Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/0w0nHSect_QVKhgt-1O0YfYUCfo.roa
File: 0w0nHSect_QVKhgt-1O0YfYUCfo.roa (raw, json)
Hash identifier: L8Usd/FyK83UnrYEMa8OFdYgc2pAwzcXorMvVe5e7to=
Subject key identifier: D3:0D:27:1D:27:9C:B7:F4:15:2A:18:2D:FB:53:B4:61:F6:14:09:FA
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 07E4
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/0w0nHSect_QVKhgt-1O0YfYUCfo.roa
Signing time: Sat 17 May 2025 14:38:07 +0000
ROA not before: Sat 17 May 2025 14:38:07 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2020 (0x7e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 17 14:38:07 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=D30D271D279CB7F4152A182DFB53B461F61409FA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:86:2e:43:ac:82:e5:a1:20:b6:3e:4e:f7:26:
ab:cf:01:6e:40:c6:8d:6c:71:3a:05:57:26:9e:39:
3c:5e:20:d2:d6:9d:52:34:95:ad:ad:fb:3c:1d:6d:
aa:c8:8f:86:67:e7:b6:29:2f:37:cd:30:aa:13:db:
ec:14:0c:1e:fb:7f:32:17:f0:68:cc:77:65:d5:21:
31:0a:6a:39:2f:06:c8:47:21:47:bd:39:cb:8d:5f:
6c:74:36:ff:dd:bf:99:06:18:1f:af:89:a7:32:a0:
13:50:d9:6a:62:df:c4:92:39:54:5d:82:88:40:3d:
29:41:f2:bb:4e:fa:77:a8:88:b4:e8:83:00:08:64:
4a:43:f5:32:de:b3:aa:10:32:ae:36:c1:63:a1:87:
1e:7f:38:be:24:d8:a8:74:99:1e:c1:cb:08:d3:f5:
16:92:c5:b2:bc:11:83:6f:df:af:40:93:61:18:53:
20:e1:a8:53:32:04:2e:83:14:7b:51:07:2f:27:9c:
1c:58:4d:e2:cd:37:8b:1a:8c:7e:f6:a6:a8:9d:22:
c4:5a:b2:74:51:79:0c:7a:36:ef:61:de:2a:d1:93:
b1:02:77:f4:bf:6c:f7:38:95:07:39:81:0c:6c:df:
8e:99:e9:59:d5:96:77:2b:97:98:66:8c:8b:e8:92:
25:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:0D:27:1D:27:9C:B7:F4:15:2A:18:2D:FB:53:B4:61:F6:14:09:FA
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/0w0nHSect_QVKhgt-1O0YfYUCfo.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
27:24:8f:0a:f3:8d:67:5f:5d:ce:dc:fe:46:32:0e:4b:b3:ba:
7d:4c:92:1f:38:58:4d:20:c3:aa:e7:83:bb:66:4a:cc:12:16:
42:18:c4:d0:99:b6:36:51:51:19:69:9e:f8:41:46:dd:08:fe:
71:4e:5d:1e:67:82:4f:64:6e:98:9f:95:69:83:96:24:d5:11:
31:ba:6a:6e:22:5a:8b:b6:99:4f:cd:c8:15:01:29:5e:da:19:
39:7e:ee:60:91:fe:86:ba:b0:24:3b:f3:0c:68:9f:25:2e:57:
7f:c1:9f:54:04:bb:de:fb:c0:21:d6:6c:9b:91:a6:a4:25:51:
08:8b:95:10:86:24:0b:f4:fb:7d:8c:bb:c7:75:b0:f1:c6:04:
e3:d0:69:fc:b7:65:41:63:d3:58:96:df:dc:d1:80:9d:b1:c2:
3c:5c:fd:d3:96:58:4d:c2:9a:ce:4f:39:8f:ef:30:53:40:e0:
fd:40:0a:94:55:48:7e:15:1b:c0:ba:b0:33:bb:81:d8:42:89:
0d:8e:5e:c7:eb:f7:6e:ac:e0:f7:7e:30:d6:7e:bc:11:85:0e:
86:68:c3:54:65:4e:41:b7:6b:cf:3e:54:39:f3:2e:41:fc:84:
25:cc:4c:1e:49:a4:8b:3b:bd:98:f6:19:e9:79:32:ba:b0:d0:
2a:25:2b:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 23:20:10 2025 by rpki-client