Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/fwenBdpV6FzkYZi-Ydm_Ig4RIzg.roa
File: fwenBdpV6FzkYZi-Ydm_Ig4RIzg.roa (raw, json)
Hash identifier: nXaDcGowBXp9XIE1PpWTjRmorZcUioBO2MDkeSiyMkI=
Subject key identifier: 7F:07:A7:05:DA:55:E8:5C:E4:61:98:BE:61:D9:BF:22:0E:11:23:38
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 015C
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/fwenBdpV6FzkYZi-Ydm_Ig4RIzg.roa
Signing time: Thu 08 May 2025 21:37:44 +0000
ROA not before: Thu 08 May 2025 21:37:44 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 348 (0x15c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 8 21:37:44 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=7F07A705DA55E85CE46198BE61D9BF220E112338
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:7a:48:78:0a:c4:27:cd:e5:7a:e4:f1:55:51:
ca:44:46:34:24:35:30:e8:a6:87:9b:af:d9:b7:86:
4e:19:2b:4d:97:d6:ac:8b:4f:0d:05:8b:fe:90:37:
e5:14:94:79:1e:8e:a0:57:5a:f2:1c:64:87:2f:7d:
68:7a:d2:de:8d:15:18:be:62:79:dd:86:45:4f:18:
d8:8e:51:8d:7e:0e:b6:d6:38:de:85:e2:d1:16:8f:
78:4e:4b:19:f9:0b:4a:d7:bd:af:fb:05:85:25:89:
40:1b:3b:fc:23:7a:8f:04:96:9f:6a:65:6b:30:a7:
cc:5f:71:de:c1:ed:b3:37:58:ab:99:4d:9a:a8:63:
41:2f:54:4b:b2:45:08:5c:7b:96:dd:20:36:cd:7e:
a7:ac:6d:77:6b:a0:3b:b0:fb:43:ad:8d:24:4a:1e:
8c:17:4b:6e:a6:5d:1e:b4:ec:a7:87:05:32:70:c7:
3e:44:c6:7d:e7:b4:ba:da:c1:f6:42:fc:1f:7b:69:
3f:a3:af:3e:f9:49:be:27:6d:59:a9:b6:bb:4e:a3:
8c:03:29:4a:d4:d9:7c:41:4e:ac:65:ac:81:6a:fd:
af:45:67:17:7d:b2:37:24:de:f3:91:98:51:dc:60:
c3:a4:ea:3c:cd:af:f1:50:96:4b:a8:aa:1d:9f:98:
35:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:07:A7:05:DA:55:E8:5C:E4:61:98:BE:61:D9:BF:22:0E:11:23:38
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/fwenBdpV6FzkYZi-Ydm_Ig4RIzg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
8a:57:68:a0:b4:d4:4c:9a:2b:aa:81:a0:7d:f2:43:be:03:e8:
cc:6f:a5:5a:76:b4:89:32:ac:8e:ed:18:3f:31:bd:cf:84:b8:
b2:57:6c:f8:0e:19:bf:cb:46:06:c0:ff:7c:88:53:e3:89:73:
8a:63:1e:ac:60:bf:98:ab:eb:cd:15:62:47:f4:4e:17:69:4c:
90:2a:5e:0e:11:cc:85:d9:7d:1f:2e:1e:79:17:0c:8b:8a:58:
7a:2b:b2:22:b4:d5:37:a0:20:9d:c3:67:ae:b4:31:3b:f9:8a:
1a:28:7d:f6:a5:ca:74:e6:dd:73:3a:5d:96:41:c8:c8:45:06:
03:20:a1:09:da:f8:21:d2:ab:5a:72:f1:9b:26:fa:8e:1e:d1:
17:c6:c1:53:a1:eb:0f:32:cf:17:90:4a:6d:7b:c7:ca:52:e3:
73:21:28:9a:b3:f1:50:6a:df:ee:89:81:2f:19:f7:53:a5:7d:
a5:bb:03:74:8e:b5:cf:3a:b5:41:05:54:6a:4e:6c:bd:c4:fd:
2f:a7:53:c8:17:0f:3c:d5:b0:c4:99:97:42:73:13:b6:aa:06:
be:00:22:34:c7:54:ad:9f:4c:34:40:1b:79:8d:d6:05:6c:06:
a4:50:d5:34:96:e2:a6:fb:36:a3:5a:57:33:66:c8:b4:3e:10:
94:cb:90:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 20:00:54 2025 by rpki-client