Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/SEdveOSuLWu42z-Ow1f5r77NI88.roa
File: SEdveOSuLWu42z-Ow1f5r77NI88.roa (raw, json)
Hash identifier: oHDHyxByrVjLlTey1YEiN/invl7ZWEKd3PjisvFqSBE=
Subject key identifier: 48:47:6F:78:E4:AE:2D:6B:B8:DB:3F:8E:C3:57:F9:AF:BE:CD:23:CF
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 09E8
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/SEdveOSuLWu42z-Ow1f5r77NI88.roa
Signing time: Tue 20 May 2025 07:08:13 +0000
ROA not before: Tue 20 May 2025 07:08:13 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2536 (0x9e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 20 07:08:13 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=48476F78E4AE2D6BB8DB3F8EC357F9AFBECD23CF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:7a:7d:05:db:18:90:a4:bb:6f:0e:27:d4:17:
3a:9a:09:7c:87:ce:f0:b6:d7:68:d0:d2:97:27:0c:
76:ea:30:cc:d5:f6:49:de:74:85:b4:05:cf:74:66:
70:3b:ad:b6:aa:fb:27:33:28:cd:69:3a:87:64:89:
fd:06:e7:08:be:92:2f:7f:f3:4c:55:d4:db:e8:1a:
32:ce:d7:71:c7:c6:c0:01:9c:a7:d9:8c:f1:90:5b:
7c:a1:10:2a:c6:f4:88:bc:2a:90:e2:15:23:c7:03:
90:7c:95:e0:ff:98:94:f1:56:70:f9:8c:0c:dd:83:
01:44:a6:9c:2d:4a:53:74:cf:23:5a:64:40:a8:90:
75:ac:4c:91:f8:99:e9:ea:84:fd:bf:a2:fc:af:b0:
5f:90:74:03:9d:8e:8d:6a:f2:34:2d:0f:f1:01:70:
2e:27:f9:78:0c:20:5e:2d:d5:ba:7e:d3:b7:a2:7e:
fd:98:f5:87:dc:31:ac:9e:58:f0:d1:78:5f:d5:15:
2a:c5:40:0c:2d:b7:5b:cb:72:fb:9a:c2:06:49:8a:
48:a1:bb:82:cf:52:a3:cd:71:1e:6c:00:54:78:ae:
32:46:9d:45:bf:72:c9:da:f9:ec:aa:36:d2:92:a0:
0b:0c:94:be:9b:67:07:2e:c4:04:f6:d2:ea:d8:34:
30:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:47:6F:78:E4:AE:2D:6B:B8:DB:3F:8E:C3:57:F9:AF:BE:CD:23:CF
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/SEdveOSuLWu42z-Ow1f5r77NI88.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
a7:21:49:5c:0c:e0:d0:69:a7:58:c7:84:58:9c:b9:f5:e0:6b:
ae:81:a6:98:27:a7:2b:eb:1f:27:7d:fd:58:51:07:4d:66:18:
e6:eb:b5:16:bf:2b:ad:ea:19:17:06:31:26:1e:d9:1d:10:38:
c8:7c:45:b2:b9:85:f5:45:7f:d2:c1:ac:d9:e2:40:a7:5c:29:
9d:e3:74:25:11:3f:4d:d3:26:e8:4f:d5:94:a5:1b:45:97:79:
14:20:c5:de:c6:6c:cd:2c:bc:38:bd:f9:4f:bd:23:2b:e5:d4:
7d:ce:e8:ca:23:a9:85:aa:a5:b5:2d:68:3c:23:8c:c3:4c:98:
d5:25:16:3e:4b:e0:6c:17:97:95:c1:ea:c3:ff:8d:25:db:22:
69:43:82:50:6d:fb:ba:d9:77:65:8d:78:32:b7:3e:d7:2c:68:
79:48:94:00:68:a3:1f:97:87:31:23:59:20:ce:6e:f1:25:51:
50:1e:28:27:01:9f:79:85:6b:66:ee:54:33:ad:2f:ed:0f:a2:
33:97:1f:8e:b9:4a:94:e8:c0:7e:71:75:06:ce:69:3b:ab:89:
30:bc:e8:96:ac:2e:98:b9:06:19:63:08:98:78:a1:fb:4d:36:
7f:8e:c3:4a:7d:14:09:5d:1d:0e:f7:8c:f7:99:d6:b8:d1:f5:
fb:29:85:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 13:44:09 2025 by rpki-client