Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/kRy1DKdCpUKmOxFxWHsSNbSaCSs.roa
File: kRy1DKdCpUKmOxFxWHsSNbSaCSs.roa (raw, json)
Hash identifier: x7qvasViQgvOHTAjanevoxxS2EzvFEKuBc47JL9iP5k=
Subject key identifier: 91:1C:B5:0C:A7:42:A5:42:A6:3B:11:71:58:7B:12:35:B4:9A:09:2B
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 02E8
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/kRy1DKdCpUKmOxFxWHsSNbSaCSs.roa
Signing time: Sat 10 May 2025 23:07:51 +0000
ROA not before: Sat 10 May 2025 23:07:51 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 744 (0x2e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 10 23:07:51 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=911CB50CA742A542A63B1171587B1235B49A092B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:02:13:20:ca:5b:ed:00:55:97:55:28:a9:be:
bf:19:14:23:2b:fc:05:47:92:80:e3:7e:3f:ca:57:
51:f9:40:7d:8a:be:d5:26:07:41:69:7e:da:f0:89:
09:4d:fc:53:bd:49:91:cb:e1:a9:62:fd:62:d6:82:
6c:a5:9c:7c:d4:f6:c0:b8:11:ea:b9:2a:51:4b:db:
d9:9f:46:d8:56:1a:3d:52:7a:d5:ab:f5:31:1e:a2:
a5:1d:94:17:20:75:4c:04:4f:0c:3e:d1:3e:de:4f:
c4:1c:5a:20:d4:d5:bf:9b:86:df:c6:78:98:bc:24:
ab:73:7c:e8:8a:44:e4:f1:9c:32:01:c5:bb:98:fc:
03:46:e3:ba:45:89:1c:a0:57:42:dc:dc:33:1b:41:
5a:ed:e9:b8:b4:ec:85:55:08:fa:93:ee:45:fc:38:
80:7b:f6:02:fd:e7:a9:b6:f4:82:1b:3c:2b:80:6c:
99:39:b7:67:87:a9:22:a6:cd:43:3f:29:aa:5f:19:
c0:81:e4:b3:29:17:86:87:89:a7:62:ba:a7:5f:7c:
f5:97:d8:9a:c4:90:bc:a0:65:c5:c9:08:5e:4a:8f:
22:2f:db:bc:7a:e7:52:c9:b7:19:2e:db:fb:88:ae:
75:50:ce:08:42:e0:33:36:47:15:47:6b:3e:de:6d:
37:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:1C:B5:0C:A7:42:A5:42:A6:3B:11:71:58:7B:12:35:B4:9A:09:2B
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/kRy1DKdCpUKmOxFxWHsSNbSaCSs.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
73:df:ca:75:ed:d1:cd:8d:af:c2:79:9d:2d:c7:16:a5:a9:c3:
e6:89:cf:d3:36:1b:88:76:3d:0d:36:70:0f:42:27:b5:e3:01:
4b:08:5a:1c:b8:e2:2c:9e:b9:55:d8:00:be:6d:7b:fc:7c:db:
45:9a:a3:09:cd:94:e1:c9:7a:a8:87:5c:f7:28:84:70:4f:35:
70:28:96:50:4b:9c:3b:72:5c:ac:6d:37:ac:f7:f1:cf:c0:7a:
da:9d:f1:2f:f3:05:4d:95:d1:8f:c2:c9:af:d3:58:dc:82:ca:
4d:f0:b5:50:72:39:83:6e:1f:36:de:f0:24:f0:8d:bd:c3:07:
99:27:e3:f0:14:53:e8:ad:d2:32:1b:40:2a:01:6e:84:9d:9b:
9d:a4:7e:41:64:e2:38:48:28:07:8c:d9:35:3d:e3:be:91:e0:
7b:7e:2c:bb:b2:50:01:49:23:f5:ad:90:39:5e:9b:fb:0f:52:
4f:78:e3:2d:5a:5a:b1:f2:22:45:4d:d5:17:e7:6c:a5:e1:66:
f1:43:87:8a:da:f2:79:76:f4:25:d9:d9:be:2f:1e:0d:1c:c0:
0a:fd:f4:45:6f:2b:0d:ec:7b:0c:73:c8:29:45:a9:d8:83:ce:
30:86:ea:70:48:ae:a9:bb:d7:ee:9c:e5:c5:90:c8:20:d3:79:
a9:3a:42:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 20:00:05 2025 by rpki-client