Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/I5dO8fH51heR0kbiBB6t9v82fhk.roa
File: I5dO8fH51heR0kbiBB6t9v82fhk.roa (raw, json)
Hash identifier: iZY4Chq8C0k69dv0mxUj7VrZ6qxl6SztSAaZVveNjO0=
Subject key identifier: 23:97:4E:F1:F1:F9:D6:17:91:D2:46:E2:04:1E:AD:F6:FF:36:7E:19
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0C20
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/I5dO8fH51heR0kbiBB6t9v82fhk.roa
Signing time: Fri 23 May 2025 06:08:44 +0000
ROA not before: Fri 23 May 2025 06:08:44 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3104 (0xc20)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 23 06:08:44 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=23974EF1F1F9D61791D246E2041EADF6FF367E19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:bc:58:79:ed:bf:14:e1:49:57:aa:78:b4:cb:
73:7e:22:96:11:bf:9f:59:2d:e7:64:43:0c:c3:76:
0b:99:d8:8c:e7:db:a0:f0:7f:c9:28:eb:b4:a6:32:
a0:b1:86:7b:29:98:1c:bd:5e:41:a8:e0:7b:39:76:
3d:76:e2:90:7c:a2:a2:23:2e:f4:d2:d0:22:7d:21:
78:aa:44:3d:88:bf:eb:a1:73:1c:31:1c:e6:af:ff:
ba:8b:72:b7:48:2d:15:5a:85:16:1e:9e:77:67:b0:
ff:79:a7:63:cd:84:da:6b:75:bf:4d:d3:95:7f:4f:
40:24:e2:28:02:65:0a:c4:c0:16:02:ba:aa:cc:89:
99:55:e5:27:15:5a:0e:87:b4:5c:47:b3:c6:ab:5c:
73:d6:72:0e:5b:6f:36:eb:c4:e6:0b:a3:f5:73:9b:
6f:3a:82:75:e4:40:1b:fd:66:d1:3f:38:9f:75:2c:
6a:8b:24:36:a5:94:e4:db:37:b4:44:ff:7e:17:a0:
db:eb:8c:43:e0:2a:d8:55:0e:c8:8a:7c:c1:33:57:
e8:74:4d:0c:69:70:3e:19:55:ea:32:1e:f8:0a:91:
e3:32:bd:e2:73:8b:7a:ca:af:54:30:48:2d:69:96:
30:4c:2a:1a:41:e8:ed:d6:a2:dc:fc:fa:cb:a9:17:
a6:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:97:4E:F1:F1:F9:D6:17:91:D2:46:E2:04:1E:AD:F6:FF:36:7E:19
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/I5dO8fH51heR0kbiBB6t9v82fhk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
94:fc:a2:04:68:b8:bd:75:70:a7:43:45:4f:4d:7d:89:be:3f:
8f:78:10:1c:5f:2e:e3:7d:a1:61:50:db:ca:33:e1:29:92:fe:
10:dc:5f:38:85:c8:63:d1:85:13:0a:31:43:5a:23:5c:d7:6e:
0b:d0:06:9c:07:83:9f:ee:76:fe:ac:18:98:b8:85:a6:48:f2:
7d:83:fe:7e:a8:ab:df:f2:c6:a4:21:3c:0a:94:6f:09:dd:04:
3c:fe:d3:e9:d5:f4:e3:5b:c5:84:e9:5d:36:58:92:68:06:a7:
39:17:84:8b:69:4e:29:48:af:78:94:d5:7e:67:81:3c:03:cc:
0e:31:f5:a8:a1:66:38:d0:b1:c5:ba:9d:ff:57:cb:1c:32:a2:
b2:e6:49:17:85:8e:b3:41:13:4a:2c:f6:76:a9:69:6e:71:1c:
a8:d8:ed:6b:62:a4:35:0e:b3:77:a6:ad:14:a2:fe:41:83:a7:
38:a4:7c:df:be:ed:44:b8:f7:9d:a8:5e:e4:72:81:1b:ec:3f:
c9:7e:b2:b3:59:7b:73:6d:1a:7f:d1:96:9e:b6:bd:7e:de:04:
0d:d3:1e:a4:15:bc:10:ae:bd:40:c1:95:18:15:e5:bc:ef:80:
bc:b0:79:5a:f1:b7:dd:a9:61:a0:ab:cc:0b:c9:47:4c:6d:20:
9d:41:e6:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 03:30:48 2025 by rpki-client