Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/9SymgyJdZQxU1KvcjIKNLXdmhNo.roa
File: 9SymgyJdZQxU1KvcjIKNLXdmhNo.roa (raw, json)
Hash identifier: STd+C5NzuUzMSrzZwqTmWGqrv5vz7hRGYa6GPbbm5+s=
Subject key identifier: F5:2C:A6:83:22:5D:65:0C:54:D4:AB:DC:8C:82:8D:2D:77:66:84:DA
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 01D0
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/9SymgyJdZQxU1KvcjIKNLXdmhNo.roa
Signing time: Fri 09 May 2025 12:07:48 +0000
ROA not before: Fri 09 May 2025 12:07:48 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 464 (0x1d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 9 12:07:48 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=F52CA683225D650C54D4ABDC8C828D2D776684DA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e1:91:bb:57:76:41:7c:65:96:3e:60:f8:4a:
d2:4b:71:be:1e:ca:90:7d:d6:6c:76:1c:94:a7:7a:
fe:33:6d:24:2e:76:98:b7:bd:79:79:5a:3e:cc:16:
34:3f:5b:87:7c:2f:95:16:43:3b:37:1f:2b:21:79:
32:cf:a5:35:22:8b:47:79:c3:49:1e:6d:8a:03:7a:
9f:dc:d2:48:8f:38:b2:c7:c0:53:45:23:35:35:2e:
ad:be:bf:27:36:d2:18:e3:5b:4b:2c:a7:1d:01:85:
24:c5:df:27:2b:a7:7e:30:98:5a:9c:61:69:a6:da:
28:2c:2f:f4:9c:5a:03:e9:04:19:74:fc:ac:1c:99:
f6:d4:2a:a5:a4:db:19:98:cc:3d:19:43:a5:4a:ab:
ef:83:75:7f:9b:88:38:e0:db:c8:31:f8:dd:03:84:
c6:4f:f6:7c:63:ec:f9:ce:fa:40:49:54:24:a3:bf:
a7:ae:60:6b:40:a3:c9:88:10:49:ce:0d:96:e2:25:
cf:da:57:56:5a:f2:17:8e:af:62:2a:cd:15:b8:6d:
ad:c8:01:98:40:da:92:c6:c4:7f:6b:59:42:a5:6c:
50:da:c1:af:0a:9b:37:f3:95:ca:51:0a:0d:c7:c1:
b8:1d:c9:b7:8f:53:f7:c6:6b:45:a4:e4:c9:0f:4a:
73:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:2C:A6:83:22:5D:65:0C:54:D4:AB:DC:8C:82:8D:2D:77:66:84:DA
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/9SymgyJdZQxU1KvcjIKNLXdmhNo.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
1f:2f:06:83:72:25:51:94:80:ee:d6:ec:0c:e9:f1:54:48:c7:
d0:f6:f9:79:5a:ba:ea:83:f2:cd:81:a9:45:94:65:0f:15:ff:
95:3f:66:d3:e9:7b:f4:92:32:ba:69:de:db:11:c6:74:b5:de:
8e:d4:cb:47:c9:c4:32:0b:2d:eb:d8:8e:42:59:d0:74:31:0c:
97:11:c2:85:55:17:27:27:94:40:fc:17:30:51:82:56:c2:9c:
7c:31:20:55:d1:fb:17:0b:4c:8e:15:7e:58:4b:32:10:bd:90:
70:05:bd:76:3a:9d:01:31:6a:b7:35:29:dd:ba:95:25:2c:fa:
36:cc:bf:3b:de:30:5a:38:46:37:06:c8:dc:70:08:94:ec:0e:
89:19:52:12:b0:ad:c3:9d:11:ca:db:36:96:3b:42:a9:c7:f9:
fa:1c:76:e8:c5:cc:28:56:b1:78:30:e1:55:09:9b:da:d1:db:
68:f7:6f:01:10:8c:04:62:b6:46:0f:79:77:66:eb:3c:4d:1f:
9a:e3:bb:a0:66:98:f8:81:7b:b7:eb:19:99:be:c1:1b:94:b5:
e4:8b:a6:0e:8a:2e:25:c5:c3:02:29:69:9d:87:a1:72:15:46:
ce:4f:9b:20:ac:8e:0b:e6:92:f0:b2:3a:41:f3:69:e8:7b:15:
3a:f4:6b:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 07:11:55 2025 by rpki-client