Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/K6pMVwiLV1mJEi0sGMwrEIGejY4.roa
File: K6pMVwiLV1mJEi0sGMwrEIGejY4.roa (raw, json)
Hash identifier: TX7L88XU/psE42UhE8mbuz54LQcaLTQ1Buj5Oh82tic=
Subject key identifier: 2B:AA:4C:57:08:8B:57:59:89:12:2D:2C:18:CC:2B:10:81:9E:8D:8E
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 02D0
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/K6pMVwiLV1mJEi0sGMwrEIGejY4.roa
Signing time: Sat 10 May 2025 20:08:10 +0000
ROA not before: Sat 10 May 2025 20:08:10 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 720 (0x2d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 10 20:08:10 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=2BAA4C57088B575989122D2C18CC2B10819E8D8E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d0:4f:7f:32:d1:f4:bd:d7:71:b3:44:c7:2e:
72:65:24:a3:fe:10:77:83:51:bc:c7:21:d7:c8:23:
a7:fb:40:81:5e:6e:4a:cf:3b:12:b6:be:8d:b1:53:
1a:a3:fe:85:09:ec:d7:e4:ad:9d:38:cd:8e:a5:e6:
fa:ad:c0:f6:63:d5:51:2d:a4:92:65:51:f3:3e:d3:
d8:4b:73:22:0e:30:d3:49:ff:87:56:e5:09:58:46:
0d:3e:e1:3d:14:d7:e4:f5:06:19:c5:82:44:a3:4b:
41:94:06:2d:7d:6e:58:f6:86:a7:de:4c:8a:d0:71:
b3:78:ae:20:72:64:c9:1d:c0:4a:ae:d9:30:d7:b4:
8f:8a:d7:20:c9:80:92:dc:85:08:81:23:52:5f:4c:
95:1c:c4:05:75:c6:79:3b:29:50:35:e5:62:33:eb:
04:b2:e1:fd:3e:7d:8d:51:0d:e8:3b:58:2f:50:e3:
5f:97:39:d1:f3:c5:6b:20:6b:7d:84:c3:39:0e:1d:
ee:0a:a5:e5:10:66:02:8a:8f:8e:47:00:b4:a0:c9:
73:b1:04:c6:3c:b0:7e:f0:7b:0c:1c:37:5e:d5:f9:
9a:b8:30:a9:f0:0c:44:96:0f:ab:d2:19:6b:2c:c3:
1c:d4:70:53:89:28:89:1b:4e:f6:cc:61:03:da:ee:
3a:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:AA:4C:57:08:8B:57:59:89:12:2D:2C:18:CC:2B:10:81:9E:8D:8E
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/K6pMVwiLV1mJEi0sGMwrEIGejY4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
55:61:d0:df:65:36:58:0f:9f:e8:60:14:fc:64:cc:19:42:c6:
71:a8:39:93:b4:c8:b4:ef:6f:a9:20:0b:46:1b:67:bc:f6:24:
26:02:5a:d5:9e:36:71:15:1b:82:b3:72:46:61:6c:4a:46:e9:
e8:ff:91:67:7c:0d:00:33:9a:d8:36:0f:7a:3a:7d:4c:b8:42:
9e:83:98:fa:fd:12:cc:52:55:90:03:38:15:ef:2a:22:73:31:
d9:06:94:ca:96:da:1a:63:ca:81:f1:d6:1d:ca:a3:12:27:d6:
7e:7f:bc:4b:5f:06:35:c7:f1:28:82:57:0e:2a:b2:a4:7a:30:
6a:31:43:eb:62:d4:2c:a6:01:f9:27:7c:31:fc:dc:a4:ee:dc:
a4:9e:a9:b1:00:f2:44:04:c7:40:91:83:05:a2:cd:d9:52:cb:
7e:91:3b:a3:53:79:f4:40:9a:b5:60:f1:5d:a5:a9:82:2d:19:
a2:bd:e2:7a:df:92:3d:3a:f8:e7:d2:4d:bc:0b:c6:dc:41:14:
f3:f1:aa:1f:10:ba:68:6e:62:eb:d7:7b:f6:37:6c:c4:b8:7d:
59:bd:cc:61:49:42:2a:65:6e:b4:4b:59:45:97:42:f6:c2:e1:
b9:86:43:37:2f:b1:46:30:77:f3:f1:3f:18:6c:a1:e5:f9:2f:
98:63:99:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 22:21:11 2025 by rpki-client