Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/5xQM9WjnOm_WcL88yAQhXUO9AjE.roa
File: 5xQM9WjnOm_WcL88yAQhXUO9AjE.roa (raw, json)
Hash identifier: flPeG5S+bx3GxG2wOHjRLBgjGMLZNNIzumV59JUtCoc=
Subject key identifier: E7:14:0C:F5:68:E7:3A:6F:D6:70:BF:3C:C8:04:21:5D:43:BD:02:31
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0E58
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/5xQM9WjnOm_WcL88yAQhXUO9AjE.roa
Signing time: Mon 26 May 2025 05:08:37 +0000
ROA not before: Mon 26 May 2025 05:08:37 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3672 (0xe58)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 26 05:08:37 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=E7140CF568E73A6FD670BF3CC804215D43BD0231
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:ff:75:f2:0c:13:40:29:a8:d8:8a:61:25:b0:
a5:20:36:26:6a:f0:5c:97:35:ce:6f:a5:a7:22:54:
83:bf:df:c5:ac:58:f6:44:ff:a7:2c:01:2d:46:c7:
7e:37:12:35:fe:f0:46:99:3f:87:b3:6a:91:7d:00:
f7:7e:e6:27:8f:6f:69:f9:52:0c:f3:9c:fb:4f:ca:
9b:1e:ae:fa:0e:bc:a7:c2:74:ac:15:98:b3:bd:84:
69:03:ba:91:9c:45:b0:02:0a:65:f1:1f:0b:f3:c8:
fa:6b:0e:5d:89:62:1e:63:a3:a9:24:6d:74:cf:f5:
f5:76:cf:d0:8c:a5:6f:4f:c9:da:03:ae:44:74:b7:
2b:86:81:e5:d9:8d:33:cc:09:b2:b7:22:6c:0c:f8:
24:f3:f3:a6:90:e6:ba:54:1e:45:39:f2:28:83:d9:
75:80:ad:60:f0:bd:9a:9b:2a:8e:77:0c:0d:bc:02:
93:a6:ff:67:7f:cb:4e:5a:08:b5:12:63:29:52:5d:
ce:ea:20:e1:0c:d6:ba:1a:ec:4a:95:41:28:a5:5f:
77:17:f4:c1:5b:19:f0:5a:06:e7:3a:15:eb:31:ef:
fe:00:56:ae:4a:92:01:a8:a8:3a:a6:57:82:8c:23:
ff:bb:5d:96:5d:d7:2e:19:38:9b:33:69:46:e1:ae:
52:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:14:0C:F5:68:E7:3A:6F:D6:70:BF:3C:C8:04:21:5D:43:BD:02:31
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/5xQM9WjnOm_WcL88yAQhXUO9AjE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
92:e6:1b:bd:7c:70:08:d5:ab:92:1e:fd:18:23:9e:40:22:99:
f9:48:29:20:9f:01:60:71:a4:37:f4:c0:e9:25:52:ee:53:34:
ea:54:eb:d5:12:66:28:6e:bb:be:b0:78:6a:7f:3a:e1:5d:44:
fe:20:6f:af:eb:ab:29:29:7e:73:8a:15:05:7a:08:10:54:15:
2a:d8:35:0f:4b:3b:9f:31:ac:4d:26:2b:2d:42:af:c1:52:f3:
13:b5:83:f2:8d:63:43:fb:32:f3:9a:18:75:8a:a0:fd:82:f6:
2f:37:57:92:e3:81:79:0f:b4:07:e5:d0:b4:c3:32:00:76:3a:
e1:24:e8:65:ed:4b:aa:ad:a0:b2:2b:93:f7:68:3f:8b:9c:5b:
ad:0c:ca:1c:59:9d:92:51:80:55:45:90:d6:1b:f5:cb:f5:ef:
28:e7:b9:09:71:be:57:32:b5:a4:12:4f:5b:98:2b:ab:43:71:
8b:f7:bd:ed:91:17:00:24:c3:e5:4b:97:a0:fc:b6:71:14:30:
71:ff:97:88:0a:f1:94:34:e3:1c:f6:eb:a5:b9:95:00:d4:42:
12:75:05:9f:da:3d:d2:62:53:ab:e8:60:3a:5a:b9:a3:7b:b5:
c6:c5:66:9e:98:1a:22:ec:cf:1a:39:df:92:c8:2f:e4:03:40:
ca:6a:11:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 03:57:28 2025 by rpki-client