Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/4rBXMCdwo8UFojREgn7PGMhDtvA.roa
File: 4rBXMCdwo8UFojREgn7PGMhDtvA.roa (raw, json)
Hash identifier: MB6w7PGTg7CpIu+VPJfhK1bSJfvQseS+GxLjwBC+Rk8=
Subject key identifier: E2:B0:57:30:27:70:A3:C5:05:A2:34:44:82:7E:CF:18:C8:43:B6:F0
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 04A0
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/4rBXMCdwo8UFojREgn7PGMhDtvA.roa
Signing time: Tue 13 May 2025 06:08:03 +0000
ROA not before: Tue 13 May 2025 06:08:03 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1184 (0x4a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 13 06:08:03 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=E2B057302770A3C505A23444827ECF18C843B6F0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:48:4e:3a:9a:c9:55:b7:26:29:54:bb:f5:85:
a5:29:c8:6e:9f:7a:d7:08:0c:4f:ed:da:51:38:ff:
da:15:48:00:f7:0c:8d:ee:39:ec:b3:09:d8:d7:d9:
6a:70:f6:23:51:72:bd:94:c1:14:75:fb:95:3c:9d:
9d:d4:4e:ac:2c:dd:cb:b3:aa:9a:83:6a:ea:f1:db:
8d:06:98:90:25:04:6e:15:52:51:11:87:e0:a7:eb:
3e:50:26:d5:4f:95:e2:d5:ef:ae:4f:a3:15:c2:f0:
ed:2c:e5:97:78:4b:b2:42:c1:7b:27:43:9b:1b:a6:
b8:71:3e:3d:ae:c0:54:67:4d:c6:5e:06:52:6c:db:
f9:2f:cd:03:f8:b2:db:c8:d0:5c:9b:92:80:3b:46:
7f:a1:97:a4:86:74:3b:b8:90:99:ed:4d:1f:65:9a:
40:24:38:33:7b:e8:fb:a9:3c:7d:1a:ce:75:0c:06:
5f:6a:da:ff:25:b1:24:fa:c1:9f:a4:24:23:1c:47:
43:73:7f:e5:6b:3a:00:1a:d8:ad:1c:7b:c5:9f:f6:
89:8d:d4:15:99:28:c4:ab:ad:db:47:11:63:79:82:
b2:83:c9:40:03:31:21:72:e0:52:15:70:47:7f:8f:
64:55:b7:5c:42:09:9c:07:6f:2f:2a:82:72:e2:57:
e8:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:B0:57:30:27:70:A3:C5:05:A2:34:44:82:7E:CF:18:C8:43:B6:F0
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/4rBXMCdwo8UFojREgn7PGMhDtvA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
6d:5a:fc:a0:78:9a:ec:f0:60:ec:57:11:68:27:ed:3e:21:01:
f7:8c:10:d8:48:89:2e:06:74:b8:e9:38:25:60:29:3c:cc:e4:
46:d3:73:0d:cd:2d:1d:71:70:d2:f6:a7:87:05:07:65:07:9b:
16:d0:94:46:f3:13:95:6d:aa:16:e3:9e:c0:c6:f0:e9:95:ee:
3b:ca:35:c2:be:e1:d0:54:09:c0:f1:52:c6:2c:5b:70:e7:15:
82:ea:8b:58:3f:ac:ed:d9:9e:6e:b6:ad:d4:23:ae:6c:5d:33:
7b:91:99:85:c9:85:ed:cd:fd:5d:26:98:c1:cb:36:2d:94:bb:
d1:69:89:86:23:6d:97:55:7e:96:50:ec:04:85:e1:89:90:18:
0b:d9:e4:c9:7f:a5:f8:3e:3c:cb:d8:ca:65:3b:d2:8a:25:42:
68:96:ba:f6:c1:63:dc:42:d9:6a:14:19:0a:df:34:1e:ad:ee:
f2:32:5a:50:fc:06:6d:ce:1e:5f:cf:9f:ee:d7:60:7a:57:4b:
0f:d4:76:fb:82:2d:54:82:b2:fa:19:ef:0e:80:c0:bb:3e:49:
75:23:a0:6b:1d:f9:aa:f7:6c:e6:ab:a2:db:2a:28:e2:38:52:
d7:47:16:c5:76:eb:ec:b8:f6:32:70:08:e0:d6:47:d1:dd:a0:
72:35:8a:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 19 00:00:36 2025 by rpki-client