Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/BcK3w5y2YGerT-JzzNfCdcMgWIk.roa
File: BcK3w5y2YGerT-JzzNfCdcMgWIk.roa (raw, json)
Hash identifier: KDlFpBuy1SAWPgxT8UkTzCD0ErmapG2wkCwJSicjzHQ=
Subject key identifier: 05:C2:B7:C3:9C:B6:60:67:AB:4F:E2:73:CC:D7:C2:75:C3:20:58:89
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0768
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/BcK3w5y2YGerT-JzzNfCdcMgWIk.roa
Signing time: Fri 16 May 2025 23:08:08 +0000
ROA not before: Fri 16 May 2025 23:08:08 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1896 (0x768)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 16 23:08:08 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=05C2B7C39CB66067AB4FE273CCD7C275C3205889
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:74:31:00:be:f9:2b:b2:c5:63:94:80:1f:54:
05:10:7e:da:76:7c:67:99:24:ec:fc:d7:47:36:98:
6c:1d:60:bc:31:46:48:0b:c0:87:3d:09:90:8f:42:
62:95:df:89:fa:a9:a3:aa:51:96:0d:75:ca:af:8e:
11:0e:8f:bd:5b:1c:f5:89:e5:9c:43:d2:34:f5:8c:
de:63:39:db:ce:28:b3:eb:15:ef:9d:40:25:e1:6a:
a8:ca:0a:ef:ef:cc:85:66:8b:fa:8f:9b:e9:13:93:
f7:80:3c:8f:d3:d7:bf:7b:72:1e:13:a8:e4:22:a0:
63:8f:cc:e9:81:df:41:a6:ed:f6:3b:58:8c:63:db:
a1:47:07:ba:c6:91:89:2a:ba:50:b5:d3:5b:71:bb:
ff:47:d0:a7:cf:08:ba:60:92:be:be:a4:9c:3e:ea:
73:9e:13:05:26:54:e0:ea:d9:84:1a:e3:a3:5e:3f:
f4:08:01:d2:6d:7b:bb:ff:c3:96:75:c9:3b:09:da:
46:91:eb:a7:1b:18:4a:1a:ae:9e:5c:65:e7:58:ea:
bc:78:48:13:e9:51:f1:c6:13:67:72:87:49:af:94:
15:7e:c4:b3:57:8c:dd:8e:a9:89:67:2e:41:56:1c:
6e:97:08:e7:dd:40:0c:8b:74:2c:8b:75:99:a5:0f:
06:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:C2:B7:C3:9C:B6:60:67:AB:4F:E2:73:CC:D7:C2:75:C3:20:58:89
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/BcK3w5y2YGerT-JzzNfCdcMgWIk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
8e:51:99:b9:55:f1:84:e3:5a:89:f4:50:f6:0b:2c:da:d6:f5:
16:64:32:5d:1c:ef:28:4d:e7:59:a2:e8:12:b4:0b:48:90:ad:
4c:a3:e3:49:08:44:c4:24:86:c0:fd:96:ec:a0:27:a1:76:34:
33:58:6e:bb:05:02:26:34:2d:ed:04:c8:e4:d1:d7:73:d2:de:
fe:23:e7:aa:16:09:1b:6f:2a:7e:80:5d:ed:a0:ee:e4:bb:02:
bc:cc:76:13:a1:b4:c4:b4:b9:0e:57:08:4b:e5:2d:c6:6c:f3:
f4:6a:e3:7e:53:60:93:ea:5f:0d:63:a4:c3:2c:4e:13:87:ae:
78:7d:49:cf:39:4c:7e:98:67:b7:c1:2f:4e:fd:00:b6:f4:79:
bc:cd:a5:65:f7:09:b0:d3:e3:b1:9c:f2:33:85:59:c0:da:b8:
d3:a0:81:44:cd:2f:0e:e5:21:19:be:ff:99:f5:89:d2:5f:cd:
2f:67:09:43:3e:63:2a:35:eb:08:b6:84:74:b4:9e:92:d2:7f:
ef:e4:fd:57:8b:aa:bf:8a:0c:af:83:83:1e:6e:6c:43:a0:8a:
2d:f0:09:f3:bc:8c:96:02:b5:c0:3c:b8:84:1e:28:c3:cc:70:
9a:af:e8:a4:48:32:6d:79:75:34:ad:fd:b5:97:1e:0d:54:a7:
2f:76:a6:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 01:58:34 2025 by rpki-client