Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/3PtxocbKUv_ujPXRgHaxiOHMFmg.roa
File: 3PtxocbKUv_ujPXRgHaxiOHMFmg.roa (raw, json)
Hash identifier: L8zbh/eB66/IuNFA+TInvoz9kf62cmoCk4Lb1jQhW3M=
Subject key identifier: DC:FB:71:A1:C6:CA:52:FF:EE:8C:F5:D1:80:76:B1:88:E1:CC:16:68
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 01B8
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/3PtxocbKUv_ujPXRgHaxiOHMFmg.roa
Signing time: Fri 09 May 2025 09:07:45 +0000
ROA not before: Fri 09 May 2025 09:07:45 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 440 (0x1b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 9 09:07:45 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=DCFB71A1C6CA52FFEE8CF5D18076B188E1CC1668
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:4f:23:a1:de:e3:7c:c9:06:24:9c:d7:cc:ac:
c1:e3:4e:0d:ef:73:52:4c:27:c9:82:9a:07:de:1a:
f9:73:18:ce:8e:67:2f:fa:3a:2b:a8:b2:ac:92:e4:
12:0d:00:74:47:cf:2b:43:71:d5:ea:7b:25:b4:ac:
08:d4:07:c3:e1:78:1f:0f:f6:d4:84:48:07:9f:2a:
29:72:e7:16:5a:05:df:aa:00:2d:13:11:38:c3:b7:
13:18:46:43:19:6d:ae:94:f9:67:6c:cb:b0:79:b1:
e3:07:6f:3d:23:ce:d6:50:e4:55:10:81:77:12:67:
f7:7e:aa:c7:7d:73:3e:d4:6d:27:72:36:a1:5a:a4:
f7:2d:ba:a5:7e:bf:9d:6e:61:92:48:82:3d:07:26:
7f:10:cd:78:2c:a5:85:81:f9:ea:07:82:f6:30:1d:
f9:75:f8:13:a2:f1:e5:a8:67:eb:59:bb:bd:f1:a7:
0a:41:5d:c1:7e:4e:aa:1a:97:dd:83:70:9d:61:57:
7e:4f:d1:7b:19:f9:10:49:e3:22:7e:43:ee:30:f8:
e4:c1:62:79:8e:73:33:78:dc:2a:13:58:ea:86:85:
db:e1:cf:a2:27:a4:e5:01:d1:8c:08:bd:d1:07:af:
c3:25:f4:bf:5a:13:98:ab:c5:9a:9b:69:f0:4a:38:
09:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:FB:71:A1:C6:CA:52:FF:EE:8C:F5:D1:80:76:B1:88:E1:CC:16:68
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/3PtxocbKUv_ujPXRgHaxiOHMFmg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
9f:68:30:0c:15:50:08:79:d1:74:7a:1c:4a:db:07:65:06:9c:
26:d9:e7:c2:1c:dd:b9:f6:aa:12:f3:ae:12:ec:0d:a1:4a:2a:
e8:80:65:0c:ca:23:35:39:26:66:23:be:15:0d:1f:bc:89:0a:
fd:09:e0:f5:65:dc:a5:e9:43:7c:39:d2:e5:d8:58:97:45:00:
e2:7e:14:8e:25:20:c4:17:03:81:5f:c8:55:62:00:da:34:d5:
f0:08:82:9c:15:c7:4f:fe:ea:86:18:00:2c:bd:3d:85:3b:97:
9a:e6:37:0c:12:43:b8:b2:1e:3e:bf:f9:f4:94:0e:90:27:f0:
17:4c:1c:4b:2a:c0:b2:15:40:e5:de:3e:d0:b3:99:56:fe:8f:
cf:d1:06:17:51:fc:e4:7c:13:7f:63:9d:0a:58:b3:71:f7:89:
c6:b1:d4:b8:17:f0:92:08:88:6d:89:8c:00:56:08:75:e0:98:
56:1c:0d:d8:f8:86:5b:05:e0:8b:b7:81:38:1f:f2:67:24:07:
da:42:f1:24:ef:8b:1a:6f:97:ba:39:da:1b:c4:e7:b2:7b:d8:
c6:0d:89:49:e8:62:cb:a9:20:c5:65:75:69:1a:94:ab:5d:21:
9f:a7:d0:7c:86:b0:64:c8:7e:6b:1d:c2:21:e8:36:f5:6e:61:
19:0e:b1:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 19:47:47 2025 by rpki-client