Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/nQ5mo_QjyTtLPe7QRAFikhBNa3g.roa
File: nQ5mo_QjyTtLPe7QRAFikhBNa3g.roa (raw, json)
Hash identifier: 7OHeuXB6HCeUOmHSCXMQYV+Tc0LW+9w6mmr37kyR1Pg=
Subject key identifier: 9D:0E:66:A3:F4:23:C9:3B:4B:3D:EE:D0:44:01:62:92:10:4D:6B:78
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 032C
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/nQ5mo_QjyTtLPe7QRAFikhBNa3g.roa
Signing time: Sun 11 May 2025 07:37:56 +0000
ROA not before: Sun 11 May 2025 07:37:56 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 812 (0x32c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 11 07:37:56 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=9D0E66A3F423C93B4B3DEED044016292104D6B78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:19:e4:0d:ef:8a:0e:78:4b:34:d5:2a:54:cf:
16:c0:b3:c7:6b:6d:fc:17:92:5e:44:a9:bf:d7:b7:
c5:da:03:75:0c:2d:39:57:d0:93:e9:ff:78:a8:d2:
74:fb:3c:b1:42:a7:89:d0:57:aa:46:c2:33:8e:f1:
2b:b1:85:09:1e:0f:e2:fa:21:67:9c:d5:c6:3d:c7:
d3:60:af:20:1e:45:11:c3:a4:19:4c:be:88:ac:98:
d7:8a:48:d2:8c:2c:e4:2c:c7:f0:c8:c9:c7:fc:cc:
d7:07:af:5b:19:4b:a7:da:ec:d5:7d:b1:be:9c:de:
ea:54:d6:60:58:d5:12:f0:19:5e:06:da:95:50:49:
df:9e:4a:0a:e9:c7:bf:ac:bf:68:2e:f0:71:a0:5a:
ad:2a:0e:15:fc:46:87:66:2f:aa:34:bb:d1:b3:48:
4c:b9:bd:6c:80:ec:75:d0:1e:25:d3:01:f7:9f:4d:
b8:33:51:2c:6d:42:5b:bc:c4:65:c8:3f:17:0a:d9:
9d:bd:6a:f9:ca:ec:16:e0:0e:17:d1:0f:bd:45:e6:
32:e3:9e:ce:56:38:21:f4:e6:91:fb:f5:f0:37:61:
5b:19:3c:30:1d:99:90:a8:25:2a:50:80:01:72:48:
ca:24:62:08:81:f8:23:77:8d:d4:19:83:3a:dc:36:
e5:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:0E:66:A3:F4:23:C9:3B:4B:3D:EE:D0:44:01:62:92:10:4D:6B:78
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/nQ5mo_QjyTtLPe7QRAFikhBNa3g.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
5b:f0:59:08:4c:70:5e:8d:f6:47:9b:8f:56:ee:f3:ec:8a:27:
bd:8f:19:9b:2b:39:e5:17:28:96:8b:a4:44:82:4f:94:cf:78:
a1:52:f9:0e:fa:36:ae:a2:af:33:d9:8f:8a:e3:20:4a:f2:7f:
ee:de:f7:42:81:b4:9b:fc:04:de:30:d5:75:45:e5:05:3a:79:
98:07:4e:36:cf:25:3d:a7:1d:39:b7:c7:d5:ea:06:36:ad:dd:
27:82:f1:40:ff:c6:86:33:c1:fb:0a:df:8b:0f:e2:47:8a:84:
9a:66:e8:8c:7e:29:f9:7d:38:df:87:48:1f:d1:1f:6c:29:45:
dc:c4:9b:d6:99:ad:79:24:f8:df:30:69:aa:9c:7e:38:90:1e:
9b:00:ba:fb:5a:31:30:13:56:6f:04:de:00:f1:c0:da:87:18:
be:20:60:ec:33:32:23:95:63:79:5b:0a:86:44:13:c0:87:1c:
8a:b8:f1:00:5a:f4:4f:ea:fc:cc:0c:24:5e:37:f3:84:e6:b2:
82:90:56:36:2e:e0:fb:72:12:7f:24:b4:c2:34:ee:c3:2e:41:
f8:b5:c1:68:2e:77:49:a1:1d:cb:71:db:69:6c:bb:89:d4:36:
74:07:b4:43:42:0a:02:a7:ee:a5:dc:98:8b:16:5a:d0:4f:f7:
ac:83:42:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 00:52:35 2025 by rpki-client