Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/l38SrLOHp2xvoQ0f5yVkFS5bKrM.roa
File: l38SrLOHp2xvoQ0f5yVkFS5bKrM.roa (raw, json)
Hash identifier: 0BnQLmt3puxo4An2R12e+n3u66JrZHSLFgysyiGPXtw=
Subject key identifier: 97:7F:12:AC:B3:87:A7:6C:6F:A1:0D:1F:E7:25:64:15:2E:5B:2A:B3
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 05B0
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/l38SrLOHp2xvoQ0f5yVkFS5bKrM.roa
Signing time: Wed 14 May 2025 16:08:56 +0000
ROA not before: Wed 14 May 2025 16:08:56 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1456 (0x5b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 14 16:08:56 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=977F12ACB387A76C6FA10D1FE72564152E5B2AB3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:0f:17:ae:dd:60:f1:61:4b:07:e8:6e:ea:9f:
a2:16:90:71:bd:89:35:0e:8c:64:e4:ec:9d:a0:80:
44:60:82:61:92:e3:79:9c:f1:93:93:1a:b9:e2:7b:
66:ed:78:81:22:ee:4f:33:01:2b:fb:56:ef:0b:50:
15:61:ef:c0:9b:95:bc:f9:37:52:aa:21:03:a5:83:
11:3d:2b:8c:40:31:28:ca:92:45:ef:c6:c8:23:a6:
19:38:6a:50:a2:85:a0:13:9f:25:23:09:65:4c:7c:
8c:b1:f2:b8:6d:1b:24:c1:f2:fd:7b:e1:81:17:17:
ed:ff:e4:8e:f1:94:93:f4:a1:72:9e:cb:ee:c0:85:
fe:d5:28:1f:b4:93:03:92:90:2a:c0:f6:63:fc:dd:
87:99:77:d0:cd:33:7a:fa:da:eb:a7:1f:44:0b:39:
12:57:df:04:4e:89:9c:65:21:3a:68:49:48:0c:0c:
fa:d4:54:fe:f4:91:44:59:e3:30:1a:d7:1a:a9:e9:
11:8e:0e:44:02:19:a6:1a:29:1b:43:22:62:3a:45:
dd:c9:10:bc:16:65:f4:df:91:8b:73:52:1b:5a:d5:
13:06:1f:6a:fb:30:93:7d:37:2a:07:51:5a:2f:22:
d7:a9:75:50:76:9d:8e:70:0b:52:3a:c1:00:de:a2:
61:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:7F:12:AC:B3:87:A7:6C:6F:A1:0D:1F:E7:25:64:15:2E:5B:2A:B3
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/l38SrLOHp2xvoQ0f5yVkFS5bKrM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
73:59:30:03:da:56:ae:09:81:4f:4a:7b:61:ba:29:1a:fe:72:
00:cd:89:17:84:77:c8:ea:1f:e3:a7:72:11:c9:16:95:5d:81:
00:18:51:87:34:09:79:a5:ab:8b:62:3d:a3:ef:67:41:09:70:
24:61:06:b8:f2:28:a4:81:10:3f:ef:5d:fa:f2:a7:97:a7:da:
29:db:1d:f0:d5:5d:8d:12:c4:8e:c6:5f:c2:80:6f:ab:9d:dd:
26:91:36:26:2c:75:91:94:d1:56:9f:58:af:db:5a:5a:c4:e8:
25:b1:e7:d0:56:35:b2:ea:c3:7d:3f:50:f7:6d:2e:15:fe:a6:
f7:c9:1d:94:38:ed:ca:72:1b:0b:f1:85:57:5a:27:63:72:0e:
c7:88:ac:09:93:3e:0c:ff:00:8a:1a:d3:64:23:b8:f1:c4:86:
57:2f:2c:e8:b0:51:72:7f:33:43:97:a1:ed:72:08:74:5a:a6:
47:71:57:93:1e:b6:08:15:9b:96:98:08:4b:29:e8:d4:8a:f7:
94:f1:fd:29:6d:e2:0e:e9:ec:d3:4f:07:ac:ba:86:5c:07:3d:
f6:66:a3:d1:56:5a:ea:a6:23:37:82:08:e5:81:b4:38:3e:4f:
e7:76:55:cf:ce:4c:bd:c7:b2:9d:4b:51:f0:7a:39:ce:1a:73:
8d:94:f6:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 23:27:38 2025 by rpki-client