Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/3JjPSHuoShfu9nsgd0fYirSWvlQ.roa
File: 3JjPSHuoShfu9nsgd0fYirSWvlQ.roa (raw, json)
Hash identifier: IuRJ2BykRkoL0hSmuhbU5T9QlmaN/T0U+2s2kIteHmc=
Subject key identifier: DC:98:CF:48:7B:A8:4A:17:EE:F6:7B:20:77:47:D8:8A:B4:96:BE:54
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0444
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/3JjPSHuoShfu9nsgd0fYirSWvlQ.roa
Signing time: Mon 12 May 2025 18:38:06 +0000
ROA not before: Mon 12 May 2025 18:38:06 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1092 (0x444)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 12 18:38:06 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=DC98CF487BA84A17EEF67B207747D88AB496BE54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:8c:63:c7:1d:db:4e:fe:15:bc:d0:a1:60:83:
b3:95:dd:f6:42:6d:83:91:bb:30:75:2d:ae:4f:dc:
54:85:ff:9a:23:96:ba:4c:35:91:98:9d:de:6c:c3:
3d:71:15:e4:45:ab:ef:1f:a8:ac:23:13:f9:61:f8:
50:01:e2:27:2f:0a:a7:d8:53:57:75:90:4e:44:a7:
df:0f:8d:4a:70:1d:5b:5d:65:37:e2:81:8e:25:0d:
e5:77:51:78:1d:3e:f1:c1:61:26:75:05:60:b0:00:
17:00:bb:11:de:3e:f0:14:9d:6c:16:3b:22:a8:8e:
ac:69:01:05:c2:0a:55:2c:93:87:96:27:00:8d:5a:
6b:8f:50:67:31:35:2b:55:53:2a:e4:76:2b:55:7f:
dd:32:b1:e1:b7:1f:e8:c3:cb:9d:75:94:64:bf:22:
84:92:da:76:7e:6f:6a:cd:19:e9:f1:03:45:8a:0d:
28:f9:68:e5:ca:e5:65:ec:72:44:0c:74:bf:90:da:
b3:b6:0f:49:00:df:c2:d6:6b:5a:88:4a:98:0e:47:
50:7c:64:bd:f5:9f:23:08:2b:82:19:7c:de:93:62:
ba:2a:e1:62:76:43:e8:77:33:b8:b4:41:e4:8e:19:
59:e8:45:d3:8e:e1:d4:0d:3c:b8:40:73:33:7d:6f:
d3:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:98:CF:48:7B:A8:4A:17:EE:F6:7B:20:77:47:D8:8A:B4:96:BE:54
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/3JjPSHuoShfu9nsgd0fYirSWvlQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
26:7e:a2:d3:92:b1:e7:f7:aa:5d:95:37:42:4a:ed:84:0b:b4:
26:5e:b8:0d:1f:c6:1f:e2:1a:f5:2c:a9:8c:09:4a:8e:7e:d3:
61:e2:42:41:d3:4f:38:55:28:3d:b1:83:d7:46:80:87:6e:34:
db:fe:54:c2:5b:a8:19:61:f7:99:7b:54:53:34:fb:f3:82:5d:
69:16:fd:4e:85:9b:8a:44:83:5d:68:be:b6:ae:22:68:11:14:
75:40:78:27:f4:b9:20:9b:ab:6b:3d:1e:09:e2:41:92:92:ee:
ae:c0:fb:5d:fc:7c:51:dc:08:ee:ac:d4:f9:09:82:53:35:bc:
ad:c8:31:b7:c6:e6:be:af:24:7f:fe:70:75:c7:ab:f3:cd:99:
db:86:84:d3:98:cc:77:1c:53:3d:a0:f7:a0:6a:4b:30:90:29:
59:04:97:80:df:01:6f:44:b0:f3:69:81:2c:12:82:4d:4f:eb:
78:9c:51:a0:84:3a:3f:40:08:8f:03:5b:87:1a:30:6a:8c:4d:
c5:69:7c:00:f1:80:e4:13:8b:32:42:80:32:91:30:d5:e5:b4:
0b:72:cb:f5:07:c8:ca:5c:41:f0:cf:6d:15:43:bc:89:36:94:
01:db:02:90:7d:0e:3c:55:6b:96:4f:74:6d:26:0c:69:c6:ed:
98:94:a9:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 02:00:42 2025 by rpki-client