d8:6b:f7:35:e6:03:4b:f6:2e:ed:80:0a:ac:
c0:06:6b:ae:4d:a9:ca:14:13:89:72:de:18:c2:21:9f:2a:ec:
76:37:64:45:5e:17:c7:c8:fa:dd:98:06:0d:4b:27:d0:2d:e8:
dd:9f:03:f2:4c:d2:17:b7:59:ac:30:ef:0a:1a:92:1f:64:20:
1e:75:ff:c6:36:53:a8:db:da:73:d5:a8:f8:2e:20:59:e1:90:
fc:ed:ce:5e:de:21:8e:5b:4d:e0:93:ec:55:16:da:01:a0:ce:
90:14:12:3f:c2:67:28:d4:ba:90:95:13:eb:4c:81:5f:e7:dd:
bc:7c:41:c6:be:a6:0f:90:58:c2:a4:bf:40:1f:0f:a3:cd:6a:
68:bb:4b:9b:e5:1c:9c:92:e9:52:82:f1:c8:42:b4:f6:0e:f1:
d5:11:44:82:67:ef:2a:16:dc:9b:fb:c6:fc:22:75:f8:b2:e3:
fb:3a:78:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 23:21:24 2025 by rpki-client