Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/RiZcyzU-bmqM5PvrIb3CanL3WvM.roa
File: RiZcyzU-bmqM5PvrIb3CanL3WvM.roa (raw, json)
Hash identifier: AA0DhVE+JZW6z09E//4z4E2J2fuDWMagOtymDS2py6w=
Subject key identifier: 46:26:5C:CB:35:3E:6E:6A:8C:E4:FB:EB:21:BD:C2:6A:72:F7:5A:F3
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 027C
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/RiZcyzU-bmqM5PvrIb3CanL3WvM.roa
Signing time: Sat 10 May 2025 09:37:50 +0000
ROA not before: Sat 10 May 2025 09:37:50 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 636 (0x27c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 10 09:37:50 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=46265CCB353E6E6A8CE4FBEB21BDC26A72F75AF3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:36:e5:6f:b7:65:a0:fd:16:f1:46:e0:86:53:
9e:44:fa:1b:6d:46:e1:63:45:2c:a6:66:f9:b2:b1:
8c:46:89:c2:db:d2:e1:23:7a:02:23:81:91:dc:f0:
3d:98:a2:06:6a:c7:1d:2b:cf:51:59:1a:40:94:74:
0c:8d:7a:82:be:c7:49:1e:11:e2:09:ef:f3:f5:90:
82:93:b7:ff:5e:73:d2:42:b8:c5:43:a1:93:bc:d8:
22:19:ea:4f:2d:a1:09:72:d4:f9:5f:59:14:d0:15:
86:1b:f4:38:f2:1e:a8:8f:28:f2:43:d6:5d:9f:e9:
64:52:81:33:90:b1:32:cb:69:17:95:1e:e4:5a:41:
b2:09:ee:fb:41:21:50:91:d8:4f:e8:8e:9e:55:66:
b5:f2:05:b8:43:32:14:37:c5:30:47:b3:a3:d3:c4:
41:d9:c4:64:ca:ff:48:c0:8e:88:f7:e9:52:5a:38:
25:6a:d2:5e:5a:f6:ca:f6:96:5c:be:83:33:d9:d9:
39:24:31:49:82:06:8f:4e:60:3e:b2:31:7e:e8:b0:
38:9b:80:82:6e:68:60:11:61:b1:43:13:ab:4c:86:
2d:21:31:6c:c9:72:12:f7:1d:35:e3:4b:d2:fb:70:
3f:a3:ed:99:81:63:e3:08:3c:4f:17:9d:dd:b8:b5:
9a:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:26:5C:CB:35:3E:6E:6A:8C:E4:FB:EB:21:BD:C2:6A:72:F7:5A:F3
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/RiZcyzU-bmqM5PvrIb3CanL3WvM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
51:bf:c2:3f:26:7e:42:9d:05:29:27:25:b4:da:54:e0:ca:77:
aa:20:46:d2:c1:98:b3:ac:4b:0b:4d:15:7c:d4:9c:31:a8:04:
64:7f:94:d8:f1:55:da:0f:6c:80:8c:94:97:4c:fe:6b:be:1c:
bb:85:4b:0a:02:bd:61:ac:81:ac:62:0c:23:4f:1f:0d:61:15:
8e:76:e3:9b:01:48:7c:b6:fe:ba:6f:ef:8c:57:0f:9d:6e:48:
ab:55:4d:3f:ba:69:88:4e:28:a4:fc:44:a5:64:a0:18:a1:04:
09:7c:75:9f:ed:0e:77:6f:9b:7f:55:8b:8f:55:7e:e8:8d:8d:
4b:c3:b9:17:eb:9c:65:d9:b0:04:48:b2:0f:1d:cd:3a:dd:ca:
a8:ae:c9:3c:a2:b8:32:dc:1c:b2:9f:0e:03:15:a8:df:23:48:
65:cc:2c:76:a1:1c:33:d1:99:5f:06:fd:79:f7:b7:47:9d:d9:
87:92:f9:25:3f:af:0a:71:d9:fa:44:35:38:14:3d:b2:81:8e:
9e:d6:f1:2f:93:6c:0b:57:1c:1f:1f:8b:1f:05:6e:48:b3:e4:
28:f5:03:7c:2c:48:0d:8a:4b:fa:79:77:56:96:3e:37:3f:03:
8e:25:5c:85:66:5a:19:0c:98:3a:c5:ab:1a:f0:fd:ea:18:95:
0f:41:cb:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 22:46:39 2025 by rpki-client