Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/0gbtzeYN23wDuZ_Xdz2BDhwmmE4.roa
File: 0gbtzeYN23wDuZ_Xdz2BDhwmmE4.roa (raw, json)
Hash identifier: QxiyUAZFNBcpYxQ/V/XMxqSVzU+c0SNTeY7iErHifGA=
Subject key identifier: D2:06:ED:CD:E6:0D:DB:7C:03:B9:9F:D7:77:3D:81:0E:1C:26:98:4E
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0304
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/0gbtzeYN23wDuZ_Xdz2BDhwmmE4.roa
Signing time: Sun 11 May 2025 02:37:54 +0000
ROA not before: Sun 11 May 2025 02:37:54 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 772 (0x304)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 11 02:37:54 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=D206EDCDE60DDB7C03B99FD7773D810E1C26984E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:79:a7:20:f3:d5:80:70:bc:c9:66:9d:42:3b:
dd:cb:62:82:7e:5f:7f:3b:3d:c1:53:0c:01:89:44:
0b:42:91:2a:bb:55:da:8b:e3:1f:57:51:f9:e2:94:
08:76:ad:50:7b:ba:a3:b6:61:b8:80:ea:7d:f4:22:
ca:41:ab:09:93:55:86:e9:e2:44:ba:76:b4:4c:4b:
82:ec:8e:c9:43:d8:97:0b:26:0c:18:0f:b0:cf:d9:
28:0a:13:5e:e8:b7:ba:b6:69:57:eb:bb:bf:18:21:
7c:00:3a:f9:de:f1:55:b0:95:97:bb:64:f9:3a:a9:
60:1d:a2:26:9b:13:80:e8:e5:d9:c5:7e:cf:4f:27:
9c:b7:d6:11:bf:45:5e:07:9e:b5:91:09:c7:6b:39:
d1:35:49:4c:63:70:e1:49:c5:cb:44:40:14:c2:6a:
62:e3:0b:14:2a:cd:9f:2f:37:68:2a:c4:dc:30:59:
82:39:67:f0:67:1b:fc:73:7d:b3:9b:f6:a3:12:65:
ad:d2:fe:2c:11:2c:cd:1a:2c:48:78:18:f0:e0:89:
74:5f:58:fd:15:e5:3d:4b:10:90:57:e9:48:0f:d4:
98:c6:f0:36:8e:41:6c:3a:3b:78:7d:d8:2f:c2:e9:
e6:f6:c4:9b:82:33:90:ea:42:6e:fc:32:ff:1d:15:
19:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:06:ED:CD:E6:0D:DB:7C:03:B9:9F:D7:77:3D:81:0E:1C:26:98:4E
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/0gbtzeYN23wDuZ_Xdz2BDhwmmE4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
06:3c:49:c7:4b:0b:22:4e:c9:73:c4:a5:19:5d:06:4a:ed:87:
a6:f2:ea:9a:45:0d:06:11:c0:2f:67:b8:a4:3c:a0:aa:63:ea:
b7:8c:a7:96:2d:a5:de:48:33:ce:ba:b8:7b:91:01:1c:63:71:
63:02:a6:91:b8:16:33:20:35:94:b2:26:50:18:88:e3:44:97:
c9:3a:a0:5c:75:9c:d5:7c:a4:4c:9d:40:42:1c:87:66:47:67:
7e:a5:20:a0:20:0a:5f:18:51:47:dc:1b:c9:68:f7:16:ef:47:
37:22:77:9c:22:df:de:58:e9:dc:eb:aa:89:85:5b:56:da:03:
73:0a:a9:03:b1:f0:d1:43:8d:d3:ea:0b:dc:f2:54:bb:e0:8e:
48:a7:0d:16:e4:db:2f:7e:f3:5f:29:eb:98:e3:d1:f4:da:86:
21:e1:b4:b9:4d:6c:f1:aa:96:7c:55:7a:af:2e:63:5d:e3:bd:
b8:46:3a:93:77:d0:ce:87:9a:3a:d1:7e:c4:d6:27:5a:35:05:
04:32:18:c7:db:36:ee:15:84:0e:71:fd:a3:e9:02:e2:34:f0:
f3:af:cb:45:e5:6e:ce:81:79:8d:31:2f:bb:a4:81:ec:03:e0:
71:91:3c:69:d1:89:af:32:4a:ba:e0:17:4f:82:1f:7d:7f:49:
1b:79:78:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 16:39:06 2025 by rpki-client