Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/d1OuGLi_sCNMfpxmXj_6SWUjsCE.roa
File: d1OuGLi_sCNMfpxmXj_6SWUjsCE.roa (raw, json)
Hash identifier: ZoBoRejipVQL6E4o1Fo6h+ehYa55CAVoVx0Sm3ZRK64=
Subject key identifier: 77:53:AE:18:B8:BF:B0:23:4C:7E:9C:66:5E:3F:FA:49:65:23:B0:21
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 065C
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/d1OuGLi_sCNMfpxmXj_6SWUjsCE.roa
Signing time: Thu 15 May 2025 13:38:08 +0000
ROA not before: Thu 15 May 2025 13:38:08 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1628 (0x65c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 15 13:38:08 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=7753AE18B8BFB0234C7E9C665E3FFA496523B021
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:bc:51:25:83:4f:ad:76:4b:94:42:d1:b5:ca:
cf:ad:ed:42:48:93:3b:46:2c:e0:9f:16:e9:e0:41:
c9:f5:6b:83:df:2a:45:b9:5e:92:91:e8:41:27:3d:
04:ba:58:cd:f2:51:d1:64:7a:f8:a1:fc:c1:f8:43:
76:02:d9:c9:d3:8a:96:23:3f:b9:e7:d2:58:42:fb:
b8:91:82:5a:99:c9:fd:98:a1:a4:7b:5c:fa:f5:40:
46:07:64:fb:58:25:80:36:21:61:d9:4e:9b:3b:e6:
95:7d:8b:8e:5f:08:08:f1:bd:55:fa:eb:6f:31:c1:
7f:eb:b7:24:51:1b:68:7f:d6:56:3f:3d:da:9e:98:
f3:60:d6:25:4b:24:a9:a8:87:db:7b:bc:8a:bf:41:
02:ab:ac:67:26:2d:b8:03:8b:b3:e5:d1:1a:f1:04:
50:a0:79:0b:17:f2:e3:ae:22:7d:83:f8:22:77:2a:
13:79:df:15:6b:1e:e9:8c:04:66:5c:98:da:4e:f7:
bf:53:b7:54:1a:2b:e6:ad:15:e5:b9:ef:7c:1b:86:
d2:34:e2:46:16:f3:ff:75:42:b8:a2:bf:74:61:ef:
89:ec:7e:22:ac:83:ad:56:9f:ba:c1:09:e4:48:cf:
11:0e:81:f3:db:88:7a:8a:ab:6e:0d:cc:ed:a5:a0:
53:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:53:AE:18:B8:BF:B0:23:4C:7E:9C:66:5E:3F:FA:49:65:23:B0:21
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/d1OuGLi_sCNMfpxmXj_6SWUjsCE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
60:05:4b:4f:bf:1d:4d:0d:7a:a8:29:3b:33:a2:57:0e:5e:74:
9c:ec:85:53:04:78:c2:20:7f:52:fe:b4:f1:15:ff:57:d7:f5:
a2:a5:62:28:1a:3a:11:1c:5f:cf:18:5c:74:de:c9:21:a1:89:
9e:99:f0:b1:32:15:8d:a0:95:02:e8:80:8a:47:64:5c:ef:00:
b2:b9:97:bc:c8:3c:47:56:18:5f:40:18:e1:a7:5c:e9:01:c1:
af:aa:c1:ca:75:c0:6e:73:c8:91:a6:21:80:c2:70:84:ab:ab:
33:68:ac:49:9c:1a:84:fc:44:f5:d4:60:34:05:c8:5b:c2:bb:
92:95:b2:1f:53:f6:18:1f:ac:9b:53:a1:46:78:9a:f7:8d:bf:
6a:6a:d0:94:94:a8:4c:0d:14:30:07:09:32:9f:b1:24:88:b2:
9a:9c:12:b2:60:80:e5:3c:33:cd:78:e0:6c:07:fa:69:0b:d9:
c1:6f:35:8d:5c:a9:41:1f:7f:4d:04:c4:b1:fc:45:38:59:5b:
78:a0:70:90:e1:eb:c3:e0:ec:3e:11:7e:59:28:15:e6:85:a2:
8b:d9:e4:f5:36:79:d6:74:4c:46:d0:3f:b1:a1:63:0e:4e:99:
13:af:b2:b5:b6:78:a1:46:05:a6:14:c4:4b:b1:1d:17:02:64:
d8:30:9f:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 22:47:33 2025 by rpki-client