Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/Vvbhn90Pgnj4Ro-sGwS27VzqreA.roa
File: Vvbhn90Pgnj4Ro-sGwS27VzqreA.roa (raw, json)
Hash identifier: V7OYjeRLwYLGfei94l0R5wPjp7InbYXOKGiVTyJpJnE=
Subject key identifier: 56:F6:E1:9F:DD:0F:82:78:F8:46:8F:AC:1B:04:B6:ED:5C:EA:AD:E0
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0740
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/Vvbhn90Pgnj4Ro-sGwS27VzqreA.roa
Signing time: Fri 16 May 2025 18:08:06 +0000
ROA not before: Fri 16 May 2025 18:08:06 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1856 (0x740)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 16 18:08:06 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=56F6E19FDD0F8278F8468FAC1B04B6ED5CEAADE0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:a7:19:f8:16:ea:d7:60:7b:f7:b3:62:d6:77:
f8:30:f9:fe:11:0f:55:7e:20:59:58:49:e4:c6:58:
45:4b:9e:5b:f4:8e:9a:da:4f:72:7e:10:fa:e6:b3:
ee:e0:38:7e:6d:ef:18:4c:63:4a:71:11:05:d0:fd:
32:56:99:d4:cd:2e:55:72:e6:46:20:6a:64:66:d6:
07:9c:1d:44:c8:55:4f:42:9f:b4:6d:30:a5:49:c6:
12:de:58:39:fe:90:2d:14:92:16:3e:a5:8d:a3:f8:
31:1f:71:a4:3d:50:3b:5f:3f:a2:9e:2f:a7:58:60:
ab:7b:22:86:66:5f:97:9e:d0:3f:bd:93:51:af:bd:
04:ba:df:3b:79:10:77:d2:62:ad:d1:d1:d9:ac:6b:
c1:22:ca:db:48:42:f7:ab:15:6e:d1:d0:29:aa:9d:
95:da:f7:2d:7c:33:fd:3a:7a:81:38:01:94:1a:11:
10:f2:0f:74:f7:76:9d:fc:83:e3:65:97:e8:69:38:
c3:26:72:98:32:be:08:15:fb:47:5b:f4:e6:7c:5d:
26:85:7a:31:08:2f:4e:7a:1d:78:d0:7d:dc:50:ab:
a5:0f:17:aa:29:76:e9:bf:4f:f4:69:93:75:d4:8d:
23:8e:20:93:23:62:64:0a:99:43:23:ae:9a:54:74:
cb:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:F6:E1:9F:DD:0F:82:78:F8:46:8F:AC:1B:04:B6:ED:5C:EA:AD:E0
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/Vvbhn90Pgnj4Ro-sGwS27VzqreA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
15:15:01:49:98:26:a5:39:93:42:9c:4f:f1:8c:a8:6d:ba:2e:
46:d1:68:4b:4f:40:c4:92:fd:ee:bf:61:7b:e9:f4:1d:cd:19:
1b:5b:fa:ed:82:1d:ba:3a:f6:74:04:87:b2:9b:9a:39:a5:b4:
7d:47:53:41:ed:57:b8:a0:be:44:d5:c0:dd:fb:0b:7f:d4:7b:
a6:6b:33:27:08:be:fa:90:bb:57:a3:09:5b:d7:31:b6:57:6d:
6e:44:d9:72:7a:73:a8:fa:59:ed:26:03:12:c8:46:c7:a1:8c:
4c:7d:9d:cb:fd:9e:44:e9:77:1a:3c:17:16:28:72:32:af:74:
94:b2:db:18:4d:e2:da:a0:d8:e8:db:31:41:b1:99:11:18:71:
6f:87:84:64:16:bb:54:20:2f:8b:2e:fd:25:4e:d0:c6:fb:e5:
45:9f:d6:3d:1e:d6:48:b8:69:30:dd:18:b5:96:dc:61:8f:d1:
23:09:5c:bb:b9:8c:11:a4:88:33:14:c4:43:4f:68:2e:81:82:
7e:dc:e5:5c:54:87:55:cb:5b:9b:7a:a9:00:50:63:3f:79:81:
6e:58:a2:44:4d:3d:16:e4:f2:c9:41:c8:57:e7:06:22:1d:82:
18:7e:14:53:c6:da:95:84:f7:ff:22:f7:b8:2b:6e:09:0a:97:
2b:e8:50:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 21:28:19 2025 by rpki-client