Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/4AvZwjGi6Fulhp78GGCv_oqA-1o.roa
File: 4AvZwjGi6Fulhp78GGCv_oqA-1o.roa (raw, json)
Hash identifier: hxjHJd6/KRIkYDAfGcvEP0569vMJyaQcfsF5G2MVojI=
Subject key identifier: E0:0B:D9:C2:31:A2:E8:5B:A5:86:9E:FC:18:60:AF:FE:8A:80:FB:5A
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: D4
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/4AvZwjGi6Fulhp78GGCv_oqA-1o.roa
Signing time: Thu 08 May 2025 04:37:42 +0000
ROA not before: Thu 08 May 2025 04:37:42 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 212 (0xd4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 8 04:37:42 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=E00BD9C231A2E85BA5869EFC1860AFFE8A80FB5A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:de:67:1f:e0:61:50:fc:2c:86:48:41:14:bb:
b1:af:d2:73:5f:52:b6:b2:7e:63:6e:9a:e5:7a:25:
c3:82:bd:1b:44:94:8b:89:02:2e:4e:21:64:72:61:
3d:c6:d8:3d:04:c8:d9:bb:40:75:85:3f:20:e5:ee:
e1:38:29:80:00:66:55:f9:a2:db:a8:ae:5d:5b:74:
50:1c:7e:40:43:7d:22:f6:2c:66:f2:e8:89:96:b5:
7c:5f:f9:68:aa:81:aa:6b:48:d9:83:49:d0:f1:59:
3c:38:46:a8:40:84:4e:d8:e8:f7:43:ee:4c:6f:f3:
4f:05:a2:49:e0:fa:04:04:4a:9a:42:6d:d5:a1:6d:
3f:ec:1f:2b:2c:b8:53:38:96:e5:51:90:69:da:77:
07:fa:41:1f:06:e5:ff:4f:af:62:97:61:2c:76:b9:
c0:5b:8b:c2:d6:a5:b4:1a:8f:68:80:ad:45:85:68:
e1:4d:0e:92:f6:f5:28:b4:70:3c:39:b9:8c:db:85:
c8:46:f6:de:e5:77:d6:7d:c8:42:d8:48:2e:bb:e8:
f7:a3:d8:cb:41:4a:16:09:08:95:b4:60:18:b4:57:
6a:d4:57:1c:a2:62:87:f4:f4:c9:8f:8e:f8:ed:9e:
bd:00:01:cf:f2:09:ca:ba:a0:1e:10:cb:fb:cd:f9:
73:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:0B:D9:C2:31:A2:E8:5B:A5:86:9E:FC:18:60:AF:FE:8A:80:FB:5A
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/4AvZwjGi6Fulhp78GGCv_oqA-1o.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
7f:2b:4b:3b:17:28:de:f1:d8:32:b2:4f:b7:4f:54:d4:42:f6:
90:94:ec:d7:e5:a7:22:16:87:5c:3b:f9:51:b9:e8:36:b3:ff:
92:7c:bc:b1:8a:b2:53:4b:49:e3:a0:b3:1a:29:3b:46:e6:7e:
95:20:b4:71:36:68:b6:74:b0:b7:a7:c1:14:f7:2a:52:6d:6f:
ce:ba:2b:80:ea:36:b2:91:da:a6:22:22:80:a1:31:b0:73:5c:
de:4c:fe:db:eb:e4:5b:1b:10:62:f4:ac:9b:ce:f3:5c:b9:fb:
f3:60:8e:3c:2f:fe:72:4f:8c:ee:a1:f4:0b:6f:a5:3f:49:4f:
50:77:0f:f7:d9:fd:c6:06:c9:00:ea:45:b6:5d:ea:43:eb:31:
49:bc:f4:b5:1a:fb:a9:37:3f:02:a3:bf:0f:c7:5b:52:e2:6a:
a0:dc:fc:17:8e:4e:9c:26:25:c2:e1:23:18:bc:78:b5:82:db:
61:03:df:dd:cf:03:86:12:16:17:56:42:20:b8:20:b1:22:bc:
7c:70:f6:69:2b:5a:06:d1:86:16:42:50:8c:ec:99:b0:79:67:
28:95:6e:d4:75:55:12:1e:1e:92:17:c2:f5:55:bd:97:c9:fd:
60:7d:e3:94:62:c9:ce:03:b1:88:56:e8:bb:74:2d:96:c9:9a:
01:b4:6d:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 19:57:26 2025 by rpki-client