Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/6_6oaeuPCSWuTpmRjYda0QzYaxY.roa
File: 6_6oaeuPCSWuTpmRjYda0QzYaxY.roa (raw, json)
Hash identifier: TDbSOPCD9vOAYyrLZb0cl09vjVdW7j1pyV4Qk6rXbt8=
Subject key identifier: EB:FE:A8:69:EB:8F:09:25:AE:4E:99:91:8D:87:5A:D1:0C:D8:6B:16
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0208
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/6_6oaeuPCSWuTpmRjYda0QzYaxY.roa
Signing time: Fri 09 May 2025 19:07:47 +0000
ROA not before: Fri 09 May 2025 19:07:47 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 520 (0x208)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 9 19:07:47 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=EBFEA869EB8F0925AE4E99918D875AD10CD86B16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d9:cd:8f:f2:84:dd:38:92:ab:29:f0:42:08:
bf:8c:fd:3a:6f:24:71:89:93:d3:44:09:4e:bf:96:
e4:2c:46:b7:8c:94:43:4e:fe:5c:20:60:6c:62:bd:
1e:d1:7e:bc:4f:86:b8:02:aa:a1:90:30:db:a1:9e:
f6:d9:4f:d8:16:46:64:f6:81:9f:6a:6c:7e:91:40:
27:86:8a:25:43:9b:fc:2b:8b:be:ed:86:48:ab:36:
ec:82:5f:c1:3f:c1:11:15:f8:11:9a:d9:ab:b5:2b:
75:89:3b:c2:95:08:1c:42:d3:12:c3:42:62:c6:66:
53:02:3b:90:c7:b4:99:d1:62:b9:bd:e7:74:1f:29:
12:af:e6:81:a6:db:81:62:85:34:1b:ef:3c:5c:aa:
20:4f:c4:76:94:a6:e2:95:4a:c2:1d:0b:c9:d5:75:
b0:db:b2:52:d9:28:e8:3b:71:03:d7:eb:87:2e:4e:
73:c3:df:09:59:ff:8d:54:ee:ec:0d:cc:4f:c2:19:
a7:29:c5:3d:83:40:19:3b:8f:40:cb:fb:05:b2:ce:
30:03:5f:1f:fc:17:b9:52:ac:a1:7e:71:68:51:6f:
02:d7:fa:b2:cd:b2:94:13:ef:ed:4e:28:df:46:33:
76:38:b4:ad:4d:c5:29:51:97:f1:95:63:8f:8b:01:
4b:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:FE:A8:69:EB:8F:09:25:AE:4E:99:91:8D:87:5A:D1:0C:D8:6B:16
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/6_6oaeuPCSWuTpmRjYda0QzYaxY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
7e:3f:d9:aa:b0:c3:98:9e:aa:fe:ee:fa:7d:57:91:4c:54:70:
cd:a5:93:fa:4d:12:88:32:ff:a1:34:96:db:9f:96:ab:8a:1e:
61:ba:f9:15:f7:1f:a7:31:5b:9e:46:c4:a0:63:03:2f:b3:c7:
e9:61:26:34:18:13:ce:8b:5f:ee:d4:98:ea:32:a0:66:7f:7c:
32:b4:79:c7:2c:c5:71:9c:69:00:bf:cd:4a:4a:f9:67:6e:e3:
09:57:ff:60:5d:c4:e9:12:67:23:53:b0:1b:58:05:87:d0:8c:
35:09:0a:67:95:78:c0:aa:1e:a9:e5:ac:64:75:c4:9c:f0:59:
88:44:7c:e4:42:2f:bd:31:09:3a:7d:c1:9a:8a:e0:02:42:8f:
82:e3:38:20:2b:ff:e7:90:c4:48:10:42:1a:d5:a0:2e:14:35:
75:c3:e3:1b:6f:b0:ae:1a:51:16:62:8c:3c:ef:d2:e6:3f:f5:
57:cb:a8:9a:95:72:fd:a8:e6:5a:ef:fe:d3:3f:0e:d8:07:56:
87:b1:26:24:75:cc:01:70:a6:76:63:79:bd:e4:07:71:fc:e3:
eb:10:f3:1d:85:60:a9:1a:e4:b6:5f:13:f6:1f:4b:79:95:fa:
0f:bf:03:1e:7c:e4:c9:99:10:97:ce:33:98:b4:ef:06:f1:3d:
4e:3f:8f:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 09:56:00 2025 by rpki-client