Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/cKp0yNrodrQEi2sQCC2KlxdhZR8.roa
File: cKp0yNrodrQEi2sQCC2KlxdhZR8.roa (raw, json)
Hash identifier: vcST+KlE+Zqvfl1OUbvAsFciuAkcLuSaekbNqzRsUtU=
Subject key identifier: 70:AA:74:C8:DA:E8:76:B4:04:8B:6B:10:08:2D:8A:97:17:61:65:1F
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 02A4
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/cKp0yNrodrQEi2sQCC2KlxdhZR8.roa
Signing time: Sat 10 May 2025 14:37:53 +0000
ROA not before: Sat 10 May 2025 14:37:53 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 676 (0x2a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 10 14:37:53 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=70AA74C8DAE876B4048B6B10082D8A971761651F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:c8:b6:d1:74:2a:f6:1a:57:29:f8:5c:4c:eb:
c7:5d:fa:eb:6e:79:50:1f:eb:f7:4c:87:22:75:eb:
65:b4:45:e2:79:99:ec:2c:c5:3b:99:3e:51:28:6e:
a8:90:d6:f7:80:46:8a:ac:40:f9:11:f5:1f:8b:c9:
f3:d9:87:46:19:97:bc:f6:12:7f:e0:14:e8:09:1e:
d4:a9:f2:a7:a3:98:25:c5:50:c1:af:a6:6a:46:72:
a7:46:28:af:db:92:01:04:29:b4:9e:d4:5c:60:72:
76:ba:c4:b3:b0:26:be:62:57:94:b8:90:54:77:21:
1a:61:8c:5d:b2:cf:28:a6:76:e3:b4:92:55:9d:af:
07:1c:f5:63:c3:c8:e0:11:61:08:75:d5:6b:6b:4c:
1e:dd:f0:9a:29:f4:1a:7e:17:92:7d:6d:64:01:d9:
95:c1:c4:7a:23:4f:30:a1:5e:fa:65:df:54:e6:1c:
7a:46:b0:df:a5:04:fb:82:5f:0d:4e:10:4f:71:8e:
2b:ba:ea:3e:15:ef:37:cb:ac:4e:e6:73:70:02:78:
44:01:79:49:46:50:fd:3d:b4:2b:4d:c5:55:51:5d:
88:80:9d:b4:84:2d:68:be:9f:f5:e6:0f:bd:0d:13:
01:ec:64:88:64:dd:13:ab:8d:1f:bd:06:46:c7:1a:
9c:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:AA:74:C8:DA:E8:76:B4:04:8B:6B:10:08:2D:8A:97:17:61:65:1F
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/cKp0yNrodrQEi2sQCC2KlxdhZR8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
8a:8d:5c:32:a5:61:b6:32:8a:be:92:29:94:97:16:ab:ec:48:
ea:57:b0:64:bd:88:ac:ba:92:18:94:df:d7:79:9a:54:5e:f7:
a5:76:d0:87:12:36:0b:3d:4d:24:3b:60:06:33:b0:a0:28:2e:
ec:0b:ab:de:a1:e0:f5:13:5b:e1:42:72:47:8f:e9:64:a2:69:
0f:da:72:9f:43:d8:74:a0:af:04:25:89:f0:eb:4e:63:46:d5:
a9:2a:b7:01:7c:7d:18:57:72:78:7a:d6:43:6f:c1:91:46:1d:
ba:e1:c4:08:4a:4a:25:a8:52:7e:28:49:55:81:5c:f6:ba:eb:
44:63:5e:60:17:10:49:50:de:5b:98:f4:5e:ea:29:19:ba:0b:
4b:76:c6:d9:94:a8:52:4e:d4:bf:4a:0f:c2:bf:59:b3:27:ba:
d1:24:48:2e:b4:eb:1f:60:d7:2c:19:4c:75:f3:1d:5b:d2:be:
a3:80:da:89:de:f4:31:9d:24:f5:a7:f6:46:48:fe:91:3e:de:
99:82:6b:de:a7:eb:a0:12:d7:6f:bb:ec:37:8d:3a:6c:32:01:
a8:f9:02:2e:f4:c5:a5:28:b5:e9:91:41:35:82:fb:d3:1f:37:
76:a4:45:48:eb:3c:dc:11:8a:48:2e:04:88:26:e4:4d:65:2f:
ac:1c:52:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 22:40:20 2025 by rpki-client