Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/VAAPtJ9y7FFZW8o7gIRm5J0p_B8.roa
File: VAAPtJ9y7FFZW8o7gIRm5J0p_B8.roa (raw, json)
Hash identifier: aAyJEzQ4shcI+dcvBZ0nM07CPaoKLzdz32LVrg/Wj5E=
Subject key identifier: 54:00:0F:B4:9F:72:EC:51:59:5B:CA:3B:80:84:66:E4:9D:29:FC:1F
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0770
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/VAAPtJ9y7FFZW8o7gIRm5J0p_B8.roa
Signing time: Sat 17 May 2025 00:08:16 +0000
ROA not before: Sat 17 May 2025 00:08:16 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1904 (0x770)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 17 00:08:16 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=54000FB49F72EC51595BCA3B808466E49D29FC1F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:47:97:1d:0d:de:ce:20:98:31:e9:b9:6c:5a:
57:72:81:f0:3c:d6:da:b0:8c:0d:91:6a:18:11:a9:
63:92:e0:2a:af:22:37:86:a0:c2:e9:e9:11:9a:a8:
23:18:38:59:76:4d:c8:23:98:0f:59:a8:d8:33:66:
0f:ae:96:70:eb:a9:39:54:47:96:3a:bb:47:c6:a2:
c9:e2:bf:51:1d:1a:04:58:b3:9e:71:e8:dd:56:ee:
87:d3:3c:15:c1:51:9b:65:bf:1d:e7:43:46:8a:8f:
9f:79:1c:08:5f:17:2d:c7:7c:a6:e2:bf:30:7e:c7:
b7:8c:ea:87:b7:70:27:4c:50:f4:df:4a:a2:63:b1:
44:cf:48:09:de:d4:ce:a8:b8:b1:2a:a5:f9:81:2b:
83:df:20:f5:93:4c:4b:ed:24:ca:4c:7b:fa:95:d9:
b4:21:09:cb:b2:d8:c4:47:c0:1e:00:7e:e8:f6:59:
45:9f:9e:29:76:9e:8e:a4:64:a1:28:e2:22:93:3e:
0e:05:86:38:d5:d9:8b:80:9f:54:5e:c0:b9:ed:86:
fc:35:89:f6:d3:c4:b3:a3:a8:58:d6:5b:e5:7f:76:
e3:f3:c5:b9:6d:af:a2:0e:b7:a6:85:0f:1f:88:9c:
3b:b2:03:0c:48:44:2f:17:9d:84:fd:f7:3a:37:32:
7e:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:00:0F:B4:9F:72:EC:51:59:5B:CA:3B:80:84:66:E4:9D:29:FC:1F
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/VAAPtJ9y7FFZW8o7gIRm5J0p_B8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
15:25:24:43:78:ce:dd:92:72:d8:8b:3a:89:d1:87:0a:b0:6d:
ae:1c:3b:d6:14:03:04:bf:9b:92:d3:f4:aa:ee:3a:70:c2:31:
61:33:4b:6c:56:13:6d:f3:9e:17:4d:f7:21:a0:1f:f5:a1:ab:
20:eb:57:49:a7:84:17:8c:7d:e2:d3:67:57:7a:bb:20:52:0f:
49:5e:6a:f4:9b:e6:3a:da:21:67:48:18:9f:e4:27:64:5d:72:
47:49:20:39:36:b9:f0:b0:3a:4b:d5:ac:4f:56:d1:66:e9:7a:
99:5d:f8:00:5a:c3:e9:b8:e0:75:fa:35:b2:ad:d3:09:de:71:
b0:cd:b3:ff:86:c2:a2:47:3a:6a:d9:4b:6e:b0:7b:d9:c4:6b:
ce:9f:61:88:d8:ef:16:12:b2:6a:d6:de:aa:0e:e2:e2:6a:48:
57:c7:d7:b5:47:ff:5e:b9:51:62:29:04:9c:10:e0:cc:75:ff:
85:ae:da:8b:e4:12:e6:e6:6f:8c:82:d5:0d:bd:6d:7c:3e:06:
aa:c2:c0:8e:58:92:7f:08:f1:7e:d7:69:fb:70:3f:81:c5:18:
da:ef:ea:ee:a0:13:f2:17:77:48:65:63:1c:3f:f6:77:f6:5b:
12:e1:32:63:4b:a9:a9:9b:06:01:c0:4e:11:7e:2c:18:28:4a:
39:af:a9:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 09:09:38 2025 by rpki-client