Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/GANMCyVkfeZQ_a0C_nNqBatr3zs.roa
File: GANMCyVkfeZQ_a0C_nNqBatr3zs.roa (raw, json)
Hash identifier: uEuKXJCkPwZg1bHRaZX7TlczI7gbVxGgOPy1D/qqsLc=
Subject key identifier: 18:03:4C:0B:25:64:7D:E6:50:FD:AD:02:FE:73:6A:05:AB:6B:DF:3B
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0598
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/GANMCyVkfeZQ_a0C_nNqBatr3zs.roa
Signing time: Wed 14 May 2025 13:08:04 +0000
ROA not before: Wed 14 May 2025 13:08:04 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1432 (0x598)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 14 13:08:04 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=18034C0B25647DE650FDAD02FE736A05AB6BDF3B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:69:d0:31:6a:2d:fe:54:30:47:c7:e4:d8:5c:
75:c1:39:ef:4d:13:98:9a:4e:99:b7:b1:70:30:97:
cc:76:9b:13:0f:7a:e3:32:a6:e0:49:3a:de:c5:5a:
96:6b:bb:62:9c:17:f7:cc:2f:e0:6b:d5:fe:86:e5:
b6:07:09:88:ef:70:42:46:65:0f:6f:59:00:7e:4d:
94:90:1e:26:6c:d5:42:b5:58:67:b4:6a:f4:21:d4:
35:7e:38:b9:5a:33:35:c4:96:c1:2e:32:cc:c7:69:
9b:74:fa:22:55:01:c0:6d:db:7f:9d:15:5c:02:13:
1f:5d:16:e9:d7:a3:42:7d:e3:07:b4:8e:9b:9f:aa:
7a:f7:cd:82:ff:70:41:70:08:f9:09:2f:0e:a0:8e:
51:1a:82:df:1a:00:02:de:21:6d:b8:74:64:ba:7a:
29:c6:01:a5:a9:72:da:3f:30:f0:ed:b8:32:8e:89:
d7:d3:3e:62:89:c3:a4:4b:6d:b8:b8:8e:2c:c0:86:
6e:4c:83:b6:70:f3:6f:6a:bd:21:37:40:c0:3f:4b:
f8:cc:6e:7d:e0:7d:88:bf:52:61:54:16:50:b6:75:
ad:f4:57:f4:47:7d:bf:ba:5a:c4:93:d1:36:5a:9d:
09:b4:96:72:5f:df:b1:03:90:18:bf:c7:ee:a4:74:
17:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:03:4C:0B:25:64:7D:E6:50:FD:AD:02:FE:73:6A:05:AB:6B:DF:3B
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/GANMCyVkfeZQ_a0C_nNqBatr3zs.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
6c:ea:73:71:93:38:d0:ee:e8:ef:9d:68:32:c8:53:3e:8d:99:
13:50:4a:f5:c6:b6:48:cd:72:54:c8:c9:56:53:6a:84:41:58:
b5:dd:56:12:5d:4e:04:84:4c:28:8c:da:4a:3a:42:c3:3d:ef:
dd:a6:30:58:43:99:7c:e0:14:3f:ab:73:a9:39:a8:9c:4b:57:
4b:ac:93:eb:48:cd:ab:04:13:cc:96:51:39:3c:bd:62:23:80:
3c:47:14:fd:43:7f:45:fc:1b:2a:4a:99:7c:80:e5:62:42:0a:
6c:59:40:57:e5:4b:af:7c:9c:80:ef:70:61:e7:e7:4b:21:23:
d4:30:28:83:c2:7a:8a:38:2b:82:af:65:06:81:22:20:66:e0:
08:8e:c6:28:af:07:7a:c2:dc:2d:d7:a9:f6:9b:09:ea:b9:f4:
8f:2f:22:6b:1a:be:0a:ea:d1:cc:1a:32:54:eb:12:8b:d3:06:
37:03:cc:9b:e3:77:51:ae:60:89:59:da:86:ed:1a:93:df:60:
38:ac:60:00:17:12:bf:67:16:84:87:6b:4e:e5:23:10:51:61:
1c:30:6c:1e:cf:ec:67:32:3a:91:b5:1a:66:61:0b:b8:de:00:
af:b9:c4:09:b9:1a:28:31:99:02:97:d8:1e:d9:9e:13:b9:cf:
5d:98:7f:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 22:40:17 2025 by rpki-client