Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/DrtCJ5MfwYfA9LSfspfYgSQyl-o.roa
File: DrtCJ5MfwYfA9LSfspfYgSQyl-o.roa (raw, json)
Hash identifier: sRopNpZI2sfQjkBncKUe5FvcQdoOq52wcfK1lKy3THs=
Subject key identifier: 0E:BB:42:27:93:1F:C1:87:C0:F4:B4:9F:B2:97:D8:81:24:32:97:EA
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 04E4
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/DrtCJ5MfwYfA9LSfspfYgSQyl-o.roa
Signing time: Tue 13 May 2025 14:37:58 +0000
ROA not before: Tue 13 May 2025 14:37:58 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1252 (0x4e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 13 14:37:58 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=0EBB4227931FC187C0F4B49FB297D881243297EA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:cf:22:ed:c8:06:bc:43:45:88:61:66:3c:27:
3d:b0:41:7d:7f:4c:29:d7:87:0a:bc:c6:91:ae:bb:
a9:bc:22:59:e2:dc:e4:1d:ff:57:50:36:db:e7:a1:
0d:88:c8:b5:ab:21:8b:6c:67:72:86:78:3c:e8:cf:
7e:44:03:ef:83:a5:46:10:6c:10:68:5e:11:bb:ac:
15:62:99:ca:8c:7e:d5:da:de:ef:2b:60:37:fb:11:
0d:9e:2f:37:c3:e2:df:35:6d:f0:84:05:95:f3:d2:
cf:0d:3e:53:7d:38:ac:b9:aa:d9:4c:dc:33:e9:1f:
f2:06:eb:cb:a3:76:19:26:d7:82:88:3f:25:87:e1:
a0:dc:bc:9f:19:e3:33:19:32:c3:5b:22:11:75:7e:
5a:bc:08:7d:eb:82:87:05:e5:b3:79:48:b5:ae:54:
d6:0f:38:1c:4d:78:1e:a1:f2:e3:6b:75:a2:25:82:
1f:7e:2a:44:d0:a7:e6:30:65:df:24:e5:57:fd:bc:
0c:aa:8b:53:b9:4b:8d:4f:9b:cd:71:ef:ff:3c:85:
5f:3a:a6:f0:76:07:5b:fc:27:76:71:38:96:91:9c:
05:61:50:8b:ba:e8:46:ea:3a:6a:3a:57:89:b6:1e:
db:be:58:bd:b2:d3:70:08:e1:87:3d:c1:ef:89:1f:
16:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:BB:42:27:93:1F:C1:87:C0:F4:B4:9F:B2:97:D8:81:24:32:97:EA
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/DrtCJ5MfwYfA9LSfspfYgSQyl-o.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
48:8f:15:0c:33:c2:56:96:62:a4:a6:ac:ce:80:7e:63:72:19:
d6:35:41:6c:ac:47:6d:ac:d6:03:77:55:44:45:06:55:48:5b:
ef:e0:8d:92:1e:1a:b5:a7:09:c4:93:60:62:b5:5e:4b:44:57:
86:13:85:9a:14:a1:f1:00:38:05:9b:8b:db:18:fe:03:87:f7:
17:db:15:4a:66:ca:5a:e9:1c:e5:1a:83:cf:db:78:d3:22:60:
ba:3d:75:06:d2:b5:09:ec:66:92:9e:b3:d2:bf:2e:ef:76:75:
2e:60:ad:ce:4b:d1:7f:ba:15:a8:af:4d:07:34:f2:84:96:62:
5a:21:3b:0e:5b:63:93:a1:da:9c:16:bd:76:a2:40:5d:96:98:
a7:91:dd:03:04:d6:ee:2c:47:cf:0c:5b:1c:63:49:0a:eb:93:
22:1a:3e:24:ec:e4:25:03:05:71:6b:82:cf:11:1d:36:78:31:
00:b3:6a:fc:19:44:ce:e3:42:2d:fc:e9:ba:db:1c:25:33:3b:
b4:9b:2f:55:df:3f:90:1d:b5:62:de:ba:96:fd:7c:b8:82:45:
4f:5e:c4:1e:3a:03:36:a1:cd:44:3c:85:03:51:50:31:68:5b:
d8:d1:57:f0:64:d5:a1:93:c0:bc:ea:91:ba:b1:9a:32:12:e8:
34:18:99:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 06:35:22 2025 by rpki-client