Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/7f7FGHXEfOfZ-mpLTmGd7KTwuzQ.roa
File: 7f7FGHXEfOfZ-mpLTmGd7KTwuzQ.roa (raw, json)
Hash identifier: 18dD0comgyajjbkcOFZO2SSbghc3FcN3aOdbUl+v9ls=
Subject key identifier: ED:FE:C5:18:75:C4:7C:E7:D9:FA:6A:4B:4E:61:9D:EC:A4:F0:BB:34
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 074C
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/7f7FGHXEfOfZ-mpLTmGd7KTwuzQ.roa
Signing time: Fri 16 May 2025 19:38:06 +0000
ROA not before: Fri 16 May 2025 19:38:06 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1868 (0x74c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 16 19:38:06 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=EDFEC51875C47CE7D9FA6A4B4E619DECA4F0BB34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c0:96:a8:7f:65:54:28:2d:bf:a8:b9:16:9d:
03:31:6b:50:9a:c0:65:f7:a2:5e:e8:34:dd:ac:cc:
ea:56:41:67:8a:85:d2:85:d3:a6:f4:da:a5:ec:3f:
96:77:7e:67:54:d2:96:31:19:8b:90:00:3c:c6:13:
24:01:53:15:41:49:6d:84:85:6f:c6:a3:05:3d:33:
d0:a1:f4:8a:8b:10:b9:70:7d:b7:d3:e8:f6:a4:de:
d2:99:1f:56:11:f3:2c:6e:7f:1d:40:bf:63:33:18:
ca:12:61:f7:38:74:cc:87:2a:93:2a:1b:df:ca:4f:
c9:6c:ed:dd:34:c6:97:a7:57:67:15:dc:a9:65:1e:
73:e1:1a:db:e6:4c:02:a4:69:81:99:de:15:e6:f9:
c7:10:79:ed:d9:7a:90:0b:32:2c:d7:f6:dc:4d:6d:
09:0f:ab:2a:ef:e7:8d:68:df:a7:b7:30:60:6b:dd:
93:cd:0e:53:81:6a:95:2f:e6:cb:15:53:52:63:74:
03:1b:65:59:65:55:15:43:97:cd:64:cd:52:69:e2:
43:cf:e5:26:5a:57:08:c7:2a:23:bb:e2:29:2e:57:
f0:35:86:38:a4:16:c4:46:11:d9:36:8c:ae:80:c7:
ba:38:bb:fc:5f:2b:0e:cf:b4:ce:3d:bc:c5:e0:12:
b6:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:FE:C5:18:75:C4:7C:E7:D9:FA:6A:4B:4E:61:9D:EC:A4:F0:BB:34
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/7f7FGHXEfOfZ-mpLTmGd7KTwuzQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
89:06:4c:79:07:fd:b7:4e:b5:8a:15:0c:0e:02:92:7f:dc:5d:
b4:68:7d:9b:3a:2a:35:4c:4f:08:a2:8c:ac:cd:4e:9b:e9:87:
41:05:c4:42:e5:2e:af:2f:a5:fc:a8:e3:64:6e:5f:52:d7:dd:
e6:6d:9d:02:af:eb:ba:14:fd:29:3e:d7:f2:55:11:4d:13:ad:
52:2a:2d:0b:2b:a7:7c:03:13:f9:32:f3:7a:3b:1c:b8:07:a4:
f2:8b:00:cc:0a:9f:30:9b:b5:f7:e4:d0:b7:96:18:a5:d9:56:
b6:82:a3:52:76:74:0c:51:48:97:2d:96:b4:92:53:94:3a:e5:
6f:7f:e9:db:f8:cc:68:81:cb:a3:ef:0e:d8:3c:3f:fc:dd:8e:
5e:92:56:05:b0:f6:ca:f0:a6:88:31:cc:8a:86:58:80:7d:5e:
33:5d:8f:7d:ba:13:9a:6d:60:52:f1:22:b9:48:9e:40:2c:cb:
69:c1:2a:ba:c7:2e:7b:39:50:da:ca:37:cd:aa:9f:c0:7d:a9:
a0:d5:5a:7b:cc:a9:6e:5f:4d:5c:20:43:c0:ff:5b:2b:5e:64:
d4:1e:7e:d5:5a:84:e9:26:8e:2f:82:80:ea:da:86:36:06:28:
5b:38:c5:67:d8:16:a2:0b:4d:78:22:79:a9:f2:b8:4f:97:e0:
57:83:a6:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 22:41:24 2025 by rpki-client