Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/02lWGu7LlKjAzqZvrS_avBAVEys.roa
File: 02lWGu7LlKjAzqZvrS_avBAVEys.roa (raw, json)
Hash identifier: 7XCSv+Np11ksemFthULkxBVhPshez7QS1ya4WbrTz+I=
Subject key identifier: D3:69:56:1A:EE:CB:94:A8:C0:CE:A6:6F:AD:2F:DA:BC:10:15:13:2B
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 04D0
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/02lWGu7LlKjAzqZvrS_avBAVEys.roa
Signing time: Tue 13 May 2025 12:07:58 +0000
ROA not before: Tue 13 May 2025 12:07:58 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1232 (0x4d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 13 12:07:58 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=D369561AEECB94A8C0CEA66FAD2FDABC1015132B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:3c:df:c1:92:09:c7:3f:d1:fa:13:f6:c0:1a:
6d:f5:ef:62:cf:24:7c:fc:dc:b4:ef:20:43:75:fb:
2e:f9:cd:2d:99:cf:de:7d:31:4d:8f:02:16:36:a6:
c1:9a:59:85:93:f6:77:2c:87:01:61:99:3e:5e:22:
81:b6:e6:99:4c:59:91:5d:3b:10:d9:3f:bf:d3:ac:
87:9e:a2:1b:42:e6:79:f7:cb:2a:3f:04:d4:2c:47:
aa:3e:f2:99:d1:a4:91:98:00:59:7b:cf:19:ed:34:
51:4f:0a:a7:7c:de:7f:ea:51:85:f8:a4:33:7c:43:
be:1f:fc:0f:eb:2a:bf:3b:5f:b9:d6:e6:dc:7a:97:
20:05:6f:47:00:d3:e5:ca:f1:1d:52:12:a0:7a:f1:
a2:63:86:57:36:3c:9d:a5:6e:51:c9:f4:df:f0:e4:
b5:8a:14:03:79:fe:b6:e6:e5:c4:cd:f2:79:ed:c5:
8e:e8:0d:28:5b:ff:d8:5b:75:a7:5d:ec:f6:0e:d8:
9e:20:42:10:2a:ae:b9:67:91:95:87:59:92:73:41:
3d:5f:37:33:10:27:08:69:a5:eb:51:23:4e:7b:9b:
da:1c:ba:13:a9:11:84:88:e6:42:54:40:b2:f2:d3:
4d:3a:37:dc:65:c2:ab:6f:e4:27:6e:17:0f:bd:19:
25:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:69:56:1A:EE:CB:94:A8:C0:CE:A6:6F:AD:2F:DA:BC:10:15:13:2B
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/02lWGu7LlKjAzqZvrS_avBAVEys.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
a9:4a:34:23:ea:dd:17:6f:78:37:4b:82:5d:de:cb:9a:35:ea:
6a:e7:fc:0f:84:52:f5:30:6e:8b:0c:f8:b8:79:f7:56:bd:a3:
98:63:06:e9:f7:2e:cf:08:fb:dc:c7:99:c0:4a:f3:32:cd:d2:
3a:44:d6:61:28:9c:7b:5c:ef:47:a8:e7:ad:08:4a:7c:ae:28:
2f:25:e6:cf:ab:93:87:44:67:da:f5:62:af:2c:67:48:35:d1:
8e:d8:1a:29:fd:49:f9:64:61:59:72:2a:3f:1a:36:b3:35:76:
3e:d9:a4:f7:22:82:65:af:9e:04:f5:f8:c2:d7:86:83:a7:cf:
2e:48:1c:62:5a:3b:40:02:7f:48:45:57:74:2c:a8:a9:99:fe:
61:a9:8c:d8:ad:a2:74:e0:88:0f:bc:5c:3d:8f:2a:e9:8d:ee:
b0:a0:b5:fc:1d:ae:95:0f:14:cd:4c:e5:66:25:66:5a:a0:ed:
f6:d3:41:d5:cc:88:d2:ff:45:14:af:d5:22:f2:fd:dd:1e:51:
f2:39:7d:aa:81:3e:8f:21:4b:cb:62:d2:b1:dc:a1:1b:a8:11:
b0:ce:93:8c:c7:85:cd:34:d0:06:8e:63:c3:e9:42:03:8c:ad:
2d:ce:e6:7a:f6:e6:22:cf:60:28:e3:e6:7c:cb:39:3c:19:a1:
d8:1f:1a:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 19:36:32 2025 by rpki-client