Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/RPDQC6TZlrMYakA_xzHn9EVlIgw.roa
File: RPDQC6TZlrMYakA_xzHn9EVlIgw.roa (raw, json)
Hash identifier: w0Ex1mqoeK+WOq0AvBxvTwj5aDSPJ01wMTmhzAiQ0ls=
Subject key identifier: 44:F0:D0:0B:A4:D9:96:B3:18:6A:40:3F:C7:31:E7:F4:45:65:22:0C
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 05D0
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/RPDQC6TZlrMYakA_xzHn9EVlIgw.roa
Signing time: Wed 14 May 2025 20:08:01 +0000
ROA not before: Wed 14 May 2025 20:08:01 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1488 (0x5d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 14 20:08:01 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=44F0D00BA4D996B3186A403FC731E7F44565220C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c5:e0:a8:3d:14:40:cf:bf:74:94:d7:ad:09:
60:8c:95:03:77:1e:07:48:0b:39:2e:32:b3:23:e3:
3b:38:08:58:6d:80:4a:24:9b:01:5d:31:f0:3a:cb:
07:e1:e6:78:4f:5a:65:fc:3d:1f:53:0f:bc:80:38:
83:fb:4c:69:e1:a3:ea:9f:18:13:08:31:d9:0c:b3:
c3:6d:47:f4:b9:b6:19:e4:92:c2:36:18:c3:85:98:
c4:ce:9f:6f:63:96:4d:eb:74:ef:8f:45:50:d0:be:
2f:9e:64:fb:4c:26:47:48:73:ea:84:3b:ad:a2:c5:
bb:f1:55:e9:dc:5b:1d:70:f3:c6:68:13:53:05:cb:
f8:73:b0:0a:be:33:b1:2f:a9:cb:ee:82:9d:bd:e3:
4e:1c:17:10:a0:29:5d:3d:1f:3f:6b:23:d0:67:43:
37:8a:80:d4:92:5b:45:93:45:36:23:1b:e7:86:f3:
22:34:a5:7a:bd:09:93:04:bf:d6:bb:7c:2a:19:0d:
0f:0c:9a:97:0e:de:87:e3:e0:fd:3c:0c:a4:64:57:
a3:37:91:65:07:f3:af:8b:f2:2b:46:dd:e9:d0:f0:
63:c8:8b:8c:62:c2:5d:fa:b7:5c:63:44:94:2f:23:
a9:91:5f:32:8b:30:fe:19:14:51:d8:eb:e6:98:a1:
98:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:F0:D0:0B:A4:D9:96:B3:18:6A:40:3F:C7:31:E7:F4:45:65:22:0C
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/RPDQC6TZlrMYakA_xzHn9EVlIgw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
8c:93:fd:23:fc:cb:10:32:61:f7:07:9c:bc:60:7b:d9:8c:a2:
f5:94:93:09:85:98:57:b8:c0:3f:37:06:f3:9a:18:3c:a8:03:
2f:44:83:89:6e:ae:78:b3:c9:21:3c:46:b7:0a:fb:94:06:0a:
6f:56:7e:63:b0:5f:46:a6:93:ea:74:b5:6c:83:09:73:25:bc:
a6:21:d6:21:63:90:9b:57:69:83:4b:d0:26:ea:6f:b9:a5:5d:
f1:e0:94:d1:a3:23:92:a0:6e:98:df:37:7d:36:5c:77:9c:3f:
67:42:31:bc:eb:9d:c0:66:df:0d:74:39:e3:0e:11:f7:a2:62:
25:0e:df:0a:2c:7a:8e:00:1c:e4:49:f7:b4:b4:f4:e5:b8:1e:
49:bb:13:26:f7:ba:3c:be:ba:07:73:0b:52:b2:f2:c2:3e:03:
bc:06:c3:79:ff:8c:92:a3:c5:ab:c4:10:69:5f:8b:0b:aa:ae:
41:3c:9c:29:73:37:41:84:20:70:92:0f:68:b8:db:d7:58:83:
2a:93:eb:96:81:e4:a6:06:c3:41:74:29:89:3b:09:cf:27:e2:
a6:5a:6d:aa:ea:b4:57:07:95:87:50:dc:9a:2e:ba:53:08:88:
93:3a:b6:de:a3:41:b9:ab:1a:91:da:d5:62:76:63:05:61:dd:
7e:60:11:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 23:18:10 2025 by rpki-client