Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/hU1H4_x_uVhDwZEHgSmm1FBPNug.roa
File: hU1H4_x_uVhDwZEHgSmm1FBPNug.roa (raw, json)
Hash identifier: FRT5l1RJ05TLj3aqvIpu2BlGdhFuY4LFIHHyp/l2BRc=
Subject key identifier: 85:4D:47:E3:FC:7F:B9:58:43:C1:91:07:81:29:A6:D4:50:4F:36:E8
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 01F0
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/hU1H4_x_uVhDwZEHgSmm1FBPNug.roa
Signing time: Fri 09 May 2025 16:07:45 +0000
ROA not before: Fri 09 May 2025 16:07:45 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 496 (0x1f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 9 16:07:45 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=854D47E3FC7FB95843C191078129A6D4504F36E8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d0:b3:b8:ab:d2:58:30:ff:82:b6:a0:7f:a1:
7b:44:7f:3c:fd:89:33:ce:0d:b2:ea:e4:05:c3:d6:
6f:ae:ec:be:d7:eb:cb:da:fa:fc:e3:21:6e:fe:f3:
c2:88:17:fb:20:ec:a7:5d:3b:23:9c:e3:b9:98:3a:
50:61:b7:06:25:fd:95:8a:b5:a1:80:fe:82:04:fe:
9a:10:9a:60:7c:6a:b5:d2:c5:82:29:aa:b2:4f:be:
39:3c:df:bc:0c:50:0a:91:89:7e:70:4e:3d:e8:a8:
f0:7f:ba:8c:6e:35:5d:2f:56:e5:d5:ca:6d:73:7b:
91:48:e5:c8:59:f8:ce:0d:d8:e1:70:6f:2c:b3:c0:
fa:f5:3d:1b:ef:ff:3f:37:62:a6:cb:72:47:2f:45:
22:53:96:02:d1:e9:a3:26:86:35:42:6d:49:d4:ee:
14:01:5b:e6:ab:a3:46:07:76:51:6f:dc:ff:f6:57:
19:50:69:03:20:eb:de:c3:30:a4:ef:b5:5a:fa:b2:
d5:d0:26:cb:ff:00:8c:59:16:17:0a:3e:13:c9:98:
71:66:ef:9c:17:87:af:f8:56:18:a8:39:91:3d:76:
4d:a9:83:68:5d:29:b2:7c:55:b7:15:cb:0d:5c:f5:
62:dd:25:fb:f8:7b:91:d2:c5:95:59:99:f1:7c:cf:
ff:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:4D:47:E3:FC:7F:B9:58:43:C1:91:07:81:29:A6:D4:50:4F:36:E8
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/hU1H4_x_uVhDwZEHgSmm1FBPNug.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
9a:e6:9c:24:79:8d:08:a6:36:b5:e6:0e:f6:a7:6c:4d:ed:af:
f1:a9:3d:ff:65:d7:86:e9:4a:e8:0d:e6:2a:44:fb:26:e6:f9:
48:ea:d7:9c:f1:54:65:f3:e5:f9:a6:5c:d8:77:79:c4:08:af:
49:12:24:36:5c:ac:2f:d3:91:cd:0d:65:1c:19:4a:7b:67:60:
47:57:82:4e:69:85:a3:e9:f9:51:52:56:d2:d4:bc:9d:5a:5f:
78:ef:88:e8:cc:a0:26:b8:ef:f1:66:de:45:b8:af:0e:f7:ec:
f2:56:68:7b:c9:8a:b1:69:c3:bc:c8:ce:49:8c:a9:35:93:f8:
f7:90:eb:b8:36:88:7e:12:20:60:3f:75:2b:9c:c2:6f:9c:4f:
81:a3:48:94:30:24:65:f4:ae:32:24:96:c9:69:9b:6c:e3:26:
e8:0d:49:ce:2e:59:3f:d6:33:23:e9:ca:c8:72:3f:06:d5:9f:
04:f2:76:a6:86:97:e4:f0:17:4a:c7:7d:48:79:94:ad:13:87:
c8:a4:06:fc:de:a3:1d:97:2e:c6:99:19:fe:5a:6c:fb:c5:b4:
1a:c9:28:f0:2d:89:10:de:cc:66:bb:58:21:0d:74:0d:de:07:
21:0c:3f:63:ad:27:d8:68:40:42:c6:74:b3:45:98:41:20:55:
4c:09:a2:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 19:47:34 2025 by rpki-client