Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/dyL2rkiYfo0V8EcvGBxy71suX1o.roa
File: dyL2rkiYfo0V8EcvGBxy71suX1o.roa (raw, json)
Hash identifier: o5P9Tlm/W/BfzBOz05YHvbahbn1dMhKGbTsNhZWoIjg=
Subject key identifier: 77:22:F6:AE:48:98:7E:8D:15:F0:47:2F:18:1C:72:EF:5B:2E:5F:5A
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 014C
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/dyL2rkiYfo0V8EcvGBxy71suX1o.roa
Signing time: Thu 08 May 2025 19:37:43 +0000
ROA not before: Thu 08 May 2025 19:37:43 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 332 (0x14c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 8 19:37:43 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=7722F6AE48987E8D15F0472F181C72EF5B2E5F5A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:46:6b:b1:34:dc:e4:12:11:f9:54:97:96:12:
8a:f1:22:60:7b:c1:6e:f2:8f:f7:8d:68:64:1f:d7:
02:39:0e:20:1e:e0:99:4b:5c:43:93:dc:f3:62:2e:
6d:d1:7d:8f:11:60:f4:bf:79:f1:b1:ce:d3:4f:9e:
51:b2:80:f8:a2:f2:ec:10:a2:b1:e2:72:6c:44:b4:
69:b9:40:64:1c:f6:91:07:85:80:e8:5b:35:8a:7d:
76:7f:5e:b4:b4:08:85:5d:4b:3c:70:1e:c3:f1:b1:
1e:6b:a8:0a:09:de:f1:20:6b:aa:13:8e:1b:52:20:
62:85:f2:83:7c:aa:9d:61:9f:1f:7d:f0:8f:d3:5f:
ce:35:1a:9a:e0:2b:d3:14:ea:a8:9b:23:4c:18:6e:
93:af:16:75:60:0e:9d:0e:4c:99:6d:33:7c:e8:02:
ae:02:ce:fd:06:4a:81:2e:68:0a:04:8d:40:25:97:
cc:86:68:00:98:2a:07:92:4a:95:60:00:c6:d3:0b:
a2:0a:f0:32:93:38:79:cb:ee:6a:65:cb:10:de:88:
3c:70:67:f3:ba:c1:ca:90:12:56:de:07:e0:53:b9:
b6:56:b7:83:ba:32:62:39:40:75:aa:0d:a9:ce:9f:
8b:f9:d5:42:b1:ea:9c:53:e1:49:d6:51:28:ce:f7:
71:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:22:F6:AE:48:98:7E:8D:15:F0:47:2F:18:1C:72:EF:5B:2E:5F:5A
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/dyL2rkiYfo0V8EcvGBxy71suX1o.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
0d:7a:07:ec:b2:48:d6:0a:a9:92:05:f9:81:94:2e:77:07:0b:
8e:5c:e3:53:4a:0d:fa:c3:86:96:27:ce:2e:da:61:29:b9:6e:
c7:9a:2e:9b:2f:ad:40:54:46:87:c7:6b:9b:fb:40:9e:ec:52:
ea:8d:86:ff:5c:a1:45:8b:9b:a4:d5:f0:e5:0b:c8:c0:ec:6e:
72:b0:e0:cb:86:cb:05:be:a5:59:ef:70:e6:e1:5b:ac:3e:b6:
b8:0f:4b:7e:6d:86:42:83:60:26:b8:dc:b5:45:9e:65:9e:4b:
85:0c:fc:b3:17:22:d9:a6:b3:f3:60:cd:e4:22:3d:02:70:0f:
8f:42:33:9c:51:62:9a:fc:1d:41:9c:fb:71:9d:fa:a5:89:91:
65:df:8f:13:2f:82:73:b2:38:78:6a:28:a8:69:d3:05:98:f2:
2d:a7:d9:5a:7e:46:bb:33:0a:97:f6:38:bd:f4:ff:82:2d:b3:
3c:82:90:14:cb:1c:3e:63:c4:73:6e:24:f2:5b:ce:58:1a:34:
af:dc:75:25:31:26:1d:a5:bc:5d:62:9b:1d:1f:43:08:2c:4b:
43:aa:c1:1b:49:4a:da:96:39:8a:cf:35:b4:e0:9d:aa:a2:b6:
d2:2e:3c:e7:0f:40:ec:06:50:8b:22:40:a5:c1:74:f0:4e:51:
73:03:23:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 19 10:42:43 2025 by rpki-client