Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/OlJ27Lso3eR0fAa2URaNsYXlA5M.roa
File: OlJ27Lso3eR0fAa2URaNsYXlA5M.roa (raw, json)
Hash identifier: cJKlZ7Zgs/bYGvZ7bFc+RE+tYlDsUYn14OCkgk0yI4E=
Subject key identifier: 3A:52:76:EC:BB:28:DD:E4:74:7C:06:B6:51:16:8D:B1:85:E5:03:93
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0694
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/OlJ27Lso3eR0fAa2URaNsYXlA5M.roa
Signing time: Thu 15 May 2025 20:38:08 +0000
ROA not before: Thu 15 May 2025 20:38:08 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1684 (0x694)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 15 20:38:08 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=3A5276ECBB28DDE4747C06B651168DB185E50393
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b0:a2:fe:5a:ae:48:31:69:17:7f:86:be:0a:
47:5e:b9:e0:dd:d7:9a:ff:ce:03:cd:c3:72:7a:83:
1b:95:1a:e1:d7:64:34:e7:c6:2f:5d:6a:1d:3d:91:
88:89:12:10:64:47:ec:ca:cc:79:2a:92:65:75:88:
5c:ee:cf:b7:81:3d:e8:51:79:c1:fa:28:9f:db:43:
18:a9:36:1a:95:5e:f8:ac:7b:a5:1e:c5:c3:3f:ef:
08:6b:42:34:3e:10:a7:9f:71:da:1b:6b:6e:d8:5b:
42:b0:05:f9:3f:00:da:38:21:74:b5:1e:cb:af:0f:
d9:ee:1e:4c:54:59:9b:a1:dc:da:06:2d:8e:d0:37:
dc:65:79:2a:54:07:fc:0e:63:d4:cd:75:63:dd:09:
c3:8e:57:77:d3:95:81:84:65:f1:f4:e1:39:22:4f:
39:bf:36:69:fa:d3:49:a0:d4:3b:58:d4:ab:e2:1c:
cc:5e:bd:85:29:eb:62:7e:85:b9:70:4f:d7:9e:84:
2f:1b:f7:16:c2:f1:58:fd:86:9b:69:01:ea:12:2f:
b3:a0:a6:5e:eb:3d:cd:d5:be:26:28:1e:3f:ab:80:
7b:fc:e5:48:97:fa:9a:74:0e:94:63:44:6a:05:35:
a1:79:cd:f7:72:35:81:22:d0:dd:4d:d2:5e:6a:29:
d6:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:52:76:EC:BB:28:DD:E4:74:7C:06:B6:51:16:8D:B1:85:E5:03:93
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/OlJ27Lso3eR0fAa2URaNsYXlA5M.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
8c:9c:88:4d:c0:a2:ba:cc:14:b6:3a:bc:58:63:e2:ac:a4:1b:
73:1e:5d:ab:fb:3b:f1:e3:4d:57:35:77:0f:ad:34:e4:58:24:
90:79:be:74:96:b1:02:8b:f8:e7:b2:c2:ae:af:ab:46:56:b4:
ef:1b:4f:9b:cb:0d:ef:ae:c4:6a:3a:5e:bc:29:63:f4:d3:87:
a8:9a:bf:88:7f:99:6e:fb:a0:57:e6:9c:c9:b6:94:00:a8:e6:
a2:40:e2:aa:c4:4d:86:62:77:0a:d8:d2:53:52:38:06:22:6d:
e8:6a:2f:53:57:55:09:7b:6e:d1:5b:6e:38:f5:98:72:63:c8:
4c:d4:75:0b:d2:c9:ed:85:34:13:eb:f4:2f:3a:b4:e5:b2:91:
85:68:3b:8f:f5:ed:97:aa:71:a2:9d:3a:32:79:56:e7:44:b0:
03:23:b9:69:ba:de:e8:ef:a6:08:f9:a3:5c:68:c2:e9:0e:c9:
cd:f1:cf:99:1b:e2:9d:e6:45:2f:3f:0b:9d:eb:c3:ea:3f:22:
80:c0:ea:3b:fd:ad:03:05:34:2c:19:70:05:6e:2c:21:3e:a9:
ea:fd:e2:49:45:72:d7:fa:85:f2:35:26:50:12:8b:43:31:e5:
f6:05:00:28:c8:48:e8:7c:06:2e:49:9a:1d:93:25:f3:6e:ff:
da:2f:98:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 21:28:20 2025 by rpki-client