Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/Mqg-ZJdNiF1b8sZKiZ-ot7dL_Vs.roa
File: Mqg-ZJdNiF1b8sZKiZ-ot7dL_Vs.roa (raw, json)
Hash identifier: oENAx3jVVOXVn/AcSWTwhP+AnOmFjOxWGbCooSMW0UM=
Subject key identifier: 32:A8:3E:64:97:4D:88:5D:5B:F2:C6:4A:89:9F:A8:B7:B7:4B:FD:5B
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: DC
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/Mqg-ZJdNiF1b8sZKiZ-ot7dL_Vs.roa
Signing time: Thu 08 May 2025 05:37:40 +0000
ROA not before: Thu 08 May 2025 05:37:40 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 220 (0xdc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 8 05:37:40 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=32A83E64974D885D5BF2C64A899FA8B7B74BFD5B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:bb:10:14:77:a7:d8:65:6d:5a:b4:51:e0:df:
d3:bf:be:23:32:e2:0d:38:4b:e5:5a:63:07:82:89:
bd:ab:33:7d:9f:c2:7c:87:81:b0:d8:b7:50:3d:23:
2c:b8:cd:c3:c5:1a:7f:3f:72:1d:6e:92:51:cb:e9:
6e:dd:e2:3c:18:ff:f5:ff:53:9c:cb:fa:4c:7d:a8:
21:60:cc:71:74:67:10:61:20:33:c7:b0:48:c9:0c:
d4:03:0d:04:de:b7:b9:ef:bb:bf:48:21:e8:77:3b:
4e:e6:6f:a3:f6:02:c5:aa:88:51:7a:ab:d6:53:af:
19:c6:da:c5:3f:68:55:ff:0d:02:9a:d6:70:cb:d3:
7c:43:c9:96:92:ba:a8:df:2b:df:52:64:4a:0a:98:
b9:68:0e:ad:49:fa:bc:d4:51:59:c8:d1:b8:13:cc:
19:33:cc:b0:42:89:29:4e:3a:a7:55:ec:06:35:6c:
98:cb:ab:30:30:e3:d2:9e:f0:0f:07:0c:23:a6:6a:
f2:c4:4f:2e:60:86:a8:38:33:c4:4c:a3:2d:fb:e8:
c2:5a:55:86:d1:9e:74:98:1c:2f:30:c0:57:87:04:
cb:f0:0a:42:88:de:e7:ac:af:78:e8:23:61:5f:96:
3a:76:95:70:22:24:f2:91:6b:41:0b:7b:49:c4:eb:
25:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:A8:3E:64:97:4D:88:5D:5B:F2:C6:4A:89:9F:A8:B7:B7:4B:FD:5B
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/Mqg-ZJdNiF1b8sZKiZ-ot7dL_Vs.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
71:1a:8c:68:46:c3:22:21:12:f1:e0:9b:8a:5a:2b:3e:01:41:
83:a1:9f:e2:20:7a:e7:b7:f9:40:63:17:67:fd:8a:a4:bf:f5:
f1:43:74:2f:e3:26:9e:be:55:a5:37:26:73:61:d7:16:17:1f:
f1:58:5a:0b:51:0f:3c:a0:83:b8:39:8f:af:19:54:d3:56:0d:
4a:8b:97:b1:fc:d7:f9:4a:2e:ba:e8:1b:d7:06:05:b7:e0:2f:
1a:ed:f5:d5:f1:93:81:ed:f8:d1:61:34:d6:90:05:4b:63:5a:
86:04:3e:91:9d:28:79:ed:82:5c:76:85:31:3e:81:05:61:a1:
3e:e5:06:ff:d5:16:24:b1:56:06:a5:7d:b4:e0:43:d5:67:08:
f9:0e:df:2f:db:49:bf:a6:42:93:08:4c:bb:72:b1:36:df:db:
c2:2d:5e:06:1f:c5:22:7b:c3:d4:d4:6c:01:58:bb:fc:83:c5:
2f:c6:f1:5e:1f:2f:0b:27:06:84:21:78:37:97:00:96:61:19:
aa:57:3d:da:bf:da:8a:9a:82:26:ca:9a:0b:f7:07:e1:ff:24:
97:b7:58:a5:d6:d7:7b:0e:93:5f:6b:0a:eb:4f:19:75:49:d3:
4e:06:a3:ee:aa:aa:a4:cf:52:a7:25:bd:31:24:06:bf:eb:66:
cf:0f:55:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 04:51:02 2025 by rpki-client