Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/hoTe0con-ApvYxFUZNnRG8Y5_4k.roa
File: hoTe0con-ApvYxFUZNnRG8Y5_4k.roa (raw, json)
Hash identifier: n0QpdL5w/VePEI3uMPdblEQ89fQtS8X8R5W9Q/qiagM=
Subject key identifier: 86:84:DE:D1:CA:27:F8:0A:6F:63:11:54:64:D9:D1:1B:C6:39:FF:89
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1880
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/hoTe0con-ApvYxFUZNnRG8Y5_4k.roa
Signing time: Sun 08 Jun 2025 18:09:44 +0000
ROA not before: Sun 08 Jun 2025 18:09:44 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6272 (0x1880)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 8 18:09:44 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=8684DED1CA27F80A6F63115464D9D11BC639FF89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:58:0c:05:a2:ab:7a:1c:c6:f0:77:c3:b5:03:
d7:9f:eb:d1:9c:66:03:d0:3d:c9:16:ed:0f:70:b4:
93:cc:76:eb:37:4c:61:f9:fb:a0:31:36:b3:08:53:
a1:95:95:04:91:f3:54:e6:57:eb:e7:ad:cf:08:42:
d9:f3:b1:5a:ad:f5:7c:07:2a:76:9f:13:bb:61:2e:
48:a0:b1:e4:48:3d:e5:2e:52:4e:8d:ab:7d:8f:ee:
1e:64:b6:4f:38:04:32:40:c0:7c:a7:90:26:4b:d3:
75:5a:f3:61:d9:b5:36:f5:1b:8c:23:9e:8a:8f:4f:
e5:f7:6d:33:5c:73:5d:67:8a:ec:4c:44:c1:1c:ab:
5d:1b:f6:40:4d:3c:fc:3b:1f:fd:eb:06:62:d9:dc:
b4:03:b4:a0:58:a5:4e:88:dd:fc:e4:3a:03:f4:8f:
85:ad:4f:4d:39:55:70:98:7a:c3:d6:00:e4:78:4e:
f2:db:08:8a:6b:4c:d9:ba:c2:2d:b2:cf:4e:d6:6a:
48:2d:fe:e9:41:4b:43:2f:ed:4b:6c:a3:54:e0:2f:
f7:8b:a0:7d:7c:19:0e:32:3d:f2:79:70:d9:e0:b2:
7e:d6:2f:2d:2a:da:f5:9f:a9:9b:76:80:9b:57:23:
f0:55:1b:51:b2:33:ce:84:06:22:b7:a9:84:2b:76:
4e:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:84:DE:D1:CA:27:F8:0A:6F:63:11:54:64:D9:D1:1B:C6:39:FF:89
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/hoTe0con-ApvYxFUZNnRG8Y5_4k.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
82:08:d3:94:8d:e4:62:47:76:b0:8d:8d:9a:31:43:d7:29:3c:
1e:d0:b0:f0:7e:9a:c8:ea:2e:e1:56:bd:c7:dc:f3:ba:9c:21:
d6:48:7b:00:f4:94:ae:5c:db:ec:24:2a:a7:ef:85:ee:de:5f:
7a:cb:85:ca:af:2b:c8:a6:07:8e:e6:63:0a:7d:89:aa:d4:c9:
4b:b0:f6:0b:b1:65:f9:69:c1:cc:a1:da:78:2c:b1:70:b5:07:
ee:d4:f0:f8:a1:a8:8d:af:38:8d:9f:88:a3:48:dd:30:97:2c:
8c:23:85:1f:00:d3:5b:10:02:da:63:1a:83:e9:7c:da:33:da:
b0:90:cb:37:71:3e:55:68:2e:36:a4:f5:8f:68:49:d7:25:c4:
42:52:c9:09:41:99:3d:09:77:72:30:56:57:2a:3f:bf:b0:d4:
61:68:24:6a:41:4a:02:3e:5e:0f:8e:60:73:9c:15:37:dd:1f:
64:16:fa:40:43:cc:e7:cb:10:78:24:f0:a8:70:95:9d:31:b2:
fa:a9:46:50:13:82:65:f6:80:42:dc:80:ac:d6:bb:99:2c:a8:
38:55:b0:4a:3e:06:b1:a3:45:0d:0f:d4:45:df:68:64:8d:87:
fb:fd:f7:4b:00:9f:66:3a:5e:20:d8:66:0e:1d:98:31:8c:11:
5b:7a:85:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 07:05:56 2025 by rpki-client