Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/YB4yRgmIq5OZH5HNl-3lNLf60k0.roa
File: YB4yRgmIq5OZH5HNl-3lNLf60k0.roa (raw, json)
Hash identifier: 876dhO78m0iVIDkL7k1M23wXPYI/XgcPdf1xhnVwujw=
Subject key identifier: 60:1E:32:46:09:88:AB:93:99:1F:91:CD:97:ED:E5:34:B7:FA:D2:4D
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 03B8
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/YB4yRgmIq5OZH5HNl-3lNLf60k0.roa
Signing time: Mon 12 May 2025 01:08:26 +0000
ROA not before: Mon 12 May 2025 01:08:26 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 952 (0x3b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 12 01:08:26 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=601E32460988AB93991F91CD97EDE534B7FAD24D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b5:f7:d1:cf:0a:9c:92:14:bd:c2:95:8f:ef:
59:b2:77:ec:55:43:63:58:dd:6a:30:bd:24:7a:e1:
69:1e:95:92:ea:47:62:df:26:87:1d:d1:73:40:f6:
ce:51:00:15:d3:c8:e1:ba:2c:42:36:6c:45:a6:d3:
43:d4:7b:59:54:ed:14:91:32:7c:4a:c9:3b:1d:eb:
28:5b:a6:c4:05:4e:56:5e:37:c6:27:2a:ca:ba:43:
59:45:80:48:45:af:26:d6:a9:a8:a5:4d:f6:f1:30:
c5:01:f0:9a:83:5a:04:e0:d1:21:00:65:47:f5:ef:
4e:7b:06:2a:4d:04:4d:42:a0:ba:80:2f:60:12:3b:
a0:a8:01:53:98:c3:b8:59:95:f5:a2:da:b5:74:95:
51:47:ac:33:16:4f:4d:0e:0b:d5:e8:5d:a1:fe:aa:
61:ee:fb:ab:66:b5:ab:f1:9b:27:30:c1:c6:4b:9b:
6b:10:bf:a6:68:48:5f:ee:04:50:d3:9e:0e:1f:d3:
77:25:f0:21:5a:fe:54:fe:df:04:ab:49:68:e0:13:
e0:95:5d:fc:f8:26:42:46:67:a6:21:b1:8d:f0:31:
af:2f:ae:16:a3:b6:eb:cc:20:55:d3:dc:68:ef:27:
2e:a2:1e:39:a4:4c:c2:9a:a6:0b:c0:eb:10:7f:19:
08:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:1E:32:46:09:88:AB:93:99:1F:91:CD:97:ED:E5:34:B7:FA:D2:4D
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/YB4yRgmIq5OZH5HNl-3lNLf60k0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
6a:48:4a:c9:b6:2b:50:d8:5e:7f:ae:b7:e8:a4:68:64:38:47:
e1:13:b4:fe:e9:83:51:06:52:7b:ad:23:9e:60:f1:df:aa:d8:
bd:b6:c9:bf:dc:76:58:11:ff:0a:65:67:6b:20:56:69:68:a2:
c7:83:07:2e:e5:cb:27:81:f1:51:c1:7d:80:05:93:81:4e:47:
67:96:7d:82:ce:30:4b:b5:51:49:60:c7:22:31:46:6f:2b:39:
06:38:93:2f:dd:a4:3e:cd:a3:1a:b0:01:51:bf:ba:04:30:60:
07:a4:7e:c2:78:1e:a5:c9:c4:9c:a2:29:70:d7:f1:c2:20:9b:
9c:64:76:36:44:62:2e:39:05:ae:0e:4c:63:84:ea:84:66:af:
99:d7:21:12:66:86:85:a6:d4:a1:20:97:20:04:e2:e7:20:90:
e5:ee:46:16:2f:5e:05:12:70:56:9c:a4:91:8d:09:1e:36:67:
93:3d:fc:25:ed:13:90:76:55:26:60:22:5f:51:3e:a9:a9:47:
7e:16:13:b6:08:51:fa:ee:e2:f3:82:24:eb:dd:45:5d:65:c3:
4a:11:7f:04:2f:20:dc:42:5e:db:e3:65:55:6e:0c:8e:59:48:
3b:79:d2:ef:ff:75:3c:a0:fa:7c:f5:d2:93:58:da:48:f6:5f:
e8:c0:05:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 01:53:42 2025 by rpki-client