Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/eatzoKKQh88S6iUUCjeFv_3Cotg.roa
File: eatzoKKQh88S6iUUCjeFv_3Cotg.roa (raw, json)
Hash identifier: 0dnwKihqQcrwC6EnIDaduSTjS/NIWkcELTHa6xn01nc=
Subject key identifier: 79:AB:73:A0:A2:90:87:CF:12:EA:25:14:0A:37:85:BF:FD:C2:A2:D8
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0520
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/eatzoKKQh88S6iUUCjeFv_3Cotg.roa
Signing time: Tue 13 May 2025 22:07:59 +0000
ROA not before: Tue 13 May 2025 22:07:59 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1312 (0x520)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 13 22:07:59 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=79AB73A0A29087CF12EA25140A3785BFFDC2A2D8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:6b:3a:92:dc:00:1d:5e:22:8f:99:dd:7c:e6:
b6:3e:51:ab:c8:d9:aa:85:05:54:77:1c:b9:c6:7c:
19:02:b6:0b:fe:94:7e:3e:33:bb:1a:8d:2a:4b:84:
bc:84:ab:fd:97:c3:6d:3f:9d:7a:02:60:d0:d0:ef:
cb:4f:79:8d:d7:e9:37:e5:78:db:6b:82:c5:fa:5a:
ba:e4:6a:0c:2d:9b:3f:0f:69:85:a6:e4:37:65:d5:
74:53:fc:d8:f6:8b:0c:7d:c3:f8:2d:3e:57:f5:cf:
36:2b:c3:95:c0:d8:bd:cf:de:ed:95:47:9e:a0:ac:
ca:62:c2:e5:17:33:d7:5f:f4:3f:be:48:8c:16:21:
e5:41:b5:a6:5d:4a:94:50:28:19:b4:1a:3e:74:db:
3f:a2:ef:df:f2:9c:da:2c:1e:c4:74:b0:40:17:4a:
bb:79:1e:41:a1:bc:12:46:d8:05:a7:16:fb:ce:ab:
cb:78:47:4e:7f:2b:1d:4e:e8:23:2a:a1:dd:ad:f3:
f9:8f:2a:2c:99:51:66:e8:af:38:7e:10:c9:aa:79:
72:83:1b:3b:71:b1:6f:e5:40:42:5b:9e:f6:8a:b3:
e4:63:b4:25:e5:e4:22:93:84:a2:b6:89:42:29:97:
2e:a4:0b:90:b2:fc:82:23:f2:5c:22:87:b5:74:61:
ba:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:AB:73:A0:A2:90:87:CF:12:EA:25:14:0A:37:85:BF:FD:C2:A2:D8
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/eatzoKKQh88S6iUUCjeFv_3Cotg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
a0:b2:c3:65:f3:01:9c:a3:4c:b7:ac:6d:28:ba:8f:05:6a:18:
ef:64:fe:37:20:1b:63:60:3e:c8:cc:33:2c:a8:ce:62:54:6b:
e7:72:a3:88:e5:6a:3a:f0:5d:49:97:cd:2b:dd:a9:7a:cf:c9:
ac:b6:a0:ef:27:3e:e3:b1:f5:9a:7c:95:7a:e6:1f:35:91:ee:
9d:5f:9d:dd:2a:91:4d:3f:c2:a5:80:53:f8:2b:a6:27:d0:d3:
56:89:01:ef:f5:07:24:c3:a1:a2:ab:71:74:0e:51:52:12:a6:
7d:5b:cf:66:19:26:58:07:2c:ad:a5:80:38:61:f0:2b:83:e2:
ec:af:e9:d4:57:de:16:03:0d:28:2b:d6:84:f5:7b:d7:cd:ca:
e5:1f:af:36:91:e2:34:e7:e4:60:69:2f:a3:6a:39:1b:47:0e:
26:e9:63:51:64:34:15:9c:06:a7:70:3b:3f:d5:41:24:e0:35:
50:1e:33:46:38:bd:88:9d:e2:82:0d:29:06:aa:55:79:50:07:
c3:38:44:cf:ad:f4:7c:16:d2:54:e3:d4:c7:e7:72:e5:90:82:
4c:28:50:07:b8:96:6c:4a:3c:5f:1b:a2:e1:79:37:af:a3:db:
72:98:b9:47:d7:ae:10:62:1e:62:22:78:ee:30:b2:a0:e0:3b:
69:1d:59:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 19 05:59:03 2025 by rpki-client