Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/-VoMIGDuWdXaeaaAwX66dBktSBw.roa
File: -VoMIGDuWdXaeaaAwX66dBktSBw.roa (raw, json)
Hash identifier: aQFHyKtxT0If41zV7Jt4GDOa4jScqTAProQ1THsMZyY=
Subject key identifier: F9:5A:0C:20:60:EE:59:D5:DA:79:A6:80:C1:7E:BA:74:19:2D:48:1C
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 077C
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/-VoMIGDuWdXaeaaAwX66dBktSBw.roa
Signing time: Sat 17 May 2025 01:38:06 +0000
ROA not before: Sat 17 May 2025 01:38:06 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1916 (0x77c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 17 01:38:06 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=F95A0C2060EE59D5DA79A680C17EBA74192D481C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:c5:ce:e4:de:c3:80:86:2e:92:f9:db:38:f3:
bc:a3:fd:4d:45:24:84:10:4d:8f:81:a7:09:4a:ce:
37:38:c8:6d:77:04:22:e3:34:a7:82:e5:f9:52:5e:
97:b4:b9:30:30:88:98:10:d9:14:46:84:7e:59:18:
fe:47:31:d7:be:3f:65:93:9e:3d:9f:18:ac:7f:73:
e7:b2:90:d5:3f:ba:5a:95:60:50:3b:a8:7e:9e:54:
e2:7c:3a:9c:6c:02:40:d3:12:07:08:9d:5c:f9:82:
45:8d:8a:e2:a3:4a:58:92:44:af:f9:2a:74:98:f4:
4b:c7:60:74:cf:fe:1a:6f:17:6e:99:b2:ac:89:87:
ac:c0:38:bd:f7:44:18:ed:7b:d5:9b:2a:c4:1d:60:
9a:90:3c:43:13:88:72:64:17:2a:03:ba:b6:26:ee:
29:3a:96:eb:06:bc:42:5a:19:5f:38:75:20:be:03:
7c:cc:e5:96:e3:6c:cd:2a:a4:c0:44:d8:6d:bc:30:
0f:cf:ef:4e:8d:74:cb:55:ce:97:8d:9d:fb:4c:7e:
f9:53:82:09:ed:a7:73:be:8b:c5:e7:2d:cc:c7:1e:
9b:f3:19:68:db:9f:91:11:de:8a:83:04:47:dd:0a:
a1:60:f2:69:73:59:94:78:ac:7c:66:2b:72:2d:f0:
a9:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:5A:0C:20:60:EE:59:D5:DA:79:A6:80:C1:7E:BA:74:19:2D:48:1C
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/-VoMIGDuWdXaeaaAwX66dBktSBw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
62:69:72:5f:12:5c:78:ee:70:a2:ac:6b:a8:cd:e3:c9:48:e4:
37:8e:55:c9:86:75:a7:8a:71:83:cc:49:ef:f7:01:99:bb:45:
da:bb:81:5b:93:39:df:e5:60:e4:d9:82:77:88:fe:59:0a:cb:
37:2d:29:08:5f:02:99:1f:16:69:b2:b8:17:60:dc:b4:4e:cc:
0e:26:6b:cb:3d:a5:74:0e:11:90:d0:e4:fa:7a:53:a9:5c:6e:
2f:fc:a4:52:5b:06:a7:7b:86:e4:9e:6d:cd:8c:64:f3:17:77:
87:38:10:17:4f:36:86:c7:3e:df:78:04:c8:bf:7e:7f:d8:72:
42:3e:b7:6a:8f:9d:ea:34:3d:dc:98:32:73:d9:f3:ba:56:c7:
0c:d9:a5:7d:3d:d5:fc:ff:d9:ab:ec:2e:d9:19:28:c6:80:bd:
1e:80:0b:a4:e0:26:75:5a:45:c2:52:c8:e0:7b:2a:ca:b3:45:
d0:d2:0d:06:ef:56:76:6d:9e:bf:2a:53:35:72:ef:70:48:e3:
4f:a0:63:db:55:be:bf:1b:b3:39:ab:71:d2:ba:19:a6:a1:8a:
37:25:14:fb:44:6b:e9:25:62:92:ce:d9:d2:e8:12:6c:c2:fc:
6c:fe:89:cf:e2:0b:f5:9f:6a:de:01:70:2b:84:ac:9e:ae:25:
6b:c3:ad:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 13:29:36 2025 by rpki-client