Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/Vz8lXIaPRfAr1OvXcur02CGdu10.roa
File: Vz8lXIaPRfAr1OvXcur02CGdu10.roa (raw, json)
Hash identifier: 8cpExnx30KDQLtsrRetryMB9Pf1YLriCBDvnMTp+34E=
Subject key identifier: 57:3F:25:5C:86:8F:45:F0:2B:D4:EB:D7:72:EA:F4:D8:21:9D:BB:5D
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1570
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/Vz8lXIaPRfAr1OvXcur02CGdu10.roa
Signing time: Wed 04 Jun 2025 16:09:18 +0000
ROA not before: Wed 04 Jun 2025 16:09:18 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5488 (0x1570)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 4 16:09:18 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=573F255C868F45F02BD4EBD772EAF4D8219DBB5D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:63:d7:ab:2b:80:91:3e:ad:fe:40:c1:87:bc:
33:8c:35:13:c9:6e:69:0e:fb:4c:94:09:8c:f0:24:
c4:46:26:84:ea:c4:ab:ce:fc:50:73:52:d9:15:05:
f9:5e:c5:31:9c:c6:60:8f:39:ca:f8:96:53:be:0f:
7e:d5:dc:4a:ef:36:6e:6e:08:9a:66:ef:18:86:b3:
b7:26:13:d7:62:27:ea:d6:55:92:b5:23:5d:d9:48:
2c:09:22:22:02:da:df:d7:0d:52:ff:a4:11:58:af:
e7:cb:d8:16:c9:6e:16:21:b3:cb:26:7c:6e:9d:57:
a0:14:c3:b6:4a:01:da:a4:66:f2:af:fd:0c:4f:86:
d0:32:d5:9c:01:26:c1:a7:84:c1:d1:1e:dd:6f:be:
7c:16:f0:08:a8:1a:2b:24:12:61:89:df:b2:c5:33:
6e:e5:c5:df:cc:b0:a2:20:17:d6:59:92:18:0d:31:
53:e4:c0:83:2b:ea:64:6c:b2:9d:97:d6:55:39:01:
21:2e:95:04:83:74:d3:c7:93:75:5d:62:f6:f5:65:
c7:d4:a8:59:a1:bb:f6:45:f3:bf:1b:36:4c:53:c0:
6f:c9:f1:71:a8:b4:d7:2f:8e:be:31:26:9c:2d:7f:
d4:9e:10:d6:9a:82:7d:38:39:00:5e:39:8d:cf:ca:
e6:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:3F:25:5C:86:8F:45:F0:2B:D4:EB:D7:72:EA:F4:D8:21:9D:BB:5D
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/Vz8lXIaPRfAr1OvXcur02CGdu10.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
6a:ed:e8:61:cf:a2:e0:27:2b:84:35:e7:39:64:3c:8a:78:2e:
af:74:f2:d0:d6:b1:31:d2:0b:55:2d:93:94:56:c2:6a:28:cc:
e7:93:66:41:09:d5:5c:1a:e6:88:ff:41:b9:57:b1:ca:e0:96:
8b:62:99:98:d0:49:ca:6a:c2:b1:18:ed:1d:e9:17:54:f5:a0:
3c:b0:3a:fb:2d:c2:45:38:95:41:80:85:85:60:25:2e:d1:2b:
5c:a1:32:01:55:e7:00:2a:3a:ef:8c:97:bd:15:3a:4a:10:3a:
fd:ef:14:03:c4:62:3e:e7:73:6b:b3:e1:df:21:7d:aa:4f:c9:
98:7c:e2:c8:cf:fb:d4:b4:52:4d:45:50:6e:9d:ca:f4:7a:9b:
e0:66:fc:78:82:46:09:40:04:d2:09:d9:0a:91:66:97:cc:be:
4c:ec:72:05:d9:b4:18:a7:11:ee:98:ec:66:2c:5e:57:3e:57:
c2:db:01:28:93:a4:f3:ff:4b:ae:a3:3f:65:c7:f6:88:72:85:
b3:63:09:ca:ab:32:4d:ee:a0:72:bc:ae:4b:13:47:0e:73:1b:
ef:68:59:7e:9f:5d:5c:1e:c9:3a:80:af:9c:0e:ac:6c:3b:bc:
78:f2:9f:a1:e6:81:02:6b:8f:a9:02:c3:cf:4d:77:82:05:9a:
cd:f8:3c:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 00:47:08 2025 by rpki-client