Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/mzfPnu4am7lV8rzLaeTU8TeYoQo.roa
File: mzfPnu4am7lV8rzLaeTU8TeYoQo.roa (raw, json)
Hash identifier: VlBH6FIp1fIWTVKZ7lqWOrzu6iOxKD9AlpO2y8CsO3Y=
Subject key identifier: 9B:37:CF:9E:EE:1A:9B:B9:55:F2:BC:CB:69:E4:D4:F1:37:98:A1:0A
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 03A0
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/mzfPnu4am7lV8rzLaeTU8TeYoQo.roa
Signing time: Sun 11 May 2025 22:07:56 +0000
ROA not before: Sun 11 May 2025 22:07:56 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 928 (0x3a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 11 22:07:56 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=9B37CF9EEE1A9BB955F2BCCB69E4D4F13798A10A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:7a:76:34:bc:ff:94:6d:80:10:06:1e:54:62:
ce:aa:1d:3f:91:57:85:4e:86:3a:8d:6c:42:0b:af:
18:ca:ca:32:ff:74:ae:5f:f2:cb:01:be:fe:98:49:
1d:d0:25:50:bd:9a:8f:fa:6e:2a:c1:b9:6e:a6:c9:
e3:d3:51:0e:dd:70:14:4e:79:69:ec:ea:98:03:ab:
9b:c1:a5:e4:e3:50:8f:f9:f5:e7:13:dc:3d:b7:38:
ad:4d:03:2d:38:f2:b2:6f:e6:82:37:c8:48:6c:49:
4f:29:b1:19:41:6c:7b:cd:1e:9b:38:54:21:cd:c6:
02:db:0d:f8:69:92:d8:a3:a0:fd:a2:3b:4f:56:25:
20:05:f5:58:03:c7:14:1e:ad:28:82:77:8b:03:a3:
d4:40:10:ae:81:e6:8d:e3:45:d2:1f:c4:d0:23:23:
8d:ae:6c:80:4d:bc:4c:1b:5d:dc:bf:8d:45:64:96:
73:19:a5:b4:e8:3b:e5:e6:0a:c7:65:76:8e:e0:98:
18:fe:ef:05:19:7c:20:17:3d:0f:c7:f3:ba:fd:2b:
d2:f3:82:d4:c6:cc:89:10:c0:5b:05:12:a7:d0:1d:
07:ce:20:c4:21:f7:c2:2b:01:dd:e7:08:03:5c:d2:
12:eb:87:4d:c1:94:14:12:32:d0:fc:84:ca:96:75:
3b:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:37:CF:9E:EE:1A:9B:B9:55:F2:BC:CB:69:E4:D4:F1:37:98:A1:0A
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/mzfPnu4am7lV8rzLaeTU8TeYoQo.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
78:97:6b:bf:14:f9:87:32:27:cd:39:7f:07:ab:a1:2a:81:76:
20:d2:fc:67:52:df:9d:ee:4e:6e:59:89:27:c8:62:2e:8e:d8:
25:0d:0f:99:75:66:30:49:7f:2f:2d:90:85:69:c8:5f:64:b1:
9e:72:a9:39:6a:a1:46:86:27:d5:00:0c:0f:9f:e6:da:0d:82:
91:aa:13:df:2d:2f:70:43:02:4a:52:88:aa:28:33:cd:96:f3:
5b:95:6b:e1:60:7e:99:30:b6:55:9d:41:45:f4:7b:30:c2:c4:
dd:4b:1f:d9:f5:f0:09:74:3d:0a:8f:7b:1a:f5:6f:22:15:f2:
ec:a4:b3:0b:c6:33:6c:49:48:37:99:3a:96:a8:e6:34:0c:b6:
5f:f8:8d:34:b7:12:01:92:a2:0d:da:e3:1d:6b:63:df:4d:59:
84:a5:14:28:c4:12:39:47:1b:2a:27:40:ca:56:2b:b1:bb:c5:
09:28:f6:0f:87:a7:c0:e0:be:01:b5:07:17:f1:22:6b:2b:ba:
3c:b8:29:20:23:22:4f:f4:74:f8:66:e7:fd:c3:cc:bd:f8:e9:
8a:b3:97:56:83:df:ab:f0:e3:62:d9:9f:07:54:d1:e4:49:1e:
e6:2c:87:df:a8:38:d0:64:43:6d:09:8b:54:d4:91:c6:12:f8:
73:44:a1:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 22:39:23 2025 by rpki-client