Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/ou3sY3_NB5XIu_rHyEVyjUgkU-U.roa
File: ou3sY3_NB5XIu_rHyEVyjUgkU-U.roa (raw, json)
Hash identifier: LN/nCMCWYJEHgF4Xh9QpYSC8NqZHmv6C0hc5wUaG49g=
Subject key identifier: A2:ED:EC:63:7F:CD:07:95:C8:BB:FA:C7:C8:45:72:8D:48:24:53:E5
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: D8
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/ou3sY3_NB5XIu_rHyEVyjUgkU-U.roa
Signing time: Thu 08 May 2025 05:08:05 +0000
ROA not before: Thu 08 May 2025 05:08:05 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 216 (0xd8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 8 05:08:05 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=A2EDEC637FCD0795C8BBFAC7C845728D482453E5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:3c:06:1b:4a:c7:16:29:0e:f0:77:3b:0a:72:
68:ac:81:80:28:4d:e3:b6:14:65:57:5c:32:b7:3b:
6e:6b:9c:9d:73:41:2d:42:85:b4:29:71:ed:2d:08:
3f:ad:4a:d4:f9:08:b3:ce:fd:49:1d:13:69:cd:4b:
cb:08:d9:fe:bc:0b:a1:a2:95:1b:9a:36:de:a9:d3:
98:ee:d7:cb:45:ae:91:94:b3:2d:41:35:65:a7:5f:
91:23:b7:a5:df:a2:d1:ae:02:b4:c5:bf:ec:31:d9:
6c:bb:bc:b8:13:78:51:b1:59:66:ae:a9:e7:8a:36:
e1:8a:1a:26:44:de:f8:88:51:1b:b1:ea:b3:59:2c:
60:e8:dc:7d:cd:e0:fd:c7:58:fc:a7:59:07:9d:96:
41:aa:a6:5b:03:98:23:d5:a8:8b:22:4e:8d:b3:c9:
c0:eb:b5:15:ca:5c:fa:e4:60:2b:59:d6:84:14:80:
35:e8:e6:7e:06:18:d1:65:02:c7:89:a0:56:eb:15:
29:e7:55:8e:18:55:32:2a:f6:c5:5d:b8:78:32:81:
5e:a1:49:13:89:d2:31:e5:1d:09:5c:0f:9c:9a:49:
06:9e:fc:15:c6:19:7e:29:8d:8e:8a:e8:f0:0c:3a:
38:7d:f0:bb:d7:dd:e0:b1:30:40:6d:ed:dc:a9:51:
e8:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:ED:EC:63:7F:CD:07:95:C8:BB:FA:C7:C8:45:72:8D:48:24:53:E5
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/ou3sY3_NB5XIu_rHyEVyjUgkU-U.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
45:5b:1a:d0:5b:90:55:2f:41:53:d7:92:58:df:3b:4c:e5:38:
d3:e3:de:d6:d3:71:5f:39:0e:56:b5:bb:cf:a1:99:45:8a:89:
ff:47:39:80:73:6c:82:4b:96:14:58:34:3f:5b:b4:cf:49:79:
6e:0c:f9:43:12:db:e5:58:44:21:75:5c:8a:dc:96:51:7b:24:
4d:ef:dd:a1:9b:6a:ab:0f:0d:6a:94:df:1d:84:75:03:75:d5:
c5:56:0e:88:31:49:63:da:6b:3b:bb:05:08:5a:8c:9e:c0:51:
14:aa:69:2c:47:4a:bb:b1:a3:24:73:0a:88:d2:f1:c1:73:01:
1e:33:d1:7d:77:e7:c3:b6:bb:dc:ed:26:1a:b9:ca:af:b5:8d:
d2:a3:6d:46:8e:fa:46:55:4a:cf:c4:a6:a4:a4:15:59:1d:a9:
b5:ac:ab:67:20:0a:9f:e1:9b:98:ab:d6:03:86:4b:1b:33:93:
3e:78:cb:ba:a9:3c:40:38:ef:2f:84:89:4b:82:06:2e:84:ca:
cb:2d:cf:4d:6e:87:51:ab:61:15:52:4c:0e:e3:99:c2:e1:c5:
ed:9c:92:18:a0:49:83:7c:5a:00:9f:9a:90:2e:e0:47:58:56:
87:fb:22:09:84:68:65:4a:39:66:5c:b7:7b:60:48:3b:06:ab:
16:4c:a5:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 16:16:52 2025 by rpki-client