Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/76Hx3_3UhN7hkAGfCM_5FLu3C3g.roa
File: 76Hx3_3UhN7hkAGfCM_5FLu3C3g.roa (raw, json)
Hash identifier: C4EbuCElsQOIWtvi6rSJcx9bt2iYcNxmbywmSK6d89E=
Subject key identifier: EF:A1:F1:DF:FD:D4:84:DE:E1:90:01:9F:08:CF:F9:14:BB:B7:0B:78
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0294
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/76Hx3_3UhN7hkAGfCM_5FLu3C3g.roa
Signing time: Sat 10 May 2025 12:37:51 +0000
ROA not before: Sat 10 May 2025 12:37:51 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 660 (0x294)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 10 12:37:51 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=EFA1F1DFFDD484DEE190019F08CFF914BBB70B78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:7d:76:3a:a1:aa:73:65:9c:73:de:71:a8:40:
3f:73:9c:08:e0:7f:29:0e:5b:92:03:47:2a:9c:ec:
88:ae:71:84:20:f7:41:f6:2c:6f:56:3a:03:6f:24:
5e:81:ae:9b:5a:b5:f4:87:5d:20:ac:2d:9d:b9:4b:
db:fc:27:84:56:79:8f:d7:5f:87:23:e1:55:64:b7:
0f:3f:e8:d2:4c:3c:76:83:96:22:c2:3a:91:84:10:
88:8a:a3:3f:b8:84:e3:ac:6a:28:6e:ed:ca:a2:55:
82:5f:e1:55:8f:f0:a6:86:f4:70:83:9e:67:08:03:
a7:ef:e1:3a:12:8f:0d:53:6b:16:b3:c9:d8:76:47:
aa:63:05:ab:b0:16:53:f8:c7:a7:fb:1f:ba:35:2c:
e3:0d:b3:d7:99:4a:1c:8a:e7:be:8d:a9:16:d4:a8:
b8:9e:bc:4b:66:82:61:db:e0:a5:0b:98:3c:3a:45:
b6:0d:11:4a:2a:03:c7:ab:ef:ca:86:cd:01:a6:f0:
55:84:ff:5d:20:53:66:18:bf:c4:a8:89:66:9c:3f:
f8:8c:d0:35:7e:03:90:ad:0d:1d:27:01:84:5c:73:
dd:9b:3b:33:e1:e7:61:08:24:7a:ce:77:50:1a:b8:
e5:30:28:de:39:ba:c7:17:85:07:d5:b7:b6:62:c4:
5e:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:A1:F1:DF:FD:D4:84:DE:E1:90:01:9F:08:CF:F9:14:BB:B7:0B:78
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/76Hx3_3UhN7hkAGfCM_5FLu3C3g.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
4f:33:6b:8b:0f:17:f7:c9:d1:f4:65:31:5d:a4:0e:37:8f:15:
f7:87:1a:ad:18:51:72:08:6e:89:15:10:2b:8e:7d:1e:54:1d:
3f:45:51:75:b1:b4:1b:51:bb:49:48:c8:95:e7:95:c7:f7:b6:
c4:b7:ef:53:fa:84:ab:8c:15:c4:d4:c8:b3:f2:26:b9:22:8d:
d0:a5:27:ba:1c:dc:fa:ce:d6:59:38:34:18:85:7b:18:4f:d4:
00:9a:8c:c1:bc:59:f4:69:31:ce:ae:1c:26:ba:b8:d9:8b:13:
47:cf:4d:d0:ef:04:1d:08:24:ff:43:b8:d0:5d:70:03:8e:49:
83:1b:16:bb:4e:8b:1e:8c:fe:72:42:62:34:a2:da:2b:33:57:
54:e1:8a:85:6d:7d:82:73:7b:31:cf:61:d7:d1:9c:4b:98:cc:
80:52:46:d4:32:13:e7:ad:b1:ac:2f:ad:65:a9:18:dc:f9:96:
29:c2:6a:a4:34:e6:b9:d2:19:cd:e4:6f:5a:1c:de:ac:e0:20:
8a:21:ab:fe:f7:55:f0:27:0d:37:fe:86:01:a3:e0:cf:07:5d:
54:77:49:62:19:ff:88:f7:a9:7d:72:cb:01:8d:55:e4:c4:8c:
10:b9:c4:a1:eb:63:f4:52:b7:52:70:c5:c5:71:f5:d1:32:7a:
b7:3b:3b:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 23:45:15 2025 by rpki-client