Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/0Vsa8IHYeewDcRSRokhWrjIMG90.roa
File: 0Vsa8IHYeewDcRSRokhWrjIMG90.roa (raw, json)
Hash identifier: L0bImyLDb7OxQVx5Jb6oF5WIyncx9GyPxpWeCW2CUIU=
Subject key identifier: D1:5B:1A:F0:81:D8:79:EC:03:71:14:91:A2:48:56:AE:32:0C:1B:DD
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0B14
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/0Vsa8IHYeewDcRSRokhWrjIMG90.roa
Signing time: Wed 21 May 2025 20:38:20 +0000
ROA not before: Wed 21 May 2025 20:38:20 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2836 (0xb14)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 21 20:38:20 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=D15B1AF081D879EC03711491A24856AE320C1BDD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:72:17:67:c1:15:ff:42:cb:c7:22:31:09:34:
4e:1b:2f:ff:b8:82:a3:8d:68:a3:41:9c:de:0e:99:
45:fe:d0:ef:fd:f3:7f:2b:26:af:9e:3d:ba:68:94:
0d:80:06:f5:f9:fa:b3:03:dc:60:d5:d4:ef:df:70:
1d:7b:d8:9e:fd:31:a1:cc:70:e5:9d:3b:16:3c:a2:
ce:b1:ab:a9:ff:0a:07:6f:66:69:c5:61:bb:7f:67:
b0:28:d4:cd:f5:4f:2e:db:8f:b6:af:d7:75:0e:66:
e5:1c:fc:11:27:e6:9f:ae:fc:da:60:dc:f6:1f:40:
86:6d:5d:5a:01:75:f4:bd:4a:92:f0:aa:0d:76:5a:
fa:b0:69:a1:a8:c9:e5:ec:65:46:f7:86:e9:9c:92:
89:0e:11:97:c3:83:91:be:5f:c2:de:b6:be:1e:ef:
19:91:2b:99:cd:33:8d:f3:64:17:94:34:0e:89:e6:
41:5d:aa:1b:6e:3f:0c:c9:a7:40:9a:05:26:5f:c1:
8d:3a:f8:cc:6f:55:a7:1e:fa:74:c1:3a:5e:bc:1d:
6a:12:5d:33:09:60:17:bd:73:fd:25:39:37:9c:69:
f7:49:98:88:68:f1:1a:ad:67:75:11:70:16:09:2d:
8a:a2:2a:a8:95:ff:ba:56:bb:86:44:69:b8:0a:88:
54:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:5B:1A:F0:81:D8:79:EC:03:71:14:91:A2:48:56:AE:32:0C:1B:DD
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/0Vsa8IHYeewDcRSRokhWrjIMG90.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
59:37:d9:01:76:a2:59:4a:9f:c0:9e:3e:bd:a2:ec:da:c5:3a:
80:fd:2e:e6:82:f3:50:29:d6:c8:a7:70:60:ae:99:a3:7f:a6:
16:eb:bb:7a:72:68:c7:6e:f9:3b:83:9f:e3:23:e2:10:68:46:
a6:64:2b:78:98:b0:17:13:a4:4c:16:01:ae:ed:29:8e:43:c7:
84:4f:46:3e:c4:71:92:a9:fa:fb:5e:8f:11:a1:35:aa:f0:97:
85:91:ac:50:2a:71:93:a1:11:9c:3e:f5:1e:78:34:02:ef:bd:
fc:1f:ce:fc:b6:e4:47:36:25:01:c0:ae:dd:f3:67:76:6c:76:
25:b5:7f:05:78:f0:ff:c3:76:37:32:14:4c:dc:2f:c1:55:7b:
21:b4:e9:a4:59:5b:b1:81:eb:3e:c8:24:bc:41:16:82:b0:3e:
50:30:1a:5f:09:9d:40:ee:a6:01:6b:ea:5c:d6:5b:25:18:2c:
e1:b5:9c:fa:d0:b6:4a:7e:9f:0b:c3:15:cc:b6:f1:84:2f:9a:
91:0b:08:84:e6:ef:50:01:54:58:c2:ac:5b:1d:b5:7e:01:46:
f0:df:fb:34:3c:b7:25:ed:1c:8f:a1:f6:76:fb:08:68:fd:33:
31:86:e7:c4:4e:9a:81:e8:72:c1:c3:e6:64:e1:38:c7:93:31:
d8:b7:d7:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 12:21:23 2025 by rpki-client