Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/5wo7IZEMDC0pV7ldfDuh6EIAHeQ.roa
File: 5wo7IZEMDC0pV7ldfDuh6EIAHeQ.roa (raw, json)
Hash identifier: 1qpPkZ1eZOObRpWCa7KMk4LRvvr7zj1czC1QziICiY0=
Subject key identifier: E7:0A:3B:21:91:0C:0C:2D:29:57:B9:5D:7C:3B:A1:E8:42:00:1D:E4
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 01E4
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/5wo7IZEMDC0pV7ldfDuh6EIAHeQ.roa
Signing time: Fri 09 May 2025 14:37:46 +0000
ROA not before: Fri 09 May 2025 14:37:46 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 484 (0x1e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 9 14:37:46 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=E70A3B21910C0C2D2957B95D7C3BA1E842001DE4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:be:5f:ec:c1:1f:0e:cc:0a:8d:91:be:2c:dd:
48:61:c9:5c:ba:e7:b1:d9:2e:61:0f:60:59:6d:3a:
d2:40:ba:b9:69:cd:54:d0:04:c9:cb:01:9e:d6:38:
e4:03:c0:de:4c:2f:2a:c1:4f:b3:ed:78:38:99:26:
63:58:d0:de:24:bc:b9:6b:26:b7:ab:dc:81:4d:12:
23:79:56:be:6b:cd:99:83:59:93:50:3c:8a:74:25:
6f:fc:5e:57:d2:0f:a8:21:57:1c:93:a9:b2:4c:4e:
60:a9:22:56:5a:99:cd:da:42:44:80:55:61:04:c8:
1f:d9:ea:34:71:78:1f:f4:60:d2:d4:6a:28:89:4a:
b0:5e:88:f9:5a:55:89:fa:f0:62:f6:c2:0a:a0:31:
36:37:50:d4:03:61:a9:f1:af:5c:a4:ab:da:bf:0b:
5b:39:31:3f:c7:b8:32:53:2c:64:7e:9a:0f:18:93:
92:8c:28:75:27:0a:2e:af:81:f9:b2:aa:1b:96:26:
15:ed:b1:f0:d6:24:f3:bb:f6:fb:09:32:fe:64:b8:
b3:0a:dd:2e:df:e7:61:72:d6:a8:78:87:4b:e6:5f:
f5:a7:67:56:f5:78:fd:1e:96:74:57:05:d6:35:14:
a8:61:e4:b8:08:39:32:e5:94:1c:21:4d:67:ef:6d:
f8:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:0A:3B:21:91:0C:0C:2D:29:57:B9:5D:7C:3B:A1:E8:42:00:1D:E4
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/5wo7IZEMDC0pV7ldfDuh6EIAHeQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
3e:b4:70:c4:e7:04:ad:95:2a:d3:17:6b:80:97:0a:58:87:56:
15:a8:0b:df:69:f4:ec:f9:3a:5a:0b:58:a4:bf:3b:96:ec:d3:
22:fb:16:d1:ec:50:b5:b4:7c:64:b7:40:d9:43:93:4a:a6:96:
73:85:7e:08:69:b6:89:5e:e7:13:4e:ae:10:e9:0a:19:8b:dd:
fd:42:77:13:be:39:00:14:f2:fb:86:af:d6:61:f9:2e:07:94:
3a:15:a0:87:88:76:94:1c:3b:0f:74:13:ed:82:59:82:4d:df:
ce:6d:47:aa:33:a6:12:51:44:f6:78:9e:76:10:82:72:03:4f:
9b:66:6c:da:e3:96:52:59:0e:c2:b5:0e:fd:c6:d1:c3:9c:c4:
5e:33:85:81:65:02:92:c4:28:85:47:b0:85:b2:fe:1b:f6:94:
3c:5d:16:ab:17:87:56:7c:0e:54:dc:12:c9:d0:79:fd:82:6b:
4e:96:6b:d1:d9:7c:35:ba:57:5d:78:a6:c9:46:38:d0:06:3c:
db:0c:09:da:f1:54:e6:ea:e2:6e:43:88:3a:73:ef:c1:5a:93:
4d:b1:8b:31:b1:dd:03:34:ce:50:ec:c9:5d:e2:20:3c:38:bd:
3a:9e:ff:ca:10:07:a2:08:0c:a9:a6:f6:b7:75:f9:bb:6b:5f:
03:b5:cd:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 03:57:19 2025 by rpki-client