Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/FaV2O88THBuZls8coqWuAMJrmqg.roa
File: FaV2O88THBuZls8coqWuAMJrmqg.roa (raw, json)
Hash identifier: LI2tT2Efu1b7Lhnvz8Z6E/nqf0R4Q1utmeoskppwy2o=
Subject key identifier: 15:A5:76:3B:CF:13:1C:1B:99:96:CF:1C:A2:A5:AE:00:C2:6B:9A:A8
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0274
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/FaV2O88THBuZls8coqWuAMJrmqg.roa
Signing time: Sat 10 May 2025 08:38:22 +0000
ROA not before: Sat 10 May 2025 08:38:22 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 628 (0x274)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 10 08:38:22 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=15A5763BCF131C1B9996CF1CA2A5AE00C26B9AA8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:19:be:1c:45:da:4b:d2:75:cb:f4:ee:fc:ef:
52:dd:61:09:5d:89:94:aa:a7:f8:3c:b5:07:f9:4c:
19:9b:8c:31:5d:70:18:7c:e0:b5:a5:0c:de:9c:e7:
13:c3:8c:d6:a9:b9:6b:43:b9:6e:ec:cd:ef:51:f1:
be:0b:fc:f4:37:01:38:03:ad:25:9a:a5:a9:1d:27:
dd:08:12:00:4c:ef:73:54:8d:db:42:43:b9:c6:3e:
96:70:64:17:83:69:92:f8:12:a9:b1:48:48:d3:1d:
ed:17:a8:8f:0c:b1:6e:03:3e:91:b6:e0:dc:1e:c4:
32:f8:e3:cd:40:db:45:3c:aa:2d:a4:b3:a0:40:85:
78:cb:ee:49:78:b1:af:a7:5b:99:f7:68:97:2b:3d:
ef:17:3d:65:c1:b5:ce:1a:44:be:23:b1:28:3f:83:
d5:e4:32:2d:e9:73:9e:0a:d4:0f:c4:37:fb:ef:99:
61:a4:de:b3:2c:4c:b1:8d:6e:6c:12:d5:8f:2f:3e:
ec:36:8d:98:d6:9a:f0:51:1f:7f:43:37:9e:16:d6:
50:df:1d:27:75:1f:07:54:18:58:fe:9d:12:d1:ee:
41:3c:83:4a:88:7e:83:60:06:65:44:0c:a8:7d:e6:
79:49:43:6f:40:b7:3d:da:d9:05:9f:00:5b:58:58:
68:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:A5:76:3B:CF:13:1C:1B:99:96:CF:1C:A2:A5:AE:00:C2:6B:9A:A8
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/FaV2O88THBuZls8coqWuAMJrmqg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
a1:2a:2e:b5:2b:0c:9a:db:c4:52:01:ad:85:93:44:ed:fe:dc:
c5:4a:97:1c:ab:7c:2f:22:a0:87:77:c1:49:97:f0:10:ac:cd:
29:d9:9f:c4:75:89:c1:c1:f1:45:ed:57:41:2a:77:6a:9c:6c:
c1:a6:22:91:8a:d0:94:47:72:0a:48:01:d7:e1:98:24:95:1d:
5f:5e:7d:21:c4:34:20:4a:b1:af:05:e0:de:c7:60:30:c8:22:
1f:c2:ca:03:87:d3:a8:26:96:48:2f:d8:24:cf:ee:d9:43:0e:
c5:46:b1:67:b7:5d:e2:8c:06:ea:2c:97:f6:7d:d8:21:c4:7e:
31:4e:3e:67:a9:30:d2:d1:d7:8b:49:c3:eb:7b:f5:bd:f7:9e:
5a:fa:28:c7:ff:ff:13:89:18:10:30:70:ae:92:d1:00:2b:49:
04:b0:1c:32:f2:36:32:57:84:fe:59:78:e8:68:c7:74:ff:dc:
a7:9e:d8:09:df:0b:21:23:31:5c:c3:fc:7d:17:e6:12:f4:34:
2b:b3:90:d4:79:23:b8:05:09:67:f6:f3:16:b7:ac:ae:8b:67:
83:34:ae:16:52:44:55:6e:ba:15:3f:18:b4:92:26:c5:89:da:
6f:24:48:66:fa:28:d4:02:7f:f2:f8:fc:0e:67:6d:62:8a:d4:
69:ed:01:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 01:51:03 2025 by rpki-client