Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/IrA9if-zY2fhEhfSdA-nRAMezEM.roa
File: IrA9if-zY2fhEhfSdA-nRAMezEM.roa (raw, json)
Hash identifier: VPPc70y+KwYSMfcuNItaXoSEr+Mrnsg2SStP5acK1D4=
Subject key identifier: 22:B0:3D:89:FF:B3:63:67:E1:12:17:D2:74:0F:A7:44:03:1E:CC:43
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0638
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/IrA9if-zY2fhEhfSdA-nRAMezEM.roa
Signing time: Thu 15 May 2025 09:08:06 +0000
ROA not before: Thu 15 May 2025 09:08:06 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1592 (0x638)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 15 09:08:06 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=22B03D89FFB36367E11217D2740FA744031ECC43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:9d:a6:11:4a:07:d0:71:94:f0:cc:49:43:8b:
9b:b5:3d:c6:f6:8a:de:93:8a:94:19:c7:b5:cc:1b:
a8:3d:fa:69:ea:58:ec:f1:c2:62:1d:25:ee:2b:bf:
bc:be:ff:b5:71:75:05:70:f7:c2:13:18:9d:20:83:
57:74:6c:fc:0d:22:28:c3:56:0a:07:5d:2f:18:38:
3c:16:26:f3:b7:5f:5c:b5:40:05:ae:88:85:3f:f1:
d3:74:fc:1a:09:d1:01:ca:85:e1:d4:7d:57:57:e3:
9e:67:4d:52:0f:6d:00:3d:e8:ed:26:9e:a5:19:2b:
5c:01:57:d9:d8:a0:f7:08:5d:9a:1d:af:07:d5:29:
fc:b2:29:52:6d:98:26:bc:35:41:f8:53:9c:2e:fc:
bb:00:64:49:c8:72:a5:56:56:e9:62:e5:c8:89:cd:
38:6c:6c:ee:ce:e3:23:ce:dc:be:fe:08:46:5e:2a:
48:ad:0f:b4:8a:97:3a:2c:07:55:0e:8f:58:5c:4b:
25:59:2c:2d:c7:54:d3:09:88:9c:59:c0:f8:ce:69:
b8:5c:74:05:d0:21:6a:56:0f:c5:e1:3e:64:8a:59:
31:0d:27:e7:1c:cd:e5:3d:69:0f:2c:cc:1f:fc:40:
42:32:cd:cc:ee:39:ad:ac:48:5c:6d:1b:f0:3d:e9:
d1:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:B0:3D:89:FF:B3:63:67:E1:12:17:D2:74:0F:A7:44:03:1E:CC:43
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/IrA9if-zY2fhEhfSdA-nRAMezEM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
83:25:f4:38:2a:ef:fc:50:e8:dc:03:83:db:2b:c4:81:dc:8f:
37:a4:fe:ea:63:60:0d:ee:4b:bc:a5:4f:85:56:5d:21:f2:f9:
a5:4e:e3:1d:b9:b3:5f:0e:7b:93:7b:12:f9:a8:7d:5c:eb:94:
76:f5:74:a0:3a:b3:63:c7:94:24:f6:0d:08:0a:4b:2f:c3:02:
6d:a8:b3:c5:31:54:d7:31:f9:2b:9b:f6:79:0d:08:03:84:e2:
ec:2c:b6:2c:cd:32:7a:21:8d:71:d7:8b:db:a4:db:f0:52:ff:
56:0c:70:ef:31:ad:b2:84:d3:f8:fd:94:9d:2c:7b:a3:98:0b:
c8:02:e9:3a:6f:de:c4:21:c6:6a:3e:91:9c:4c:c9:53:84:c6:
73:ac:3a:40:47:30:63:b4:1f:40:5c:66:0e:fd:c3:4e:cf:c5:
d6:53:af:ad:ac:55:b8:67:96:fe:53:fb:32:92:bd:18:91:52:
b7:87:a0:22:6c:5c:4e:73:8e:da:09:37:d2:4a:0a:de:85:6a:
d4:1b:87:b9:ca:c5:18:fb:c4:f0:a7:ba:c6:2f:c6:5a:7a:f3:
bb:d0:ce:e7:da:53:91:58:ef:4f:dc:70:6e:80:49:1a:e4:fb:
ea:32:10:ac:da:eb:60:d1:52:2d:60:22:27:6b:ee:5e:41:26:
99:ee:c0:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 19:37:45 2025 by rpki-client