Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/mWmF7TU2vFGKHUuCwQAZEmsSygM.roa
File: mWmF7TU2vFGKHUuCwQAZEmsSygM.roa (raw, json)
Hash identifier: iE7EHqtqKmdQI9ywBaD/bWUvEalAYemyaUv6DmOa+aw=
Subject key identifier: 99:69:85:ED:35:36:BC:51:8A:1D:4B:82:C1:00:19:12:6B:12:CA:03
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 02E4
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/mWmF7TU2vFGKHUuCwQAZEmsSygM.roa
Signing time: Sat 10 May 2025 22:37:51 +0000
ROA not before: Sat 10 May 2025 22:37:51 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 740 (0x2e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 10 22:37:51 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=996985ED3536BC518A1D4B82C10019126B12CA03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:71:d1:bd:54:62:0a:d2:c7:1b:9d:a4:0d:6e:
63:e4:c9:b0:ae:7e:37:d6:a0:fe:73:63:86:ed:18:
a0:19:d2:64:d8:c1:1f:fc:ff:b1:2d:3d:bd:cb:ed:
49:d6:95:df:80:97:dc:89:ff:7b:4b:c9:39:af:77:
f6:89:28:be:b4:2e:d7:81:18:bd:f9:78:53:56:67:
33:7c:0d:1f:be:51:b0:e7:e5:fe:5b:a7:20:f5:1b:
72:7b:60:62:72:d6:78:8f:07:f9:75:a9:c6:3d:c2:
58:19:6b:60:c7:e3:59:c2:6e:0e:4d:20:15:73:4e:
40:d3:31:88:e0:40:99:a4:d0:7b:39:50:78:2c:03:
dd:c1:d0:ff:9d:98:1f:fb:8f:46:a9:af:da:63:ff:
b9:c1:48:fe:ee:f9:76:01:71:a1:9e:ff:14:25:db:
15:fe:2a:58:4a:0c:06:12:b9:0f:36:96:bf:2d:78:
7a:ef:32:a1:19:09:0c:e2:9b:8c:da:34:ae:5d:18:
2d:65:d2:1a:b0:9c:4f:b2:bb:8f:b4:7d:fb:fe:ef:
95:bb:82:98:cd:89:00:5e:3d:42:13:47:e4:79:bf:
3f:75:a6:90:53:57:a1:07:7b:37:28:a9:42:28:ae:
2e:24:d2:1d:e8:37:33:76:0b:27:87:92:8b:95:23:
67:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:69:85:ED:35:36:BC:51:8A:1D:4B:82:C1:00:19:12:6B:12:CA:03
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/mWmF7TU2vFGKHUuCwQAZEmsSygM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
2a:c9:fd:56:e1:39:26:81:f0:24:9b:23:e5:a9:3c:b6:93:b7:
0c:a1:6f:16:b2:82:83:b9:5f:a0:ab:c0:4a:07:29:86:40:a5:
62:c6:dc:e9:92:61:9b:4a:20:42:7d:e6:fd:35:01:48:3f:99:
c7:20:02:b0:8a:21:f4:04:47:d3:53:26:fa:82:df:a5:36:c9:
6b:3a:e1:05:5b:a6:b0:ae:b7:04:b5:d9:8d:e1:15:1a:ce:ec:
28:fa:43:20:20:91:f1:f7:68:40:44:29:6e:c6:1c:73:fd:e3:
09:5d:e7:06:28:d4:a9:3e:36:f9:f5:80:3f:d3:f1:0f:bc:49:
cf:f7:36:5f:79:02:99:a6:a7:79:b6:f8:23:3b:35:53:4b:cb:
7f:b6:3e:da:cb:40:1f:0f:76:ab:5a:bb:f2:b5:8d:3c:c1:1e:
eb:0b:d5:41:73:62:c7:e5:5a:47:17:f2:d6:46:d6:4d:e1:a8:
c8:c4:08:e0:cc:e9:c0:02:ad:1b:55:99:ae:0d:2d:85:db:b9:
cf:a8:c7:f3:90:65:0d:71:75:28:27:34:32:41:d3:9a:5b:72:
d9:86:1e:08:95:b1:b5:19:3e:93:f3:70:2f:3d:e8:4e:61:0b:
d2:ec:5b:ed:9e:83:96:39:6d:c1:c5:30:db:7e:5d:ce:ac:6d:
fb:00:2b:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 19:43:32 2025 by rpki-client