Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/KmhHrjrSIzSEc5-qxcYbQFo8XDI.roa
File: KmhHrjrSIzSEc5-qxcYbQFo8XDI.roa (raw, json)
Hash identifier: RbxIs0FGB2Zt+AhAuyvQZxD1zEF/mSg7ohZhq0zFKF0=
Subject key identifier: 2A:68:47:AE:3A:D2:23:34:84:73:9F:AA:C5:C6:1B:40:5A:3C:5C:32
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0894
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/KmhHrjrSIzSEc5-qxcYbQFo8XDI.roa
Signing time: Sun 18 May 2025 12:38:09 +0000
ROA not before: Sun 18 May 2025 12:38:09 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2196 (0x894)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 18 12:38:09 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=2A6847AE3AD2233484739FAAC5C61B405A3C5C32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:3c:31:95:18:7b:28:eb:67:e7:0c:a9:6f:ae:
e5:1f:40:de:90:76:8e:17:14:73:b6:62:af:93:eb:
c1:ca:0c:66:45:25:e1:c4:11:54:f5:dd:26:43:c5:
13:dc:28:c2:70:25:cd:6f:08:4d:56:a3:10:90:25:
5e:ce:2f:f9:ab:a8:94:08:34:6d:1c:e4:cd:33:8a:
dd:5b:0d:76:92:1c:b3:82:31:43:5e:2e:d8:5a:a8:
84:c7:b8:1a:e1:0b:d5:89:29:f5:22:92:22:80:9f:
b1:d8:d3:8d:68:1e:d9:fa:2f:25:1c:08:12:43:f1:
f2:18:51:c9:66:98:c5:2a:cc:d9:fb:ca:18:ce:68:
37:fb:f5:41:07:35:61:7e:6d:40:52:03:c5:69:9f:
78:9f:8e:c2:62:b8:4b:c2:d5:54:25:0b:ea:7a:30:
b8:1a:88:fb:e9:5b:88:89:30:1c:77:65:d3:c6:b2:
1b:5b:42:68:78:87:46:73:9e:1b:46:91:bc:51:1e:
74:d0:c0:4b:57:92:a4:b0:07:ea:ca:14:81:6f:a4:
c1:40:9f:4b:cb:59:c4:40:a7:fd:85:04:c7:60:1b:
21:de:e7:19:e9:15:03:b4:fc:9b:4f:c5:e4:4e:d8:
2d:02:0e:2b:f3:b2:89:ee:b4:bf:a2:5f:3c:67:f8:
a1:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:68:47:AE:3A:D2:23:34:84:73:9F:AA:C5:C6:1B:40:5A:3C:5C:32
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/KmhHrjrSIzSEc5-qxcYbQFo8XDI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
07:d3:f4:2c:e5:5f:8c:49:b7:94:19:60:e7:1e:37:30:0f:f6:
53:64:b6:f6:70:99:08:77:e8:a1:d2:9f:86:47:6a:c3:ea:0e:
1b:37:7c:58:10:eb:83:88:d0:57:54:cf:3e:bf:b1:00:48:5a:
09:68:56:17:b6:46:35:d1:e2:a7:8e:fc:71:3f:b7:97:41:bb:
41:d3:24:e8:3c:f5:fe:25:b6:db:1a:19:e4:9b:02:41:f5:b7:
c2:44:49:79:e5:3c:e0:57:c4:28:4b:11:f9:17:07:16:2d:34:
9d:e3:5f:fa:b6:56:57:8a:a7:04:4a:d4:05:cd:8e:6e:14:30:
b0:6f:34:fd:56:03:cc:56:30:77:48:85:3e:82:f3:ba:87:87:
4c:4d:9e:37:a6:74:f3:8c:fc:26:02:5f:d4:b3:59:33:d6:05:
47:67:06:da:44:92:57:8e:97:0f:79:f6:98:bf:64:d6:10:22:
af:7a:b1:d0:d4:67:0c:93:d2:51:98:3e:2b:b5:21:ef:c9:5b:
63:f1:a6:29:08:fc:11:44:11:ba:ce:d2:83:02:b6:e4:9f:95:
3d:0e:82:e3:be:5d:7c:b6:81:3d:05:b2:17:ed:ba:5b:56:ab:
65:08:da:3d:c8:bd:60:52:7d:4e:ba:3e:1b:9c:a9:8c:8d:a4:
12:7d:9a:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 13:42:59 2025 by rpki-client