Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/Kd5feFZmI7esW3wrTbGUCponOYg.roa
File: Kd5feFZmI7esW3wrTbGUCponOYg.roa (raw, json)
Hash identifier: g47xWa+1Wb2uoV3fmie7czFmvpoSbqL8zFV0s7Lv2Gw=
Subject key identifier: 29:DE:5F:78:56:66:23:B7:AC:5B:7C:2B:4D:B1:94:0A:9A:27:39:88
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1510
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/Kd5feFZmI7esW3wrTbGUCponOYg.roa
Signing time: Wed 04 Jun 2025 04:09:17 +0000
ROA not before: Wed 04 Jun 2025 04:09:17 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5392 (0x1510)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 4 04:09:17 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=29DE5F78566623B7AC5B7C2B4DB1940A9A273988
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:77:a4:33:db:a8:16:f1:ca:ac:d6:b7:cd:2e:
8f:11:2a:8f:f7:b4:ed:7c:fd:4d:3e:9f:d2:79:ce:
b8:ba:52:e8:5b:b8:c9:8a:07:b7:6a:ff:c5:fa:a2:
6e:89:ad:6a:c6:b8:5a:e1:d0:39:ec:c7:be:99:b6:
a2:99:f1:d6:db:2d:a7:db:1b:3e:49:94:f0:66:7f:
de:eb:01:7b:dd:94:77:e6:b9:43:48:c1:21:93:a5:
a0:d8:e2:b7:28:36:c8:a3:21:df:64:9f:94:5a:a6:
35:1c:c0:da:40:0e:6f:a9:64:e2:5f:d0:e9:4b:18:
d2:42:42:71:73:17:2b:75:00:1c:63:ca:6e:81:dd:
47:3c:7e:33:b5:9c:ec:3a:84:ea:df:e4:8d:44:64:
0c:ae:f6:5a:0d:95:f3:e7:41:20:d8:c8:d6:4e:27:
5b:4f:fa:fb:76:b0:de:39:d6:6a:ce:1d:6d:2a:cb:
92:e0:52:bc:5f:13:48:5f:9e:86:87:56:44:d9:ba:
3c:43:14:3a:0e:ec:e1:58:a3:f4:74:ea:c4:31:e3:
2b:c0:43:2c:75:23:07:00:1d:e0:16:65:97:08:0f:
7a:f6:60:af:f6:f5:7e:c6:55:24:94:68:c2:09:3a:
24:52:d8:83:b3:47:30:de:38:16:2d:b0:4f:55:83:
8d:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:DE:5F:78:56:66:23:B7:AC:5B:7C:2B:4D:B1:94:0A:9A:27:39:88
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/Kd5feFZmI7esW3wrTbGUCponOYg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
75:92:59:2b:d4:8f:b4:eb:82:c3:93:f1:cb:e6:60:0d:3f:f2:
bb:db:cb:82:41:f4:05:fe:53:1b:56:ed:ba:0f:ff:de:25:a4:
9a:10:55:60:5a:32:ab:64:89:cd:bc:84:8f:98:6d:ac:c5:ef:
e2:1d:65:42:73:b9:f0:e4:e5:75:94:99:bc:f9:99:c1:ba:c4:
46:f6:7a:d9:6a:c0:d8:31:39:be:36:e7:7c:55:e1:29:b9:b0:
d8:f4:08:50:30:e0:9d:72:75:b6:90:63:b4:43:87:61:75:95:
cf:7b:8a:29:9b:15:c1:e5:ef:ed:74:f4:52:c9:32:f7:5e:88:
25:fe:22:b3:0f:ff:6e:25:c9:ad:cc:4f:91:ff:8d:03:34:84:
28:74:63:63:91:f3:35:66:4f:07:77:05:e2:39:53:de:2a:73:
42:4d:7e:b5:4e:55:20:e6:2d:a5:49:0e:9f:cc:31:ba:c5:a0:
16:0d:53:eb:d7:94:99:d3:c7:7b:c6:70:15:64:7e:a9:e2:4a:
99:fb:30:11:ad:f2:94:02:ac:96:75:e7:b6:fa:0e:bd:37:d7:
49:ca:ea:e9:9f:1b:cc:16:d4:41:5f:87:07:e6:5b:55:0c:7b:
16:5e:31:b3:91:b8:b2:4c:b8:8d:3d:58:1d:63:76:0a:2e:ad:
46:5f:90:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 22:59:58 2025 by rpki-client