Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/HgnzNKoVUK0N4DNrm6B2ub05x9A.roa
File: HgnzNKoVUK0N4DNrm6B2ub05x9A.roa (raw, json)
Hash identifier: ZXjkpyhcKAL/b5nJJxWz2M28pKV+DbD6mkxf+955YFQ=
Subject key identifier: 1E:09:F3:34:AA:15:50:AD:0D:E0:33:6B:9B:A0:76:B9:BD:39:C7:D0
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0CDC
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/HgnzNKoVUK0N4DNrm6B2ub05x9A.roa
Signing time: Sat 24 May 2025 05:38:30 +0000
ROA not before: Sat 24 May 2025 05:38:30 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3292 (0xcdc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 24 05:38:30 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=1E09F334AA1550AD0DE0336B9BA076B9BD39C7D0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:fd:fe:ee:22:7f:7c:e8:9b:9e:3b:81:6c:19:
42:be:7f:4e:04:d5:62:42:19:6e:ae:da:bc:53:4c:
31:82:4f:59:9f:1f:68:bf:83:a2:fc:f1:85:36:6f:
08:58:e0:b9:d6:f2:f9:75:22:28:ad:4a:5b:a2:51:
a8:3a:b9:69:dd:fe:27:a8:d6:3a:9b:65:ce:75:28:
4c:70:4e:5a:b2:2d:db:69:73:f0:f4:8c:fd:3b:db:
04:05:4c:c1:06:70:f3:f5:5c:9f:1a:72:98:c7:fa:
a4:b8:cc:f2:de:e3:c2:b8:9b:63:90:8f:94:9d:dc:
d6:9f:b2:6a:cd:aa:3d:c7:93:cb:ab:56:fe:9f:3e:
e7:19:1d:bc:28:c2:ef:ea:94:c4:4d:f1:f3:dd:b0:
a4:f2:00:00:d6:09:02:1a:c5:ae:73:03:8a:4e:62:
40:7d:9f:c5:cb:7c:29:7a:de:93:06:e6:ad:eb:19:
b8:68:b7:77:b0:66:8c:7c:4d:fa:9f:9a:83:2c:1f:
56:43:41:30:45:49:7b:01:44:e5:23:2c:09:b8:0e:
0a:e5:39:47:1c:a0:9b:24:bf:a9:2d:a1:7f:02:03:
e1:50:9c:e7:38:3d:e7:16:75:21:00:09:48:02:3d:
31:a4:d4:ba:92:68:bb:7f:52:0e:00:1d:b4:4b:c9:
58:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:09:F3:34:AA:15:50:AD:0D:E0:33:6B:9B:A0:76:B9:BD:39:C7:D0
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/HgnzNKoVUK0N4DNrm6B2ub05x9A.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
3d:e9:26:39:54:dd:86:5e:2c:89:7d:e3:31:a5:b7:da:4e:48:
03:83:a4:35:ac:ed:cb:83:dd:bf:37:68:2e:71:b4:e6:85:1b:
bf:20:5d:e6:8d:19:6b:5f:91:e0:1a:2e:06:56:45:77:a2:0a:
0a:9b:56:ab:76:6a:7d:93:c6:21:14:98:b1:4e:ec:7f:e0:62:
dd:c6:ef:74:39:f2:37:92:8c:03:7f:3c:69:da:d5:b1:5a:10:
be:ff:67:74:79:3f:b8:cc:b4:3f:34:2d:58:2c:e3:0f:1b:5c:
da:31:c2:3c:10:0a:e2:64:78:53:bf:1b:9e:04:0f:73:55:41:
db:19:8c:80:08:cb:e1:95:a1:3f:56:4f:7a:a6:2c:a2:45:57:
ba:0a:e5:fd:b3:c5:c5:3b:34:2e:6e:db:4e:53:17:d7:36:e2:
83:56:12:34:c4:3e:8b:74:8a:1d:16:2e:e7:e3:b6:12:22:85:
71:de:28:9c:09:b7:38:d5:7a:fe:7c:2d:e8:dd:b9:74:58:48:
22:cc:46:aa:a5:f4:7d:64:5c:8b:ed:4e:83:fb:99:6e:6e:70:
f6:de:99:be:45:15:7e:0c:20:df:53:21:23:ef:db:5c:b0:5b:
f3:2e:7e:b4:c0:d7:f5:cf:3a:7f:ae:24:e2:bb:73:d8:c7:8f:
29:fd:27:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 21:15:38 2025 by rpki-client