Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/4S6K783J8vsXklvMrDnwKGGZvlc.roa
File: 4S6K783J8vsXklvMrDnwKGGZvlc.roa (raw, json)
Hash identifier: Xh9KKgjhHYlJUWqW+QraMuTUapd4acQy6Rtt+uirRJM=
Subject key identifier: E1:2E:8A:EF:CD:C9:F2:FB:17:92:5B:CC:AC:39:F0:28:61:99:BE:57
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 04E0
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/4S6K783J8vsXklvMrDnwKGGZvlc.roa
Signing time: Tue 13 May 2025 14:08:07 +0000
ROA not before: Tue 13 May 2025 14:08:07 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1248 (0x4e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 13 14:08:07 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=E12E8AEFCDC9F2FB17925BCCAC39F0286199BE57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:ce:e3:f2:d4:88:15:b9:17:b3:b9:dd:d2:a4:
ce:35:ce:36:79:52:69:b8:69:dd:1c:75:00:bf:73:
f4:89:81:52:ff:8b:46:f1:66:0a:9b:84:41:04:ae:
a7:6b:e5:39:20:34:03:bf:8d:45:a2:bd:39:fb:f1:
7e:55:9d:25:36:14:40:e9:88:e0:2f:72:3d:4e:b9:
31:93:13:7c:ed:9d:9f:10:92:a7:e8:65:6a:75:58:
e5:87:49:e6:a1:f8:f7:c8:0c:3a:95:04:fb:8c:cf:
44:10:a4:66:17:ea:50:80:6b:ea:02:e3:10:48:c2:
75:3c:d3:46:e2:f8:9a:32:08:33:11:8f:dc:b1:ae:
24:3d:c6:72:93:29:77:f3:d8:ff:8f:73:86:bd:bc:
49:81:c0:ea:f4:e0:d9:e1:76:71:e5:5e:6d:8a:57:
7b:e6:29:56:88:6e:be:7e:a8:15:7b:1d:50:df:ca:
fb:6b:71:d8:99:fe:0f:98:11:b3:85:92:71:23:0b:
85:a1:7d:f4:76:65:e8:9a:84:1e:c1:ee:da:cf:3e:
24:b7:7d:08:6b:25:35:81:90:6a:a4:7c:e9:a3:ed:
65:c9:14:8f:2d:25:a7:e7:44:16:7b:02:23:f0:03:
c8:70:8e:1a:c0:b6:68:a6:2a:b3:0c:88:55:ec:e0:
f0:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:2E:8A:EF:CD:C9:F2:FB:17:92:5B:CC:AC:39:F0:28:61:99:BE:57
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/4S6K783J8vsXklvMrDnwKGGZvlc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
4c:a9:d6:b4:9c:55:e3:d3:aa:2a:a8:27:a1:bc:13:23:fa:8f:
09:1c:fd:6f:5c:9e:a3:9e:ec:cf:f4:ec:86:91:94:c7:69:74:
00:43:ab:44:19:b7:a0:bc:8c:57:a7:0e:e9:e0:c6:76:c1:39:
47:a3:6a:ac:5c:6b:88:43:a1:8e:cc:04:20:22:17:0f:7c:60:
cf:cb:ac:50:81:e1:b1:e3:71:90:b5:2a:71:3e:ed:ef:49:88:
e1:06:e8:96:a1:a0:46:cd:e1:ff:31:d4:7a:35:37:42:66:a8:
ad:0f:9f:57:79:7d:0a:7c:b7:94:13:78:98:ef:eb:4a:ef:00:
54:10:a7:25:19:23:bc:3e:dd:28:07:12:c1:6f:a8:a7:3c:c6:
92:58:59:13:41:1a:15:fb:0f:f2:29:48:69:07:46:36:dd:d3:
40:82:7a:cf:cb:4d:1c:27:cd:4d:87:40:ff:5e:85:a4:02:5d:
f9:26:0e:1f:1c:5e:cb:59:52:b6:24:b9:8b:2b:45:6f:60:ee:
fd:72:4f:1a:18:63:b1:7f:9f:61:23:e6:b3:96:80:ab:99:9f:
cc:26:81:af:df:0f:96:c8:b2:c1:9d:dc:1b:26:19:c3:84:3c:
01:ec:98:c4:1b:0c:3f:fb:ac:2e:58:9b:9e:10:77:9f:9f:26:
6a:55:99:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 21:27:15 2025 by rpki-client