Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/uwU7FqvOALGrja-T1HiLDl19Gl0.roa
File: uwU7FqvOALGrja-T1HiLDl19Gl0.roa (raw, json)
Hash identifier: utnLZALQ473ciMRpeQ4DKkGkX6z4hWRKcWVXtQhODiM=
Subject key identifier: BB:05:3B:16:AB:CE:00:B1:AB:8D:AF:93:D4:78:8B:0E:5D:7D:1A:5D
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1464
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/uwU7FqvOALGrja-T1HiLDl19Gl0.roa
Signing time: Tue 03 Jun 2025 06:39:24 +0000
ROA not before: Tue 03 Jun 2025 06:39:24 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5220 (0x1464)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 3 06:39:24 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=BB053B16ABCE00B1AB8DAF93D4788B0E5D7D1A5D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:dc:09:e6:c5:f7:4a:7b:8f:60:69:e0:7a:80:
70:9e:42:8e:a2:0d:f0:07:ad:b2:f2:e4:d0:17:e7:
aa:1e:45:00:b6:fc:9c:b2:87:62:0d:f6:68:25:bd:
c6:21:c6:18:1d:f8:3f:32:a8:a7:da:83:c4:9c:a1:
c2:0a:7c:a7:54:44:67:0c:be:c3:63:92:35:d0:2f:
2c:63:da:76:31:12:e2:42:68:09:1d:cb:8e:bc:88:
c9:ae:5b:e1:c5:26:e4:3d:bf:d9:83:8b:13:e2:e2:
f7:6b:6c:38:d4:18:e4:c8:54:bc:9a:1a:43:e0:71:
f0:96:6c:91:bd:91:86:42:72:90:90:a8:38:75:1c:
e3:99:3a:82:71:77:28:49:d5:70:2e:b1:ca:48:71:
57:83:47:66:e4:cf:54:6d:69:fa:41:e5:15:51:96:
b8:f3:db:65:b2:e1:7f:87:98:31:cd:ce:c4:b9:30:
98:dc:af:b0:6e:31:47:01:19:5d:48:4e:f7:b6:40:
7e:2a:38:ac:90:e2:0f:16:9e:4e:d2:ae:2f:54:6d:
84:5d:52:13:d1:4e:5f:06:28:cd:dd:be:31:7c:18:
44:da:2c:1e:82:f6:38:af:c9:44:26:2d:a0:f8:38:
65:25:cd:b4:00:bc:33:10:d3:33:ad:78:ff:b6:c5:
b6:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:05:3B:16:AB:CE:00:B1:AB:8D:AF:93:D4:78:8B:0E:5D:7D:1A:5D
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/uwU7FqvOALGrja-T1HiLDl19Gl0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
36:97:e6:44:d6:9d:b2:6b:27:e3:f9:47:5f:5b:56:f6:b5:06:
9f:70:63:1a:ad:58:a8:32:6b:4a:3e:7c:58:ac:25:be:8a:2f:
e9:b5:cd:86:07:e8:89:f3:13:6e:67:bf:34:7f:a2:73:bd:57:
51:77:f0:33:2e:e1:39:93:44:04:ad:1a:30:9d:f9:e6:b8:80:
39:8f:5b:14:21:6c:cf:0b:b6:cb:3f:46:88:ee:58:dc:9a:34:
b3:7a:81:4a:98:dd:2d:8b:89:be:63:bf:67:09:12:d8:52:d8:
5d:a9:c9:db:e1:f1:9c:e3:68:f4:1f:98:48:3c:a7:58:1b:d8:
e3:ef:cb:ae:ee:be:10:d3:36:26:15:de:ea:ba:52:63:4f:a5:
12:21:2f:07:16:d0:9b:bb:c4:bf:53:b5:1e:a4:53:4a:7d:ca:
49:9b:c9:11:bb:04:67:29:50:80:6b:67:3b:3e:f5:5d:8a:5e:
d0:12:47:34:9a:0a:d1:d1:c3:c9:78:42:ff:fd:8f:0c:62:f8:
ba:39:17:ee:e0:c0:9e:3a:6f:9a:42:71:c6:06:d9:58:c4:d0:
f5:57:14:e4:25:49:f9:64:c5:29:b7:69:e8:e0:c0:89:ac:44:
a7:af:80:86:4a:3c:9a:11:48:bf:79:dc:9f:b4:fb:1a:43:ed:
2c:15:24:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 03:56:26 2025 by rpki-client