Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/iUeDtPiyz_xLDtz4cXv74QGuDDQ.roa
File: iUeDtPiyz_xLDtz4cXv74QGuDDQ.roa (raw, json)
Hash identifier: iOludFMxaJA6EgLc+ric1v26LZZ2BVQ3bcOqiMETV+Y=
Subject key identifier: 89:47:83:B4:F8:B2:CF:FC:4B:0E:DC:F8:71:7B:FB:E1:01:AE:0C:34
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0518
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/iUeDtPiyz_xLDtz4cXv74QGuDDQ.roa
Signing time: Tue 13 May 2025 21:08:00 +0000
ROA not before: Tue 13 May 2025 21:08:00 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1304 (0x518)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 13 21:08:00 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=894783B4F8B2CFFC4B0EDCF8717BFBE101AE0C34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:f5:36:b3:84:15:a1:05:40:4d:4c:3d:1e:29:
4c:3b:44:b4:b6:8c:ae:9d:24:4b:18:b7:63:e4:75:
38:a1:4a:f9:9d:c2:1b:0f:e8:1b:a4:0a:cb:90:42:
df:14:9f:71:00:8f:41:0b:b7:8f:af:9a:7f:a0:0c:
39:eb:79:7b:e0:80:4c:30:70:b9:7b:3e:66:47:ba:
36:41:79:de:30:46:63:64:b6:c7:cb:8d:1c:5e:3f:
38:8a:ab:67:a8:f9:4b:78:47:00:76:b5:36:10:52:
94:70:d8:d9:25:8a:6d:94:df:a8:38:9e:f0:1a:9d:
6f:41:f8:08:e5:b8:c1:c6:ea:ee:b4:54:f8:dc:e4:
d6:06:08:c4:40:01:d6:14:01:1a:68:a1:48:6a:8c:
3e:51:47:c1:2d:56:73:c4:aa:45:5f:b6:f1:45:6c:
97:48:76:27:7e:c2:e2:fd:7d:15:cd:01:3e:72:2a:
6f:3d:6f:6d:33:27:71:f2:57:c7:77:e0:e2:13:1d:
7b:d7:6e:3b:05:17:2c:6e:52:46:6b:b4:92:de:ba:
29:57:b1:d6:63:36:02:e1:38:7a:67:26:63:97:75:
5d:db:33:b3:03:e5:86:e3:6b:c1:27:88:34:27:b0:
81:64:af:87:e1:a1:51:02:f3:05:99:82:70:34:4b:
fc:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:47:83:B4:F8:B2:CF:FC:4B:0E:DC:F8:71:7B:FB:E1:01:AE:0C:34
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/iUeDtPiyz_xLDtz4cXv74QGuDDQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
ac:f3:01:8c:47:08:cd:1d:ec:82:99:82:fe:e5:73:84:ce:43:
59:36:5c:76:d2:c7:0e:db:f7:03:a4:de:26:2f:c7:1a:f7:a2:
72:19:01:b8:59:4a:93:4f:30:f0:58:16:f4:47:10:64:c7:18:
e1:98:47:77:a5:ea:f8:01:cf:da:eb:82:a8:9a:bc:59:d8:07:
b9:14:65:3e:db:f5:73:9d:68:35:4a:02:a5:65:bd:37:bb:b9:
40:7f:90:a1:36:87:ce:58:75:07:9c:00:cd:1c:44:f8:7d:1b:
fa:e6:d7:d4:e5:c1:97:32:f6:d2:71:8d:39:80:33:61:63:de:
a3:bd:12:73:9b:93:37:1e:81:58:21:3e:4a:ce:32:ec:ac:b7:
68:00:d6:f6:ae:f8:d6:6f:e8:77:46:e5:fd:ba:3e:02:f5:95:
ed:9b:ea:fa:bf:fc:08:5e:4b:a0:dd:e0:c1:85:10:45:6f:b1:
43:c2:60:83:45:31:14:c3:b8:f5:c8:c5:07:7b:e6:ce:33:4a:
29:17:a6:7f:2c:94:18:1f:fb:c5:1e:e3:ab:45:b5:13:e0:33:
8b:8c:52:33:e4:1c:1b:fa:e5:d4:2e:08:83:f3:96:8b:b7:ab:
78:ab:29:2d:a3:29:56:d8:b1:c9:b4:57:15:88:ce:a5:d3:26:
59:08:16:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 09:46:55 2025 by rpki-client