Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/eR1S70B6tegcmjy_zDgBAcQEoFU.roa
File: eR1S70B6tegcmjy_zDgBAcQEoFU.roa (raw, json)
Hash identifier: BHY2FGN6/04m4za63Can5pxSbBICQT8t4Z9UuPhf788=
Subject key identifier: 79:1D:52:EF:40:7A:B5:E8:1C:9A:3C:BF:CC:38:01:01:C4:04:A0:55
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0620
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/eR1S70B6tegcmjy_zDgBAcQEoFU.roa
Signing time: Thu 15 May 2025 06:08:05 +0000
ROA not before: Thu 15 May 2025 06:08:05 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1568 (0x620)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 15 06:08:05 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=791D52EF407AB5E81C9A3CBFCC380101C404A055
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:6a:bc:58:62:79:b7:9e:43:4b:2e:48:a3:df:
6b:b9:d9:94:b2:73:11:2a:0e:46:cc:03:71:47:fd:
ec:f7:dd:bb:ef:fa:5c:10:bd:96:f7:fd:33:c0:e6:
08:5a:0d:93:cc:0e:7f:bc:d3:a0:38:42:08:0b:78:
47:cf:f7:b5:5d:f8:36:a4:93:2b:f7:52:20:06:87:
f0:b0:c3:44:b7:27:a3:d0:85:0b:b6:e5:32:d3:c3:
9d:44:1b:38:df:c8:34:c2:35:1e:c2:5f:a8:82:1c:
14:5b:03:e5:62:2b:71:f2:7c:8d:b6:81:5b:72:65:
49:f2:95:8e:f2:ec:28:d3:96:50:e0:62:99:ac:ca:
d0:36:83:fc:28:cf:4a:eb:97:09:5c:1a:3e:05:08:
b4:a2:6f:9f:19:20:51:a2:1c:00:7a:99:8e:9c:c8:
0c:bf:4c:df:23:95:91:be:8f:3e:ba:01:50:23:10:
46:4f:97:6a:21:4b:e1:4b:86:b2:ed:ad:e4:d8:08:
5c:b5:69:66:dd:0a:d8:58:12:93:7d:ba:a1:08:e6:
08:66:68:f3:6a:63:de:23:9b:66:a8:cb:f9:f7:7d:
70:e8:05:c9:0c:e5:60:05:96:3e:9e:01:b2:1c:ad:
e1:cb:55:c4:1d:02:1f:c4:b3:b9:89:f6:08:fa:d3:
e8:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:1D:52:EF:40:7A:B5:E8:1C:9A:3C:BF:CC:38:01:01:C4:04:A0:55
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/eR1S70B6tegcmjy_zDgBAcQEoFU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
23:16:0b:3c:0b:91:ad:ce:88:53:c4:9b:ee:93:e8:9d:f2:55:
d5:91:42:07:29:96:fb:c3:59:ca:45:81:ad:4e:d0:e7:ca:fe:
c4:33:0c:f0:7d:0e:09:3e:c9:c1:a7:15:f9:92:dc:54:9a:51:
98:33:51:86:4f:03:fa:8f:d3:29:fc:1e:ac:e6:8b:4c:e9:4d:
e7:18:cc:c6:d3:1a:6f:36:b6:0e:e2:3d:69:78:83:1c:78:14:
b6:40:d2:79:af:45:a8:a3:19:03:55:36:e7:d3:76:d7:49:c3:
92:14:25:7e:44:5d:c1:bc:e6:d8:b2:30:da:8e:50:02:a1:05:
d5:ad:c6:3c:2e:a2:48:5c:59:ac:ed:50:93:7b:6a:c9:06:89:
ff:9b:17:66:24:b3:64:d7:41:68:cd:61:d0:6b:da:46:d3:10:
7a:67:ea:91:2e:56:e6:61:cf:23:98:91:70:a3:bd:d2:b5:c5:
dd:1b:05:0c:a5:93:fe:15:84:e2:96:da:51:fa:8f:cb:bb:30:
ba:99:61:1f:44:35:85:8e:f1:e8:fb:6c:13:58:db:81:30:7c:
86:82:27:8b:d1:2a:3a:a2:69:07:96:31:d5:0f:95:a0:c1:00:
e0:5b:6f:a4:70:c0:37:95:b9:8f:a0:c2:38:9c:f0:e7:42:20:
7a:f1:93:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 23:40:32 2025 by rpki-client