Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/EDCD3sGwK8Q4K73G2ER9ZV3EMHg.roa
File: EDCD3sGwK8Q4K73G2ER9ZV3EMHg.roa (raw, json)
Hash identifier: KFe/X0uq9chvvrRbtIzR3A0wQEGYCbvB3Z2sx4G0bu0=
Subject key identifier: 10:30:83:DE:C1:B0:2B:C4:38:2B:BD:C6:D8:44:7D:65:5D:C4:30:78
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 058C
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/EDCD3sGwK8Q4K73G2ER9ZV3EMHg.roa
Signing time: Wed 14 May 2025 11:38:02 +0000
ROA not before: Wed 14 May 2025 11:38:02 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1420 (0x58c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 14 11:38:02 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=103083DEC1B02BC4382BBDC6D8447D655DC43078
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:3f:d4:72:28:2a:46:ea:dd:e7:05:00:da:ff:
8b:18:19:9a:b7:b9:75:4f:7d:60:b0:b8:cb:e6:11:
7a:b0:cb:c9:b7:4d:fc:50:b3:58:b3:11:d0:ac:95:
47:b1:89:0a:18:31:fc:4a:8d:72:cc:77:99:c3:2d:
57:56:2f:80:8f:2c:1c:61:7c:a5:bb:56:73:52:11:
e6:af:3d:44:f8:47:72:c4:5f:b0:d8:e0:b1:2c:53:
c1:9d:db:1d:97:78:98:51:73:9b:c9:5c:37:63:a5:
bb:4e:77:f9:12:d6:e8:7c:14:00:7f:87:87:1a:bc:
45:2b:13:7f:a6:76:71:dd:90:2f:2c:56:a4:1a:33:
e0:bd:46:c2:69:f6:29:8d:30:3e:d1:76:f8:f0:72:
d6:b4:de:4f:15:22:94:63:3f:d4:4b:c5:cf:58:5a:
1b:2a:58:86:6d:d4:1e:c6:a2:23:3d:f4:e7:b2:d6:
48:36:6a:21:1e:c9:49:88:12:66:22:fa:d4:d9:de:
60:84:e7:f4:2c:d9:d7:1f:3b:23:ba:a1:7c:9a:07:
bf:26:19:98:d3:b9:3b:77:f7:2a:0c:80:9b:24:20:
c8:f9:2a:89:90:fa:8e:99:35:4d:af:32:fa:c3:31:
c2:b0:1c:c6:fc:a2:db:77:89:67:b4:71:d7:e5:74:
c0:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:30:83:DE:C1:B0:2B:C4:38:2B:BD:C6:D8:44:7D:65:5D:C4:30:78
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/EDCD3sGwK8Q4K73G2ER9ZV3EMHg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
88:1b:dd:77:d6:99:8c:ed:1d:f1:25:51:41:58:9e:87:36:9f:
a0:b0:58:ff:8a:c5:df:3d:05:46:a9:f1:d9:99:cd:05:0d:45:
7e:bf:8f:01:9d:16:4a:66:6d:b8:62:98:e0:b2:d1:ed:6c:a8:
28:fc:c7:29:e8:29:af:20:f6:d5:71:b3:37:d9:16:37:ff:25:
76:d2:40:30:08:c0:73:0d:ea:ea:60:15:ec:1b:77:19:20:84:
10:96:80:55:fe:fc:81:79:2a:98:85:0a:f3:ff:83:fe:6a:86:
ae:9d:4c:e5:cf:5b:c2:37:ce:3c:70:88:86:df:2d:cc:c5:19:
89:23:4a:6f:9a:d1:7f:95:e2:90:d6:6e:84:df:db:82:10:3e:
11:31:b3:e3:b5:0c:e9:f0:45:b6:97:75:c9:12:a8:cb:6d:42:
44:cc:b1:a4:02:46:e4:b0:55:0f:7d:bc:29:77:45:34:3d:af:
da:3c:4b:2e:76:d7:60:98:7b:d9:73:83:aa:f5:75:fc:d2:a5:
de:de:74:ad:88:4a:a8:52:59:26:e9:0b:21:ff:85:fc:82:29:
f0:e4:10:25:6f:af:c5:5c:0d:c5:44:1d:79:51:ae:82:40:b2:
b7:eb:13:fc:66:6d:24:c9:1f:d0:fa:d6:7b:e9:a9:40:9e:60:
2f:f0:05:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 23:35:03 2025 by rpki-client