Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/sSGij42x5vtmEuTNbDZ2uqtHL1w.roa
File: sSGij42x5vtmEuTNbDZ2uqtHL1w.roa (raw, json)
Hash identifier: 1fZcYETCY2431KAJL3VkzB9so2UMGq1R2GqcPay2rE8=
Subject key identifier: B1:21:A2:8F:8D:B1:E6:FB:66:12:E4:CD:6C:36:76:BA:AB:47:2F:5C
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0470
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/sSGij42x5vtmEuTNbDZ2uqtHL1w.roa
Signing time: Tue 13 May 2025 00:09:07 +0000
ROA not before: Tue 13 May 2025 00:09:07 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1136 (0x470)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 13 00:09:07 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=B121A28F8DB1E6FB6612E4CD6C3676BAAB472F5C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:67:b8:fe:7a:ae:14:6e:31:c3:46:aa:39:54:
9e:f7:f8:46:9c:c0:a7:a6:57:bc:ed:f0:3f:b3:24:
33:ef:a7:50:c3:66:bf:a7:06:de:66:4b:04:20:59:
65:4e:84:eb:df:7e:fd:20:1c:ba:07:b8:5f:2c:34:
f9:5c:d0:5e:c0:ae:cc:51:6a:61:62:ad:90:99:de:
43:3a:06:a0:2c:08:f6:87:96:72:26:ad:56:55:9a:
9b:01:f9:e6:46:a7:94:f2:55:8f:6f:73:5c:fd:e5:
d8:8e:73:62:58:62:a3:e6:01:02:ec:19:b3:ad:37:
6d:95:75:50:9f:02:52:78:8a:8b:cc:1b:a0:68:0a:
ee:43:02:b3:d6:26:ae:7d:c1:0d:3d:df:84:a5:5c:
67:0a:48:8d:d6:60:76:1a:9f:b6:2a:17:b9:01:7e:
c3:eb:3f:8b:47:03:4a:37:c2:8f:c6:4e:79:79:ff:
b9:d2:df:75:4b:f6:84:d1:35:a2:01:a4:65:d1:af:
bc:10:77:fd:db:fb:d8:68:80:b5:b2:1f:1b:7f:f3:
87:a2:f4:8c:be:b0:ea:64:99:6d:31:52:43:a3:c9:
64:a5:e8:d7:dd:9c:8e:29:8c:62:d0:94:af:e5:fa:
db:d7:b6:a1:02:da:84:2b:cd:91:ad:5e:2f:ec:b2:
b9:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:21:A2:8F:8D:B1:E6:FB:66:12:E4:CD:6C:36:76:BA:AB:47:2F:5C
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/sSGij42x5vtmEuTNbDZ2uqtHL1w.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
22:5b:ad:5a:82:55:ca:ba:97:a7:8c:f1:a4:8f:81:c3:42:e6:
0f:5e:ae:b9:1a:f9:02:85:98:db:b3:6a:e8:37:ca:9a:c1:3a:
53:ef:62:9c:24:c1:97:5d:26:ad:38:87:9b:4e:5f:9e:a8:22:
de:1b:8a:b5:6c:f0:3d:db:a1:53:fc:33:be:ca:92:49:e7:cc:
69:1d:44:a5:75:8f:79:53:a0:40:19:1c:af:2a:e0:0f:8b:3b:
48:0e:18:86:e4:30:8a:e5:fa:7b:94:cf:b4:1f:1a:e6:82:b6:
56:9d:ee:05:46:21:37:f2:f3:20:93:7c:c9:c0:ae:b1:9a:1a:
b0:bb:4a:4a:31:20:13:e1:02:fb:6b:c7:6d:eb:45:b0:ba:61:
c7:18:9c:98:39:54:d6:5c:45:f9:46:a5:92:9f:b9:a4:d7:08:
df:91:6f:83:ca:b2:82:c4:6e:51:ee:61:7c:e1:85:4d:0e:0f:
24:d0:32:f6:35:89:36:fc:a0:e9:9a:88:d1:bb:3b:0c:0d:27:
46:de:f1:e3:b9:94:f0:40:7e:64:7d:9d:e2:8d:39:c4:8d:ef:
30:92:a1:4f:2a:40:a0:1f:cb:45:15:77:41:47:c3:dc:79:ab:
24:53:02:0a:ba:36:63:4e:0a:7d:a8:b8:e0:fb:16:b0:7f:50:
bc:5e:c9:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 18:28:15 2025 by rpki-client