Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/tPzyGemFG2gNWQ4ccOsdLUXOegk.roa
File: tPzyGemFG2gNWQ4ccOsdLUXOegk.roa (raw, json)
Hash identifier: 2Ej8RfMJ/duonpi5oLs0JxX4YOx8yJCh+XQk89xVEiw=
Subject key identifier: B4:FC:F2:19:E9:85:1B:68:0D:59:0E:1C:70:EB:1D:2D:45:CE:7A:09
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1440
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/tPzyGemFG2gNWQ4ccOsdLUXOegk.roa
Signing time: Tue 03 Jun 2025 02:09:14 +0000
ROA not before: Tue 03 Jun 2025 02:09:14 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5184 (0x1440)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 3 02:09:14 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=B4FCF219E9851B680D590E1C70EB1D2D45CE7A09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a7:0d:4b:3f:ff:28:40:f7:41:c5:58:31:dc:
68:c2:ca:28:93:d5:50:4b:d0:df:8e:58:a3:0b:cf:
55:28:f3:0c:fe:df:f1:82:40:cb:ab:e0:d7:3d:3f:
64:4e:6d:d8:68:b3:02:65:d6:aa:ac:c1:5f:18:9e:
d1:70:3b:b9:6e:60:04:28:f6:7b:50:ac:21:e7:18:
50:a8:37:f9:88:09:4f:c0:49:ed:f9:c7:86:e8:f5:
74:d5:06:bc:37:ac:6a:2f:ef:12:cc:c7:0f:bd:ac:
0c:ff:d8:ef:bf:8c:2d:ed:90:47:7f:ad:2a:5a:6b:
1c:38:2f:f2:5f:f8:80:58:d7:24:e5:fe:5b:85:7d:
1b:3c:06:c3:71:e2:c8:a9:0f:ff:86:76:47:27:37:
79:6e:b5:70:3c:54:2a:2a:02:6b:0f:91:2a:50:6a:
db:06:fd:fc:be:dc:19:77:49:4e:2e:15:e5:5b:49:
f4:01:e4:7a:59:f3:33:46:3d:53:4c:cf:67:45:c1:
a2:7a:aa:c3:51:81:2a:f5:75:c9:d3:3c:1e:91:01:
f8:c3:a8:a9:e8:ab:40:b2:07:8a:3f:e3:32:c7:45:
6d:d6:25:dc:ea:c3:a8:73:71:48:a9:8f:e4:1e:b4:
c2:e8:91:c1:c5:cf:9d:5b:74:dd:2d:62:42:8f:a2:
b3:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:FC:F2:19:E9:85:1B:68:0D:59:0E:1C:70:EB:1D:2D:45:CE:7A:09
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/tPzyGemFG2gNWQ4ccOsdLUXOegk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
25:89:d0:a4:0c:c4:a2:d5:f3:8d:a2:74:a4:85:89:71:98:84:
4d:90:c8:45:bd:2f:db:74:bf:75:45:dc:fa:04:1d:cd:52:c4:
42:69:77:bb:4f:87:4f:25:06:45:c8:7a:e8:a4:a6:3b:cc:08:
67:c4:b3:9b:03:3f:a7:8f:cc:1f:8c:f0:85:2d:3a:e3:02:bb:
a3:0b:d5:fa:9f:83:ed:1b:af:f1:2b:e8:a5:18:4f:94:32:0b:
55:37:8a:f3:8d:f9:e6:fc:7d:27:b7:2c:1e:5e:9c:23:ec:9d:
4e:05:7c:a0:f7:fe:59:38:bf:ba:1a:78:c7:87:ef:37:a4:dd:
90:0e:0a:96:81:af:db:1f:3a:95:05:86:75:70:af:3d:75:68:
a8:aa:37:b1:77:de:21:14:54:8c:36:a4:36:6a:9d:12:8c:e8:
9b:bc:11:a1:57:94:2a:77:99:a9:f5:d1:ea:c8:2b:3d:38:02:
05:cf:b8:67:00:3f:df:af:1c:ec:13:c6:5d:a7:aa:64:02:e6:
9a:af:5f:ca:04:0d:d7:46:e6:87:78:8d:47:5f:cd:e7:db:8e:
3f:c3:fc:f9:a5:86:89:76:30:f6:f0:0e:eb:32:84:e5:dd:db:
5a:e2:ff:8f:9c:7e:5c:51:93:86:33:65:54:b2:d2:2b:33:50:
0f:b9:1f:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 18:35:00 2025 by rpki-client