Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/lV0fqqbfzUdlrUjYLE6KqK_QA_4.roa
File: lV0fqqbfzUdlrUjYLE6KqK_QA_4.roa (raw, json)
Hash identifier: 27w0sMKeA44xQGFed4SIrI1rqgdbRYGL3n9Ap9kilI4=
Subject key identifier: 95:5D:1F:AA:A6:DF:CD:47:65:AD:48:D8:2C:4E:8A:A8:AF:D0:03:FE
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 03D4
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/lV0fqqbfzUdlrUjYLE6KqK_QA_4.roa
Signing time: Mon 12 May 2025 04:37:54 +0000
ROA not before: Mon 12 May 2025 04:37:54 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 980 (0x3d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 12 04:37:54 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=955D1FAAA6DFCD4765AD48D82C4E8AA8AFD003FE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d0:ef:3a:d7:1c:55:9c:dd:87:80:8d:59:c1:
03:3a:af:df:ed:c0:68:96:82:65:e4:89:03:99:6f:
f3:31:89:71:c9:bf:fa:55:fe:be:0c:93:1e:7a:46:
4d:a8:a6:95:89:8d:9a:31:da:5a:76:ce:3b:59:d4:
c0:4e:e1:2f:a2:52:b4:8c:b9:7b:bb:6d:59:41:10:
8c:82:c9:b5:ec:cd:a1:1c:61:b0:f8:3c:4a:69:74:
4e:13:37:c7:62:f3:3b:2a:0c:f4:ea:28:a0:14:0d:
a7:ef:a8:64:d9:bc:2c:66:4a:70:1e:88:47:1d:e1:
88:1c:78:da:8d:c4:73:c7:d8:84:b5:06:f9:24:55:
e0:ad:98:a1:2d:14:db:f9:fd:fa:6b:ad:b5:de:b9:
21:d2:bb:3c:0b:2c:82:ba:db:bd:98:1c:52:eb:13:
80:23:d9:61:91:1c:43:cf:50:05:26:6b:f6:f4:5a:
47:93:93:fe:2e:11:42:83:7e:e4:de:fd:f8:6b:69:
bf:90:06:6d:44:f3:7e:56:65:a0:60:63:7b:55:64:
7c:c8:6e:28:d9:56:45:9b:90:94:66:05:e5:8d:f3:
3e:85:07:de:a3:9d:01:e9:92:40:26:45:86:cd:39:
9d:e9:6f:ae:e6:e3:e3:66:1a:5f:ac:96:36:96:ce:
df:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:5D:1F:AA:A6:DF:CD:47:65:AD:48:D8:2C:4E:8A:A8:AF:D0:03:FE
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/lV0fqqbfzUdlrUjYLE6KqK_QA_4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
73:e5:f3:dd:b1:98:38:5d:1c:dc:78:9b:c3:b0:47:6d:d3:8e:
f4:54:8b:d6:83:24:42:f7:d6:ff:9d:7e:59:46:85:5a:98:b6:
6d:6c:5f:0c:29:b6:47:ef:b3:6b:85:86:fc:62:fe:17:ad:6c:
79:a8:cc:95:92:4d:c8:56:2f:6d:5d:1f:c5:26:44:bf:d7:75:
47:eb:01:19:cd:92:ae:1e:17:26:45:52:c9:60:a6:8d:a4:56:
c5:0b:34:a0:5a:4c:d4:f2:29:2f:73:5d:02:8e:88:d1:60:7d:
68:25:68:34:76:c8:b4:14:74:6c:20:00:eb:48:a8:4f:66:a5:
07:bf:0a:a6:e0:cc:29:b5:f9:0d:6d:89:e5:a9:67:0e:95:0c:
9b:76:d3:1b:a9:74:3f:8c:96:6a:c5:bc:b5:ee:dd:db:82:f0:
7c:88:ef:07:c1:50:5f:5e:a5:53:30:f9:0c:09:c1:21:23:f9:
12:08:70:87:b1:54:b9:db:e1:79:e7:b5:d2:e8:c1:3d:33:cd:
bc:08:51:78:bf:b7:87:db:3c:42:5b:19:8b:cf:0a:46:7a:38:
59:3b:ea:e8:c2:bd:ba:9e:76:fe:51:38:fc:6e:63:e7:68:df:
a5:2f:b6:bb:e3:1c:2a:7e:23:db:b6:5c:91:cf:69:16:78:b2:
dc:41:39:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 01:52:26 2025 by rpki-client