Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/zA3zndE-enXf2slLyevnlqs9ifQ.roa
File: zA3zndE-enXf2slLyevnlqs9ifQ.roa (raw, json)
Hash identifier: tJWK/2jfk8KUY6+KxJU2q3W8qHycOMm9ItmrBluuRfs=
Subject key identifier: CC:0D:F3:9D:D1:3E:7A:75:DF:DA:C9:4B:C9:EB:E7:96:AB:3D:89:F4
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0568
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/zA3zndE-enXf2slLyevnlqs9ifQ.roa
Signing time: Wed 14 May 2025 07:08:02 +0000
ROA not before: Wed 14 May 2025 07:08:02 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1384 (0x568)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 14 07:08:02 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=CC0DF39DD13E7A75DFDAC94BC9EBE796AB3D89F4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:f4:5a:bd:ce:fd:05:cd:23:c3:3e:94:19:68:
50:7a:ca:fd:8a:9d:88:54:2d:e6:d8:aa:f0:da:50:
6a:b9:5e:e1:4a:23:2b:95:d6:f1:f0:92:86:c3:a0:
c5:a8:ba:81:d1:62:a4:e6:fd:63:8e:a2:56:fa:46:
6e:6b:76:eb:a9:a6:70:19:ad:6d:38:d1:c2:7d:d6:
d0:e7:89:23:5d:5b:06:c3:f3:a8:3c:2d:64:d9:32:
48:b4:2c:61:44:28:09:81:41:9e:6c:e7:ae:35:2c:
bd:41:a7:90:75:79:9b:d0:5f:3b:f9:b5:8c:0d:3b:
c2:51:be:12:ac:31:cc:ba:82:8d:f9:2f:3a:81:f3:
66:fa:a9:bd:d8:3a:e7:60:ae:3b:5e:78:7c:5a:66:
b2:c4:75:63:c7:41:a4:d3:58:ca:05:7b:4f:c5:c3:
6d:ac:f4:0e:f5:9c:75:5f:f1:bf:12:a2:1b:5c:50:
48:f6:8b:f5:4a:cf:56:56:b5:da:e7:49:13:2a:5c:
82:c7:d9:7d:f3:2f:41:a2:48:0d:93:07:61:85:21:
f1:e9:e9:f7:b2:e3:7e:c1:bd:11:cb:c0:6d:9e:27:
c8:07:15:10:ed:b9:59:d7:6c:49:f9:7c:0c:fe:99:
2b:b5:07:0e:fe:a7:20:60:b5:2b:0f:93:cb:d1:bd:
47:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:0D:F3:9D:D1:3E:7A:75:DF:DA:C9:4B:C9:EB:E7:96:AB:3D:89:F4
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/zA3zndE-enXf2slLyevnlqs9ifQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
76:75:01:e0:a6:cf:cf:99:c5:f6:ba:e0:46:9b:e6:d2:42:c5:
9d:90:49:db:3d:3f:b0:53:69:f9:7e:21:a2:98:95:9d:f6:24:
10:7d:c9:10:6e:58:c7:46:23:33:e5:b6:80:47:3f:e6:4e:30:
a6:66:fd:4f:e5:9b:87:aa:8a:12:ef:e7:54:90:8d:df:b5:d1:
db:20:43:15:64:03:75:0d:52:5f:fd:85:01:55:2e:78:48:a4:
64:06:2d:44:0e:9a:0b:ea:86:32:bc:4d:b9:c1:91:5d:16:b5:
30:18:5e:b8:04:88:fa:e7:5d:d3:9f:16:b1:7c:f5:91:2d:5e:
78:a1:51:27:c1:8a:56:d5:7f:dd:33:97:49:4e:c4:1a:fe:a4:
2f:e2:c5:f4:fd:c6:e4:9f:db:00:76:b9:a4:8b:4b:2d:e3:29:
c9:2c:fa:d3:4d:f3:15:7e:31:70:7f:fd:5e:2d:76:f4:e9:8e:
c8:67:55:d2:22:ec:a9:e2:03:f9:88:d0:61:5a:1e:ad:8e:b3:
62:6f:3d:66:e5:ea:79:eb:6b:09:da:2b:07:02:2d:e0:7e:be:
99:72:05:d4:d3:18:2e:93:a3:16:78:7b:0f:7f:64:71:b0:aa:
e9:cc:df:e2:62:e1:0f:00:61:fe:f8:8e:ce:ea:bf:0e:ef:b0:
71:bf:9f:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 19:53:41 2025 by rpki-client