Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/WeDDQCP2NFpdT531bxgaVYlD86Y.roa
File: WeDDQCP2NFpdT531bxgaVYlD86Y.roa (raw, json)
Hash identifier: 2bi1MWnsaExSS6+EKZpMZiBlbrOiP6qF0lpju8KYSew=
Subject key identifier: 59:E0:C3:40:23:F6:34:5A:5D:4F:9D:F5:6F:18:1A:55:89:43:F3:A6
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 011C
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/WeDDQCP2NFpdT531bxgaVYlD86Y.roa
Signing time: Thu 08 May 2025 13:37:43 +0000
ROA not before: Thu 08 May 2025 13:37:43 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 284 (0x11c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 8 13:37:43 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=59E0C34023F6345A5D4F9DF56F181A558943F3A6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f5:ba:22:56:09:51:8b:da:3a:31:74:9f:cd:
1a:f0:48:b1:97:cb:9c:b1:e7:3d:75:1e:16:54:18:
09:09:28:35:f0:22:ec:39:4d:46:35:ad:ca:61:02:
bc:a0:23:4e:10:32:07:ab:58:55:79:bb:8d:dd:22:
83:c3:4a:c1:88:7a:63:6a:bb:e7:32:58:f5:86:98:
ef:b4:f2:32:f1:b7:c9:52:3b:ec:ac:e1:38:f1:7c:
4a:b3:cf:26:04:22:68:68:6a:cc:76:76:4e:f9:b1:
bf:b8:42:a4:93:fa:28:ec:96:be:f6:ca:8d:fb:b0:
4c:c4:cf:43:59:d0:29:b0:53:5a:92:d4:8d:62:22:
a1:2d:07:d2:1d:6b:3a:d7:4b:1c:dd:47:99:79:ce:
41:d9:4c:88:61:81:38:ab:92:3f:01:5d:6b:af:bd:
29:51:7c:52:c3:08:bb:85:53:e3:33:af:f2:9a:a7:
ae:42:95:08:f6:ef:d4:8f:44:8e:cb:d2:dd:2e:a7:
c8:5b:ae:71:db:44:ef:d0:83:76:0b:c4:d2:c8:02:
b3:42:c1:12:b7:6f:81:41:18:72:b7:0f:87:21:21:
26:ce:d6:7c:12:aa:39:1f:b8:f1:cb:83:4a:7c:5d:
e6:ed:90:c8:d2:de:54:db:dd:55:72:ba:a0:5a:76:
13:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:E0:C3:40:23:F6:34:5A:5D:4F:9D:F5:6F:18:1A:55:89:43:F3:A6
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/WeDDQCP2NFpdT531bxgaVYlD86Y.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
13:9b:ef:8a:da:00:8c:c2:0a:5e:cc:d1:8a:1b:0c:48:0a:5e:
77:1f:05:4d:88:54:d8:18:71:c9:a6:94:b1:5d:5c:6e:8d:f5:
2d:e5:16:97:e3:d1:0e:2b:3e:2c:9f:e4:05:fb:93:e3:b7:9d:
33:3b:d7:93:58:08:42:e7:98:32:7a:cc:e1:3c:57:2f:29:1b:
5e:94:0a:f7:e9:b5:6e:e2:96:98:70:1f:69:3f:c4:32:14:dd:
a3:21:f9:0c:49:a2:8c:5a:99:97:79:db:47:36:0c:bf:4b:43:
55:4a:c2:88:d0:45:4b:55:71:bf:07:d7:a3:85:6e:22:f2:8d:
aa:f2:5a:b7:fc:b2:78:79:ed:1c:15:d3:a2:68:82:ee:17:ce:
45:89:52:90:ef:db:36:57:b1:3f:ef:aa:5e:1f:5f:32:39:4e:
f2:95:f7:03:24:82:6d:6d:ce:75:6f:d2:53:a2:8e:02:c9:ab:
bf:4e:f4:82:3e:27:44:e6:c5:01:1a:af:43:2b:3a:a7:1d:a7:
ea:8f:5d:a6:cb:03:11:dd:ad:63:c0:6c:b3:5f:09:f4:01:55:
ad:81:a7:28:b1:91:7d:25:f0:12:a8:1b:b7:b5:28:e2:a0:f8:
35:09:08:94:9e:5a:f8:61:f4:a2:4d:a6:58:7f:27:0e:d6:2e:
d7:24:e1:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 21:26:00 2025 by rpki-client