Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/na3ZelsgyZ7q-2pL_AYBYRNVaCU.roa
File: na3ZelsgyZ7q-2pL_AYBYRNVaCU.roa (raw, json)
Hash identifier: XF4CwvCS0rcuxusuuNMSplMUaCJ803/3f3wjzcH2848=
Subject key identifier: 9D:AD:D9:7A:5B:20:C9:9E:EA:FB:6A:4B:FC:06:01:61:13:55:68:25
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 068C
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/na3ZelsgyZ7q-2pL_AYBYRNVaCU.roa
Signing time: Thu 15 May 2025 19:38:01 +0000
ROA not before: Thu 15 May 2025 19:38:01 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1676 (0x68c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 15 19:38:01 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=9DADD97A5B20C99EEAFB6A4BFC06016113556825
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:1c:a8:00:12:47:67:5d:af:de:59:26:36:1a:
59:13:13:2f:a6:d5:f4:32:a5:28:1c:2f:5e:3b:b8:
c2:07:99:7d:21:7d:3a:1c:9c:eb:a7:94:99:95:53:
9e:32:30:ed:97:7c:18:4d:bf:e4:fe:75:fe:c7:b1:
ee:2b:b2:61:3c:87:1a:55:2f:17:47:31:38:97:3b:
68:f7:fa:c1:b3:e8:bb:d4:34:75:60:bd:fc:cb:32:
69:d2:76:70:e1:31:fa:86:8d:91:b5:03:2c:c6:9a:
d4:5a:5b:d9:be:b0:fd:e8:b7:51:60:d1:87:1f:81:
13:0b:07:ad:8a:a9:6e:c7:7a:a7:b9:df:6b:b9:6b:
7a:8d:e2:a8:b0:b4:7c:b8:b6:d2:2c:1e:5f:d1:f0:
a7:7d:6d:d1:6c:0e:dc:f5:e1:e0:83:c4:64:d3:99:
85:d6:65:6b:70:57:47:c2:57:1c:dc:0b:5a:bb:ca:
6c:8e:bb:d7:43:05:5f:e0:a6:f8:8c:4b:8a:37:e4:
36:f4:a1:a2:61:eb:22:5e:77:e1:45:99:2c:a4:2d:
87:62:3b:58:cb:14:6e:74:7f:06:76:98:1f:e1:e3:
1b:58:78:18:8d:0b:3e:29:35:8c:bb:c7:17:66:54:
dc:8b:4a:1d:f4:82:a3:c2:14:ca:b4:39:8a:4e:3f:
17:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:AD:D9:7A:5B:20:C9:9E:EA:FB:6A:4B:FC:06:01:61:13:55:68:25
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/na3ZelsgyZ7q-2pL_AYBYRNVaCU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
0b:36:90:21:b4:27:3a:5d:31:0a:ff:2d:2b:70:0c:f4:06:3e:
f8:bb:25:c7:89:e8:1d:68:c1:0d:6e:cd:60:0e:2e:f3:eb:df:
2d:99:b3:dc:98:bf:dc:a9:8c:39:ca:45:ad:45:9f:8f:9c:39:
b4:f8:43:df:52:27:ee:dc:c2:e5:71:76:a1:c9:80:52:f1:26:
85:28:19:39:95:a0:7d:ce:fc:0c:fb:67:ca:d1:bc:67:08:ed:
48:70:84:5b:b0:d3:54:80:9c:a2:a1:24:c7:c6:15:f8:54:14:
06:3f:a9:7d:7c:0f:ac:cb:b9:19:31:e6:fb:db:25:9d:79:89:
b8:e6:60:17:fc:bf:47:72:a2:b6:0b:e7:f2:6e:31:cd:23:86:
32:51:c7:c0:5f:6c:a5:7d:df:92:d9:c6:65:56:b7:d0:4a:fc:
d3:fb:9d:d0:69:ba:76:ec:0e:3e:27:47:98:c3:3b:12:7a:91:
52:93:4f:8d:a7:79:c3:35:6b:a2:24:4d:a0:26:28:ff:af:d9:
1d:38:4d:dc:1e:17:36:fd:6d:b5:f8:55:1b:fb:50:2e:9d:a5:
80:6a:90:07:d9:0b:6c:5f:86:74:bf:81:4a:7c:4d:c7:d0:7d:
45:a3:07:15:f3:6f:f3:cf:0e:47:4c:00:46:22:74:47:b6:08:
f7:60:ca:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 22:51:11 2025 by rpki-client