Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/IWC0WeKvfkJp7wbD5dgKmgak73k.roa
File: IWC0WeKvfkJp7wbD5dgKmgak73k.roa (raw, json)
Hash identifier: NFKxq3EhXTBa8+s9MRM/9GsAyc/Wjukkh+HgL7txjyg=
Subject key identifier: 21:60:B4:59:E2:AF:7E:42:69:EF:06:C3:E5:D8:0A:9A:06:A4:EF:79
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 010C
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/IWC0WeKvfkJp7wbD5dgKmgak73k.roa
Signing time: Thu 08 May 2025 11:37:39 +0000
ROA not before: Thu 08 May 2025 11:37:39 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 268 (0x10c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 8 11:37:39 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=2160B459E2AF7E4269EF06C3E5D80A9A06A4EF79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:15:d4:2a:24:75:7f:11:1d:97:23:31:f8:bc:
a1:7d:a9:33:c8:10:b7:be:b7:91:26:3a:99:c5:b3:
5a:f7:fd:32:dc:a5:86:33:d4:2c:54:3d:9c:70:2b:
9d:ad:43:e6:16:80:7d:c8:ac:f3:24:ab:bf:25:3f:
e1:a5:73:7c:27:5e:2a:ec:04:ca:18:bc:5d:35:53:
6a:c6:68:75:f9:c7:ac:bd:bd:62:bb:38:4c:cc:b5:
f2:66:e3:19:87:9c:bd:ba:4c:f1:35:0e:84:60:6b:
ec:e3:09:ee:4b:b3:28:4c:1b:e8:c1:6a:94:ea:b4:
33:41:9a:b0:ce:78:97:68:78:21:02:c3:48:48:8c:
92:ab:67:71:a0:be:70:f5:25:3d:74:91:77:2f:7c:
e8:4d:8b:0f:d4:e7:1c:e6:70:a4:f9:c9:76:b6:2b:
33:75:e1:35:33:cd:f8:57:f8:d2:c9:58:a4:94:53:
99:e7:52:1c:de:19:09:0e:23:5f:a3:2e:72:93:12:
25:c9:71:59:76:b7:28:ec:6a:f1:25:c6:a2:04:a8:
2e:1d:eb:bc:9b:3a:13:58:43:0a:f8:b4:14:dc:b6:
7e:3c:88:31:d9:5e:00:b7:60:5b:aa:65:ec:c7:0f:
63:43:e8:11:a6:46:2d:88:96:d8:13:fd:09:62:d7:
de:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:60:B4:59:E2:AF:7E:42:69:EF:06:C3:E5:D8:0A:9A:06:A4:EF:79
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/IWC0WeKvfkJp7wbD5dgKmgak73k.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
6b:f1:2d:44:93:ea:5c:83:9e:20:cc:ca:c8:9f:da:83:b2:88:
cb:d3:bf:c2:ad:ab:a6:8e:e3:b0:7a:5f:d3:12:a0:36:19:92:
b3:7d:d4:fe:7d:dd:cc:4b:9a:7c:bc:de:29:2d:e8:e5:2f:53:
38:2b:65:78:5a:fe:54:2d:1d:fe:bd:e9:4e:1b:eb:05:5c:f0:
e5:84:38:c1:cb:7d:60:6d:52:a5:3b:57:35:d5:ab:f9:dc:88:
ca:3e:8d:02:6b:09:64:26:6b:bb:83:34:ad:05:a1:4e:75:00:
c4:ac:8d:59:16:c9:1c:9c:e2:cb:c6:83:53:c4:8c:a1:f0:6b:
dd:07:f8:ed:b2:4c:5f:39:4e:40:4c:38:83:aa:dd:8a:1d:4e:
57:05:57:12:6b:f8:f4:d0:dc:07:db:e0:7d:33:5e:f6:86:5f:
dd:08:c7:9a:58:06:c8:d6:36:a7:64:bb:51:8f:07:f8:77:de:
d4:be:a8:b1:b0:2c:58:71:32:fc:eb:14:fd:e5:ae:2a:3f:9c:
98:be:48:20:60:74:8b:ef:ef:50:6b:d6:94:48:28:57:ca:24:
39:07:5a:85:89:d9:68:31:44:93:73:5c:9a:37:33:d0:4a:99:
38:a1:f9:d5:d4:3b:67:4b:7d:21:33:c3:ee:30:a2:ca:c2:3c:
95:4a:21:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 13:11:07 2025 by rpki-client