Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/NBgw867-HoWRqNedmCuSagqBK_w.roa
File: NBgw867-HoWRqNedmCuSagqBK_w.roa (raw, json)
Hash identifier: Cy1eVUyvCiczVS1MbsUdC0XIxTMQqD7JJqUQpqK0OBU=
Subject key identifier: 34:18:30:F3:AE:FE:1E:85:91:A8:D7:9D:98:2B:92:6A:0A:81:2B:FC
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: FC
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/NBgw867-HoWRqNedmCuSagqBK_w.roa
Signing time: Thu 08 May 2025 09:37:39 +0000
ROA not before: Thu 08 May 2025 09:37:39 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 252 (0xfc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 8 09:37:39 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=341830F3AEFE1E8591A8D79D982B926A0A812BFC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:27:f9:d5:6b:c1:5d:21:7f:52:34:cd:bc:1d:
da:bf:79:81:02:66:7f:b2:93:3e:42:bc:f4:2f:15:
a1:d1:fd:34:fa:89:e4:dd:fb:f5:28:cb:fe:b2:66:
2b:8c:14:11:ad:1b:4a:1c:68:a7:cb:7f:d9:90:80:
05:e8:f9:4e:d7:b7:75:85:ca:f6:a9:08:b2:51:44:
75:4e:6a:44:32:4e:ac:67:9c:81:5d:ac:a1:f9:1a:
1d:ab:56:ce:d2:88:07:0c:1f:7d:8d:fe:7f:7e:cd:
56:c2:80:6a:45:c0:0e:08:db:d2:64:92:3e:9d:a7:
c8:8a:39:3c:51:cb:84:db:7e:38:dd:5e:c1:f9:98:
61:2c:ea:93:e0:9d:ed:ce:41:aa:f0:a0:53:f4:ec:
92:94:9d:d2:3a:9e:1b:93:2f:9e:61:37:22:ec:89:
93:a3:fb:b2:c7:6a:8e:27:df:7a:bc:6e:01:6c:ca:
eb:4e:d6:b4:19:bd:e4:df:ba:af:44:c3:47:0a:64:
cb:1b:af:83:d6:16:c9:ed:78:ea:e9:1a:9d:6f:95:
5e:bf:9e:36:e6:32:25:72:34:3e:93:b0:1d:30:45:
32:1d:db:ac:c4:0b:f9:1f:c6:34:b1:d6:0c:62:24:
31:fb:2c:52:67:ab:eb:00:2f:3d:eb:ff:f2:15:5d:
b9:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:18:30:F3:AE:FE:1E:85:91:A8:D7:9D:98:2B:92:6A:0A:81:2B:FC
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/NBgw867-HoWRqNedmCuSagqBK_w.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
31:74:d7:76:b9:1b:84:00:8c:e9:78:1c:37:b8:08:96:ac:3e:
35:14:aa:30:6e:e0:aa:dc:65:6d:86:9e:3c:55:32:37:27:56:
68:a4:07:e6:3d:ec:b9:29:cb:55:a1:14:01:3d:78:00:02:5e:
87:f3:53:b1:80:f5:19:3b:7e:2a:b2:29:f5:e4:53:84:59:a4:
cb:a1:24:68:ac:01:45:47:51:17:77:7a:93:a8:33:d8:36:55:
51:b5:50:5d:ba:82:a9:84:a2:50:96:59:83:d0:49:fc:16:cc:
04:47:f7:40:4c:97:ec:81:6e:a0:1e:75:7b:41:9d:7e:f2:b2:
21:cd:55:e3:65:d2:90:71:4a:a4:48:ba:3b:fa:64:99:27:18:
e5:ba:c8:40:2f:46:a7:03:62:fb:e2:16:21:75:19:a9:b0:3f:
dc:54:28:b4:dd:f3:9d:b2:f1:5a:75:14:86:cd:cc:f3:3a:b2:
55:04:9e:b0:ea:1d:c6:a3:cc:4d:ec:b0:2a:89:b9:47:68:b0:
13:17:88:c3:6c:ea:c4:cf:a4:9e:90:20:78:25:f1:be:a7:e0:
29:51:1e:fe:07:a2:40:4d:0f:16:3b:26:26:af:36:0b:d0:b6:
09:18:b9:c5:72:37:7c:d8:a2:84:13:29:34:87:fc:d0:68:7a:
db:83:aa:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 21:22:49 2025 by rpki-client