Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/erN7H2L_1TZf9Czen-VyRWCrZNk.roa
File: erN7H2L_1TZf9Czen-VyRWCrZNk.roa (raw, json)
Hash identifier: RJDim0fkMahfoiDAilznFlpy1rFWdnavcM8qQn+BYJM=
Subject key identifier: 7A:B3:7B:1F:62:FF:D5:36:5F:F4:2C:DE:9F:E5:72:45:60:AB:64:D9
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 050C
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/erN7H2L_1TZf9Czen-VyRWCrZNk.roa
Signing time: Tue 13 May 2025 19:37:58 +0000
ROA not before: Tue 13 May 2025 19:37:58 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1292 (0x50c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 13 19:37:58 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=7AB37B1F62FFD5365FF42CDE9FE5724560AB64D9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f7:1f:fa:91:1d:f3:fe:95:b0:e7:a4:47:78:
45:5b:7c:06:cf:34:33:70:f3:68:27:f3:ce:c6:e4:
a7:bd:39:63:26:48:49:9d:c2:22:54:c6:0c:d8:a9:
a9:1f:62:0a:af:54:69:25:16:f6:d7:d0:8b:6c:ea:
2d:d9:59:10:31:fa:33:2c:b5:6c:78:a5:b7:02:8d:
ff:fa:dd:ca:13:a2:21:48:86:4d:e9:71:b4:5b:a5:
2e:4c:9f:12:28:f2:54:1c:5e:8c:a6:24:ed:bc:e9:
0b:28:88:c2:c7:73:62:71:ef:50:09:9d:6b:e5:57:
7e:cb:79:47:d8:d1:09:7b:b6:ac:f1:d5:f8:fc:e2:
a0:82:94:0e:7b:3f:ec:67:2d:d9:64:de:37:8d:ac:
0a:b0:bd:bf:47:d8:9f:dc:24:bc:73:4d:c2:7d:95:
27:b1:92:07:29:90:c0:fd:a5:a9:1a:59:4a:55:d0:
e1:a1:74:19:16:91:0e:f2:ec:0a:27:70:8f:6f:0c:
87:d7:5b:82:9e:9c:75:f3:3c:b3:7b:88:42:49:47:
7e:4e:90:3a:6a:5d:d1:4a:db:70:49:a3:45:2c:ef:
ea:57:fc:1f:57:fe:ed:63:3c:fa:e6:47:2c:89:10:
2f:cb:15:15:6f:25:31:6e:fc:85:78:2b:df:8a:33:
f0:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:B3:7B:1F:62:FF:D5:36:5F:F4:2C:DE:9F:E5:72:45:60:AB:64:D9
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/erN7H2L_1TZf9Czen-VyRWCrZNk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
5a:92:51:d5:e4:42:78:45:5a:33:10:73:ce:72:5f:0d:ee:89:
19:e2:22:fb:ed:1e:9b:35:01:fc:47:e6:ba:a6:e2:bd:a8:b3:
ac:81:f1:ae:8b:ee:53:64:11:50:94:51:11:9c:0a:ea:a3:a4:
8d:91:34:c0:95:91:42:c0:dd:3c:67:b2:5d:1d:9a:a7:3d:41:
c3:ca:7c:ed:e3:45:b8:ce:34:f9:39:27:d9:37:3c:f7:85:3a:
39:f4:6d:5f:d3:e9:a8:5d:6c:ec:85:97:cd:02:c4:4e:29:13:
e5:cf:d1:d4:d2:3b:c3:8f:a9:62:0c:14:0e:48:06:d3:c5:10:
34:6a:e3:1e:31:b6:fa:6e:08:39:70:6b:0b:9d:30:a9:18:c3:
14:84:43:43:4b:18:b3:e8:ac:36:7b:de:c7:61:2d:a8:f5:f3:
34:c4:fc:69:70:b1:cd:8b:3d:06:a9:05:17:e8:b1:52:0f:97:
49:46:94:e7:7d:23:84:d0:8e:6d:72:87:d6:31:80:0b:63:ed:
aa:e6:30:21:33:9c:7b:1c:32:af:58:f2:77:48:52:25:83:69:
25:5a:cf:5d:6d:79:ee:02:65:b6:52:f9:60:ff:dc:78:ef:6f:
0a:07:fb:08:0f:a2:82:a6:d5:fb:74:03:b7:a0:d1:c9:84:05:
9d:88:e3:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 23:56:13 2025 by rpki-client