Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/shdj7zwVMBnxYrHA4QzM4l-pPuY.roa
File: shdj7zwVMBnxYrHA4QzM4l-pPuY.roa (raw, json)
Hash identifier: d4sm1S+S9YU5gXTcuNl8FiB9nI6G13QB6E5ABInXVwQ=
Subject key identifier: B2:17:63:EF:3C:15:30:19:F1:62:B1:C0:E1:0C:CC:E2:5F:A9:3E:E6
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0214
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/shdj7zwVMBnxYrHA4QzM4l-pPuY.roa
Signing time: Fri 09 May 2025 20:37:49 +0000
ROA not before: Fri 09 May 2025 20:37:49 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 532 (0x214)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 9 20:37:49 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=B21763EF3C153019F162B1C0E10CCCE25FA93EE6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:4f:32:5c:db:40:86:23:b7:19:2b:de:14:da:
63:e9:cf:59:68:81:05:42:dd:9f:22:94:e5:69:ec:
cf:e0:54:a5:a1:10:6f:f3:53:a8:1a:62:1c:4c:74:
c3:59:75:68:53:32:37:fd:cc:aa:4b:f8:54:d5:69:
54:6f:95:13:a9:d5:84:6e:81:5f:ac:3a:03:fd:3c:
ac:57:63:13:81:26:00:b0:b2:aa:39:7d:da:ea:7f:
22:7b:4e:37:2b:2c:f1:3e:b6:72:6d:73:b6:42:a3:
8f:71:1f:f4:d0:2a:79:f9:07:35:ab:7f:26:39:7d:
36:90:14:29:9a:74:26:b6:6c:75:af:21:9d:8c:1b:
37:5e:0a:e4:5f:d0:a3:4c:25:ad:4d:3c:8e:02:2e:
96:f7:20:51:30:c8:32:b7:4f:77:16:bb:9c:d6:bb:
a1:5b:f0:37:a2:e6:8d:c0:fc:26:35:b8:67:55:fc:
f6:de:16:22:ea:14:36:aa:f1:f6:2b:01:ac:2f:b0:
59:79:b4:9c:6f:21:78:0b:a4:d1:e4:97:29:a8:a7:
a7:fe:e6:47:c3:c4:19:46:c2:a5:9d:b5:31:0d:29:
8f:e8:dc:01:cc:ce:44:15:2e:ba:c1:d4:22:b7:a5:
b8:74:61:5a:c5:c4:e2:60:b6:da:59:61:ce:c0:b8:
7e:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:17:63:EF:3C:15:30:19:F1:62:B1:C0:E1:0C:CC:E2:5F:A9:3E:E6
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/shdj7zwVMBnxYrHA4QzM4l-pPuY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
00:7e:70:4f:fe:62:03:c6:5a:dd:8f:d6:8b:21:86:a6:33:b1:
a6:2f:04:50:7d:87:61:c7:3f:08:b1:c6:ff:27:ad:ca:9f:39:
38:48:a7:a8:6c:52:00:3a:02:51:9f:3a:a8:e4:e2:55:40:b4:
f5:66:2b:d2:53:cd:66:d3:69:1c:c8:32:70:4d:b2:46:c2:c7:
84:78:04:e0:8e:3d:8f:43:fd:56:4e:a2:f6:c1:18:a8:d1:ed:
81:62:f8:bb:51:14:2f:8a:90:a0:92:52:60:94:43:91:64:8e:
48:5d:8a:6d:fc:50:74:a7:01:e7:e0:1a:c5:7f:ef:5e:cd:d6:
fa:99:43:6a:2c:42:3e:e1:2b:31:62:12:9a:8a:f3:de:a9:41:
97:a3:2c:89:0c:75:ab:60:26:31:01:e9:87:8e:7b:34:2f:80:
6a:ac:8a:8b:7e:74:75:38:9b:d9:16:a9:97:cc:21:40:49:a5:
3d:7d:33:b7:dc:2a:e9:a9:51:ac:73:fb:e3:01:90:a4:af:cb:
a2:90:50:79:b2:e4:2c:a8:9d:b4:aa:e0:2f:1b:3d:66:f4:5b:
67:5e:8c:c2:76:71:e1:c0:5a:90:7f:51:c0:eb:ce:da:d8:e4:
71:43:76:b8:40:d2:b0:08:38:7b:44:a8:78:8c:bf:89:af:88:
c2:a8:eb:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 14:23:44 2025 by rpki-client