Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/8KVPY9EIrONsEueAZstsagI6Dsk.roa
File: 8KVPY9EIrONsEueAZstsagI6Dsk.roa (raw, json)
Hash identifier: TJyWdURTmIondPFzga2GUBELAxO1JJhiRhWMClLvIAA=
Subject key identifier: F0:A5:4F:63:D1:08:AC:E3:6C:12:E7:80:66:CB:6C:6A:02:3A:0E:C9
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 012C
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/8KVPY9EIrONsEueAZstsagI6Dsk.roa
Signing time: Thu 08 May 2025 15:37:45 +0000
ROA not before: Thu 08 May 2025 15:37:45 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 300 (0x12c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 8 15:37:45 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=F0A54F63D108ACE36C12E78066CB6C6A023A0EC9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f9:3b:71:eb:b5:07:d3:8d:f2:86:e5:2c:bd:
d0:84:0f:eb:7a:62:9b:fb:d4:2a:30:df:88:e4:c4:
47:00:1b:e1:ef:6c:cc:42:41:05:88:75:df:68:44:
fb:38:88:57:06:03:11:90:0a:9c:99:d9:35:1f:e4:
3d:1a:69:1c:57:a6:32:ea:53:1d:a7:76:1f:1f:5c:
4d:1b:8f:30:21:b8:ee:e2:1a:d4:35:b7:2b:71:e7:
1c:0e:b8:e3:9e:e5:f7:32:9d:23:62:f8:c7:1a:fa:
f7:8e:1a:03:a2:c5:83:d3:ad:7c:93:b8:8c:c3:95:
e9:d2:e6:b3:df:95:80:7e:a2:4f:d9:ea:c4:5d:ac:
1c:59:ce:2a:ee:f5:86:0e:81:1a:55:c9:b1:a9:57:
c7:77:2a:b1:ca:63:63:a0:a4:e0:83:82:00:85:63:
65:4b:56:54:88:9e:2c:04:7c:7b:fa:d8:47:36:8a:
1d:3a:09:c9:5c:6b:d1:8b:6d:83:f2:e1:b9:8d:02:
4e:3d:1d:da:34:8a:4b:aa:37:03:d6:db:70:e9:51:
3d:79:cc:7f:cc:55:7a:3a:11:bc:31:4a:28:67:4c:
f9:00:dd:3d:ca:ff:f3:30:eb:57:f6:1b:77:6b:94:
59:14:a6:9f:6e:69:54:16:6b:5c:fc:7f:12:cc:88:
e0:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:A5:4F:63:D1:08:AC:E3:6C:12:E7:80:66:CB:6C:6A:02:3A:0E:C9
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/8KVPY9EIrONsEueAZstsagI6Dsk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
8a:d2:13:7f:c3:af:ba:60:8e:69:2b:5a:5e:9e:f4:66:56:f1:
3e:85:e7:0c:65:30:69:4f:12:dc:18:a8:28:81:ff:c2:01:6b:
e9:93:2c:d6:8a:bb:22:f5:b3:5d:48:06:20:ec:2f:1f:b6:b7:
55:21:50:80:f3:91:89:cd:d5:34:18:4b:a6:a6:67:ab:0e:83:
2d:f6:64:ca:eb:23:3f:5b:76:24:1c:61:7b:a9:2f:cc:db:22:
3b:e7:c1:6e:56:23:ce:1a:64:31:d0:77:05:6a:4d:ce:b9:2e:
50:8d:74:31:d3:86:b5:65:07:87:00:f4:94:7b:40:69:b8:b2:
3e:7c:c0:3c:4a:d8:be:79:eb:de:5c:64:bd:9d:fc:15:ec:79:
fb:52:9c:6a:d3:1c:d7:2f:aa:93:66:90:94:bc:d0:cc:55:1a:
0e:6b:55:13:58:fd:84:79:67:51:61:5d:03:6e:36:b3:b3:84:
1a:e3:3d:54:ac:c8:c1:35:56:fe:3c:85:86:22:f6:94:39:95:
eb:01:f9:dd:8e:01:47:12:8d:1e:06:9b:72:3f:4a:bf:de:e8:
16:28:76:c6:b1:d7:fd:39:c8:37:19:7c:dd:64:4f:ad:af:bd:
cc:9a:ef:42:20:37:7f:9b:14:49:04:38:be:f8:5e:cd:4e:9e:
a1:22:ab:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 19 10:41:46 2025 by rpki-client