Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/kN1Fmrk3Slo9f64YehdloZhhuQY.roa
File: kN1Fmrk3Slo9f64YehdloZhhuQY.roa (raw, json)
Hash identifier: qEOF5Onh5lLtN/C0vYtpWO/OXxDyFEsQqXDS1aAFdx4=
Subject key identifier: 90:DD:45:9A:B9:37:4A:5A:3D:7F:AE:18:7A:17:65:A1:98:61:B9:06
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0870
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/kN1Fmrk3Slo9f64YehdloZhhuQY.roa
Signing time: Sun 18 May 2025 08:08:35 +0000
ROA not before: Sun 18 May 2025 08:08:35 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2160 (0x870)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 18 08:08:35 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=90DD459AB9374A5A3D7FAE187A1765A19861B906
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b1:87:02:86:38:17:2b:7f:e9:01:e2:06:7a:
3e:07:59:83:60:12:b6:b8:8d:3b:58:8d:d9:92:03:
48:9b:f1:53:31:44:12:fc:e6:ac:39:5e:06:ef:ce:
e6:7e:32:bb:0b:cb:df:eb:87:23:dd:5e:0e:07:49:
e6:d8:b8:86:ae:db:c0:a3:f1:f1:83:87:62:48:31:
19:63:15:88:d9:52:dc:cb:32:d1:19:c5:2e:af:f9:
79:fd:41:0a:8e:ca:79:9a:b9:7c:58:8e:e1:c8:22:
56:49:24:a0:8d:d3:85:11:8e:b8:b2:0d:21:00:c9:
d4:03:7b:6d:5f:29:cb:3b:37:13:03:86:5b:19:c3:
d3:d3:07:6e:4f:cf:80:09:83:1e:87:f7:23:c4:2c:
b2:96:d0:4e:23:a8:fd:97:f1:13:08:bb:8d:c7:ab:
6e:8e:88:81:4a:1c:92:b8:b3:8b:31:40:2e:05:95:
85:b8:be:e1:72:54:08:8e:8e:6c:25:6f:6e:16:a5:
6a:cd:1d:77:4e:c6:68:af:02:aa:a8:b1:ee:fa:98:
a6:e6:3f:bc:14:d3:d7:2f:f4:38:a4:54:7b:e2:17:
28:b8:c6:5d:aa:05:af:f6:2b:dc:e7:0a:67:eb:4f:
52:de:fa:a7:f4:07:55:24:6b:3a:dd:c3:f8:57:d5:
8e:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:DD:45:9A:B9:37:4A:5A:3D:7F:AE:18:7A:17:65:A1:98:61:B9:06
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/kN1Fmrk3Slo9f64YehdloZhhuQY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
5b:9d:05:50:b5:63:65:a7:62:89:4b:59:c8:a2:f2:62:94:ea:
d1:04:04:4e:46:47:38:11:36:fb:71:4a:e5:94:94:0d:4e:25:
c0:fd:8f:7c:32:2f:09:46:fe:2b:ec:03:6f:80:39:e0:a6:82:
9a:2c:fb:7c:c1:68:75:b5:83:fa:72:f7:85:43:e2:b6:95:4f:
d7:7f:dd:08:84:55:eb:00:39:0d:02:40:81:0a:a3:ca:4d:3d:
86:84:20:97:cd:08:59:c7:b4:d1:2d:fa:fb:7e:63:61:b5:04:
52:ff:74:ee:15:6e:df:3b:49:79:c9:85:40:74:d9:08:d2:aa:
4e:16:95:d9:ec:1b:50:09:1b:45:43:dd:6d:d4:43:26:f4:72:
0b:45:52:9d:d8:ad:80:10:b5:ac:b0:8f:ff:03:55:c4:1f:93:
fb:6e:a7:bf:22:ec:b4:dc:78:70:8e:23:b9:d4:fc:9a:c3:d5:
07:37:75:45:39:ac:07:9f:d6:d5:24:f9:4b:cb:58:35:e0:72:
63:97:28:01:d0:b1:fe:ff:04:54:8c:2d:15:d7:a0:ae:b7:7b:
c2:d1:35:88:28:4b:04:f8:37:83:20:a0:09:e6:76:de:51:7b:
97:a3:99:cc:ea:ed:a8:82:2c:33:7f:3d:6c:0e:9a:d3:52:54:
f2:eb:55:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 11:07:47 2025 by rpki-client