Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/RiwvUElgUp6JyNWSbqb9TtOKrHc.roa
File: RiwvUElgUp6JyNWSbqb9TtOKrHc.roa (raw, json)
Hash identifier: zbPXNZulofH61ey89G5tsmCUdwIBPc7apM6pthRGKyk=
Subject key identifier: 46:2C:2F:50:49:60:52:9E:89:C8:D5:92:6E:A6:FD:4E:D3:8A:AC:77
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 030C
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/RiwvUElgUp6JyNWSbqb9TtOKrHc.roa
Signing time: Sun 11 May 2025 03:37:50 +0000
ROA not before: Sun 11 May 2025 03:37:50 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 780 (0x30c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 11 03:37:50 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=462C2F504960529E89C8D5926EA6FD4ED38AAC77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:14:3e:df:10:65:a0:6a:d7:3e:86:29:83:2c:
2e:39:8c:b0:c2:47:95:5f:97:c3:0e:ce:04:31:6f:
86:d1:4b:4e:85:9d:fe:17:14:eb:53:9f:53:15:47:
04:50:2a:86:de:d7:2b:62:df:e3:da:62:a2:6e:50:
d1:81:55:3f:ed:ba:52:0d:11:a9:7d:4d:e6:cd:a1:
0e:a5:58:22:ae:76:cf:ab:70:a9:73:b5:c0:21:7d:
00:2e:31:63:32:e8:5a:9f:0b:c2:82:97:74:13:2a:
58:a5:8b:4f:f7:b9:b1:76:cf:36:b4:7a:19:b3:47:
28:51:0d:7b:23:55:fc:35:91:ef:f4:6b:0d:56:14:
6c:9d:d8:fc:a2:8f:ff:52:75:b5:84:5f:58:fa:51:
18:91:89:96:e2:79:51:26:00:5a:7a:b9:37:f4:10:
3f:ab:5b:72:9d:f1:e6:22:42:2a:cf:43:47:24:43:
61:2c:88:cd:7d:28:86:5e:51:03:a6:61:69:d8:eb:
32:2e:7c:83:44:4e:9f:fe:eb:6a:9e:53:a0:f2:6c:
70:91:16:77:fe:05:29:19:5d:ba:c2:d3:f0:fc:ea:
d2:56:4b:59:04:4a:de:9f:14:3f:e6:88:a2:a3:98:
06:a6:c0:78:23:e2:4f:58:e2:7d:fa:91:18:bb:0f:
ae:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:2C:2F:50:49:60:52:9E:89:C8:D5:92:6E:A6:FD:4E:D3:8A:AC:77
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/RiwvUElgUp6JyNWSbqb9TtOKrHc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
40:7b:a1:38:ea:73:af:34:b3:aa:1b:75:33:be:56:3e:e7:e8:
31:2d:91:0b:ac:cc:a0:c2:3d:b3:05:8b:3f:12:f5:90:3f:73:
c1:25:27:24:47:e2:e7:65:9b:37:3d:63:04:4e:f9:4d:ee:9a:
d3:25:2d:ff:75:68:4e:c3:23:dd:25:6b:a3:d7:60:56:3e:af:
a3:70:ea:a9:ed:12:25:0b:90:fe:2d:07:08:38:46:c7:0e:6f:
f0:96:02:c1:bd:ae:c6:85:91:89:df:bd:68:40:16:90:de:f7:
66:4a:de:9e:ad:e8:82:70:4b:7c:f7:fe:3e:cd:cd:24:56:6f:
ab:23:81:89:59:d9:b5:8b:02:2c:35:4f:28:b2:ba:6f:2e:c6:
0b:ac:da:68:fa:1a:9c:6e:41:c6:0c:91:a1:28:65:de:3c:40:
73:85:93:5c:51:42:e9:71:d9:fa:16:a1:38:45:16:65:65:f4:
dd:0a:4a:1b:e6:7b:8c:9b:a7:65:6a:93:d6:db:53:ce:c1:15:
05:6e:8e:cb:08:d3:d0:ca:65:66:f7:19:db:ea:bb:85:ee:33:
7f:b3:87:cf:3a:80:96:6d:97:d8:2f:0b:86:32:86:53:82:6e:
3b:60:9e:10:bb:f1:3a:66:a8:64:bf:8c:b8:dc:57:ab:59:b5:
fc:7e:fc:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 23:12:53 2025 by rpki-client