Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/Jc3u2BBq7vEudqR91ZBTwyDBhbU.roa
File: Jc3u2BBq7vEudqR91ZBTwyDBhbU.roa (raw, json)
Hash identifier: TLpKuZ4LtOCU0uomGhNA/PGxYSSsr8tQSTmv8Y2Dh2s=
Subject key identifier: 25:CD:EE:D8:10:6A:EE:F1:2E:76:A4:7D:D5:90:53:C3:20:C1:85:B5
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 06DC
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/Jc3u2BBq7vEudqR91ZBTwyDBhbU.roa
Signing time: Fri 16 May 2025 05:38:02 +0000
ROA not before: Fri 16 May 2025 05:38:02 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1756 (0x6dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 16 05:38:02 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=25CDEED8106AEEF12E76A47DD59053C320C185B5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f1:f8:7d:3c:7d:29:19:43:ad:27:72:9a:2e:
f3:b0:b1:98:59:14:64:c0:04:ac:23:d6:28:a2:b7:
4f:6b:71:54:c5:cd:c9:49:1a:83:16:e2:7d:7e:ef:
6c:be:19:56:26:cb:be:d8:af:af:77:22:23:7c:a7:
af:13:78:3d:78:e0:6d:46:f0:ae:01:2f:78:33:64:
30:13:1c:4d:92:59:1f:2a:f0:3b:16:a7:df:db:77:
3d:66:d9:62:bb:71:c2:b4:bc:e3:62:34:1e:a5:cc:
38:0b:4e:29:e6:f6:c2:41:79:0d:57:81:99:d2:5c:
2e:cd:2f:2a:6b:18:d5:f7:32:d1:e0:49:6c:e7:ed:
73:31:0e:cc:d3:ca:b4:a6:51:73:be:00:a7:b3:1a:
7e:a8:80:37:70:e4:54:58:63:49:c7:ee:5f:92:ef:
7a:e7:8b:72:56:4e:38:d2:c8:e9:2e:63:e2:d5:61:
57:9e:75:75:4d:7e:66:0a:65:5c:87:d8:9d:97:dd:
cf:13:30:5b:5a:d9:60:ed:53:5b:18:15:c3:d6:af:
3e:2d:f3:8d:70:42:16:53:d0:7e:45:0d:b5:9d:79:
77:13:73:9c:33:73:eb:6c:dc:fc:9e:01:98:3d:6c:
19:94:86:d7:c1:f4:6a:e9:6e:1e:d9:5d:10:66:8e:
8d:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:CD:EE:D8:10:6A:EE:F1:2E:76:A4:7D:D5:90:53:C3:20:C1:85:B5
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/Jc3u2BBq7vEudqR91ZBTwyDBhbU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
22:72:c3:35:4c:03:e4:ff:86:01:e3:fc:69:c7:08:67:d3:f7:
55:22:a9:35:ab:a1:cd:59:6e:64:91:62:de:ca:9b:6f:5f:a7:
6f:de:cb:5f:bd:2c:e2:38:c0:7b:6b:24:10:b3:c1:c9:c9:84:
2f:a4:9f:1b:7a:4e:45:28:ea:b1:45:08:ef:26:2b:d7:93:49:
90:c1:32:bf:6f:fe:ed:4f:2e:bd:5b:1c:a6:b7:73:72:80:08:
c5:28:10:4a:39:24:13:2f:2a:59:90:5c:0d:31:04:a0:c6:11:
f7:0f:c2:ee:a5:45:d0:65:13:7f:61:f3:96:63:03:57:f1:de:
1d:77:b6:b4:1c:e0:2a:f7:11:69:63:45:1a:81:98:72:92:fd:
4b:f1:9a:be:af:69:fe:03:a5:19:3f:6f:3d:84:e3:20:73:d1:
4a:7b:71:d9:ca:35:e3:18:b0:97:4b:c3:5b:d3:55:c6:fa:5f:
8c:ce:77:19:4b:d2:66:b5:b0:32:dd:2a:fb:0b:15:cc:65:cb:
b1:b6:39:d6:eb:e6:98:a0:6b:b0:ca:a0:b1:a2:6e:89:d1:b2:
45:df:ce:fe:40:fd:78:0b:82:77:c0:fd:ba:d0:b8:9e:21:1c:
3f:bb:2d:b4:2a:71:57:f6:51:e7:6a:b3:b7:6c:46:f4:88:ce:
da:ea:5e:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 21:24:43 2025 by rpki-client