Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/ysOQM22xlYDwJolc0dNYBdUmvOw.roa
File: ysOQM22xlYDwJolc0dNYBdUmvOw.roa (raw, json)
Hash identifier: 93+A+ES1vp8bNgpdfrwGdiH5odobRoyKO0825xUroW8=
Subject key identifier: CA:C3:90:33:6D:B1:95:80:F0:26:89:5C:D1:D3:58:05:D5:26:BC:EC
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1614
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/ysOQM22xlYDwJolc0dNYBdUmvOw.roa
Signing time: Thu 05 Jun 2025 12:39:25 +0000
ROA not before: Thu 05 Jun 2025 12:39:25 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5652 (0x1614)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 5 12:39:25 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=CAC390336DB19580F026895CD1D35805D526BCEC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:3c:a7:5d:7b:86:ed:ea:2b:0c:16:84:9f:b0:
8d:cb:6d:fc:1b:51:bb:4e:06:da:9b:2c:97:f9:db:
f2:73:e5:12:30:58:8e:7b:4b:22:0b:f3:36:2b:75:
a0:26:92:fe:fd:1e:1b:ea:cd:5c:58:72:8e:73:16:
fe:25:b5:30:01:4a:4f:de:d0:cf:ac:65:93:b9:a6:
86:c4:fe:1c:18:5a:0d:e9:22:45:e7:38:f0:ec:b4:
b6:19:1d:d3:e7:dd:f5:2e:8f:c7:f9:e2:b5:fa:57:
c8:39:ac:c9:a5:3f:18:a4:52:40:2a:63:e6:2f:15:
bd:c4:db:a0:eb:a4:62:40:0e:af:26:07:d1:5f:00:
d3:0a:56:85:9e:38:42:4b:91:c2:62:2f:69:b6:4e:
70:97:ce:07:ee:c6:09:d2:b1:b6:b3:a5:94:a6:35:
41:11:fd:11:d7:b7:ce:81:b9:9b:3d:29:de:95:86:
f8:8a:ca:02:d0:cb:b1:44:27:87:b2:09:ab:e8:65:
93:21:5c:8c:bd:68:14:cc:8a:17:98:7b:46:cd:46:
13:81:52:a4:dc:88:aa:26:a3:2f:84:bb:71:bc:77:
61:19:46:ca:e4:1a:0f:01:bc:bf:69:3e:02:f5:d9:
a6:fa:10:b1:ef:66:b0:a5:ca:2a:49:7b:da:4d:cf:
7d:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:C3:90:33:6D:B1:95:80:F0:26:89:5C:D1:D3:58:05:D5:26:BC:EC
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/ysOQM22xlYDwJolc0dNYBdUmvOw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
7e:a8:ec:66:3a:a1:82:dd:ca:fa:3b:f3:4e:49:6b:76:6f:18:
d5:11:23:c4:65:72:68:44:b9:9c:51:ae:0b:ed:64:b3:00:c8:
6a:2f:86:32:6b:49:02:11:05:54:ec:28:36:35:2f:02:f7:c1:
b4:37:f8:ba:ff:81:c0:ed:71:f1:62:42:5d:be:cc:52:2b:e0:
e4:0f:ce:9b:5d:3a:d9:31:18:20:17:3e:f9:07:65:35:3f:89:
85:4d:89:bc:19:09:59:67:2e:3b:89:a3:80:fe:d2:e8:7c:aa:
e4:2b:e0:a5:2c:bf:aa:46:eb:a2:92:d1:cd:23:9c:99:f7:51:
8f:cc:34:24:0c:15:e9:19:d5:29:83:6b:9c:10:8d:f1:f8:d2:
95:45:cc:66:b3:29:ec:b8:7f:3c:0b:75:b0:7e:39:9d:db:29:
11:ab:36:64:81:8c:6e:6b:1f:33:d2:3f:2e:61:9c:6f:da:82:
23:be:98:0d:f2:69:fe:75:84:c7:bb:e0:8e:4d:f2:ce:98:6a:
d6:ab:4b:c2:f4:62:e9:b9:b1:82:12:0d:3f:92:d1:e4:60:70:
cc:7e:99:a0:04:93:47:e5:23:ce:5d:cb:42:3b:3c:fe:51:e6:
ec:52:fd:e1:aa:89:a9:b1:6d:11:73:93:4a:13:e8:63:69:f5:
5f:15:94:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 04:17:08 2025 by rpki-client