Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/ILEIBmsEUFzM_R19y4TWeDGUywE.roa
File: ILEIBmsEUFzM_R19y4TWeDGUywE.roa (raw, json)
Hash identifier: 2nOVhhLsXqaOE15vVmXvVTOs6+PW8wnbCoawCClMn08=
Subject key identifier: 20:B1:08:06:6B:04:50:5C:CC:FD:1D:7D:CB:84:D6:78:31:94:CB:01
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 016C
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/ILEIBmsEUFzM_R19y4TWeDGUywE.roa
Signing time: Thu 08 May 2025 23:37:42 +0000
ROA not before: Thu 08 May 2025 23:37:42 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 364 (0x16c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 8 23:37:42 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=20B108066B04505CCCFD1D7DCB84D6783194CB01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:34:14:eb:2e:e4:3a:5f:57:d9:da:ac:e9:f1:
62:1d:dd:74:01:d0:e7:80:5b:ab:e8:19:85:82:cc:
fe:6f:70:82:b9:b1:76:d1:93:39:cf:5c:1d:fa:a0:
74:d3:62:c9:10:de:cb:1e:ea:8c:6e:36:57:4a:f3:
de:78:23:d8:f6:a5:fc:fe:72:25:e1:56:07:77:fd:
2a:df:90:a4:27:9d:41:d0:1f:e2:02:42:be:56:5e:
90:ba:df:56:69:c1:0b:b8:e0:a9:e9:54:4e:08:7e:
e8:17:7b:32:18:3a:11:1a:33:4a:bd:46:69:59:f3:
60:17:dd:ea:5f:77:43:e3:51:7b:67:10:73:a4:c6:
b1:ce:a7:9f:20:30:0e:fd:c5:68:8f:b3:d7:40:d9:
28:be:a0:b5:4e:4f:d8:7e:e3:f4:09:d5:18:29:c9:
eb:9b:24:9f:fb:90:f3:30:69:a9:c7:ef:dd:31:c6:
56:c6:27:ed:46:78:34:ca:70:36:87:12:8c:b8:eb:
8a:f0:ac:30:36:0a:f9:70:e5:e6:a7:a3:ca:c5:b7:
75:d2:2f:b8:11:6a:e1:69:83:c6:83:f7:98:69:fb:
c7:3f:0e:fe:41:5f:60:52:c8:f1:94:00:f6:cc:81:
3d:2d:20:95:fa:9d:85:22:e8:93:53:c8:45:9f:98:
02:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:B1:08:06:6B:04:50:5C:CC:FD:1D:7D:CB:84:D6:78:31:94:CB:01
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/ILEIBmsEUFzM_R19y4TWeDGUywE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
73:c5:4b:71:61:db:48:5a:de:31:48:55:3d:b5:12:78:14:62:
e2:36:71:75:c4:34:6e:10:1e:db:3d:3b:9c:ad:cd:13:de:2d:
54:ff:45:43:3d:66:09:48:5d:3a:32:25:44:6b:b5:90:fa:d0:
f2:ec:58:49:15:a9:54:1e:0b:29:6f:57:88:89:5c:82:b5:9b:
7e:c6:4a:b7:47:f5:73:f6:f0:fa:c4:18:dc:27:0f:1a:a9:9f:
4d:ac:a0:4f:49:05:a7:27:19:17:92:9b:15:3b:fe:22:8b:39:
a2:80:63:ed:52:71:fb:52:24:96:4c:ef:91:74:72:20:1d:fb:
d8:39:a8:1b:e5:20:f7:b6:55:de:6c:d7:93:1f:29:2c:36:f6:
68:5a:cd:46:9f:e2:30:30:17:97:90:3c:6a:43:9d:67:5f:7d:
81:21:03:7f:57:96:2c:71:d2:ee:c3:d3:3c:7a:ae:ec:1b:d6:
c2:0b:f0:dc:dd:4e:c7:a1:8f:09:14:4f:3c:77:1d:2a:60:7a:
f3:6b:53:d7:7e:65:f3:47:6e:0d:77:3b:be:d5:70:97:53:09:
60:fc:93:84:c1:69:e0:8b:21:e4:c3:e6:bc:21:e0:a9:18:ff:
98:7c:ed:3d:20:62:d1:5d:88:5f:12:f1:7f:7a:e4:70:8e:4d:
08:af:90:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 08:18:32 2025 by rpki-client