Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/fktl3_UlrULsdUO83PM4WiX3aeU.roa
File: fktl3_UlrULsdUO83PM4WiX3aeU.roa (raw, json)
Hash identifier: zDROCdP59ie+cWbaye0hDGFpGxk8smzF72ZFkKbRzuA=
Subject key identifier: 7E:4B:65:DF:F5:25:AD:42:EC:75:43:BC:DC:F3:38:5A:25:F7:69:E5
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0720
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/fktl3_UlrULsdUO83PM4WiX3aeU.roa
Signing time: Fri 16 May 2025 14:08:05 +0000
ROA not before: Fri 16 May 2025 14:08:05 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1824 (0x720)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 16 14:08:05 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=7E4B65DFF525AD42EC7543BCDCF3385A25F769E5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:6d:12:a8:77:45:92:b7:57:08:fa:74:a3:4f:
1f:df:2c:5c:73:f8:40:0a:4a:67:d9:9a:ce:a9:d3:
4e:79:93:11:01:d3:d3:93:fa:37:2d:a9:f4:24:2a:
9c:d7:b5:13:56:aa:71:cf:2f:18:b8:87:f1:5b:9d:
dc:44:df:26:2a:ae:60:fe:ca:ea:99:99:34:14:ca:
19:e8:74:94:5b:08:6a:de:60:64:87:ab:b1:48:5f:
d6:6c:1e:0c:25:21:ea:30:5a:f3:ca:fd:d0:34:c5:
80:7e:05:d9:36:7f:92:a6:45:2a:94:ab:2f:75:a7:
ec:63:2f:9f:8f:1c:72:db:33:3c:9c:db:eb:3a:42:
8e:b6:33:21:78:bd:a5:4c:c8:ac:c9:8a:3c:3f:4c:
e4:cc:0c:48:12:7b:95:ef:61:ac:eb:a3:dd:26:50:
36:9e:fe:62:9f:e1:2c:25:10:9f:21:53:91:a8:b7:
51:96:31:9a:72:4c:02:ff:cd:15:75:70:50:57:c5:
12:47:6b:af:9a:91:3e:af:89:ae:f6:e6:be:ac:f1:
58:a2:97:e3:17:66:c7:32:ef:a8:f0:25:dc:7e:b8:
2d:ea:2b:67:50:22:2b:5e:a9:fb:be:17:93:08:82:
60:72:37:ed:1f:07:ff:38:70:ac:4c:e6:e5:36:15:
95:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:4B:65:DF:F5:25:AD:42:EC:75:43:BC:DC:F3:38:5A:25:F7:69:E5
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/fktl3_UlrULsdUO83PM4WiX3aeU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
5b:79:29:90:69:6c:fc:a0:8f:92:8b:7f:da:85:3c:cb:a1:a0:
07:3c:71:68:b5:7b:52:ff:ba:be:84:8d:a9:59:8e:dd:2c:1d:
68:54:79:51:03:7c:61:f8:70:51:b1:d4:6f:1a:06:89:a6:5b:
36:ff:49:cb:54:49:11:ac:c2:18:e2:b9:fa:32:f1:b9:5b:c0:
aa:91:77:15:af:34:cc:99:79:9a:d0:e9:1c:a7:76:01:37:b4:
30:8e:76:23:60:b9:8c:73:85:02:a3:41:57:20:cd:a0:90:5d:
86:18:80:3c:98:cd:c9:6f:6e:ee:34:3a:af:92:9e:a5:10:5d:
11:63:24:33:b6:ed:04:57:12:96:8f:b5:bc:a2:b5:d6:e5:43:
5f:8d:a9:0f:96:79:4d:01:25:ff:b0:0a:0f:f0:07:db:2b:58:
5d:c2:1e:8d:73:2c:6b:68:ac:b0:21:77:95:7c:99:b4:9b:a5:
c2:e7:c4:c2:bc:6c:b9:39:65:76:15:03:5c:99:2d:08:bc:50:
e3:8f:12:18:1c:c1:52:05:a4:9a:85:db:b3:a1:72:e4:c9:94:
b5:4e:69:5c:57:38:ea:6c:40:57:bb:e2:cd:97:9d:7c:39:75:
d8:44:a3:f1:1a:97:4c:31:09:69:91:2d:f6:e3:68:d5:d8:7a:
cd:9a:b4:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 14:47:23 2025 by rpki-client