Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/ISHL2Nk8toaXmrP52IddRO86lCs.roa
File: ISHL2Nk8toaXmrP52IddRO86lCs.roa (raw, json)
Hash identifier: U7o2fdb1uGxcq6lEqqb0eo6gIQWsSvuvrku23L9Ekl8=
Subject key identifier: 21:21:CB:D8:D9:3C:B6:86:97:9A:B3:F9:D8:87:5D:44:EF:3A:94:2B
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1304
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/ISHL2Nk8toaXmrP52IddRO86lCs.roa
Signing time: Sun 01 Jun 2025 10:39:10 +0000
ROA not before: Sun 01 Jun 2025 10:39:10 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4868 (0x1304)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 1 10:39:10 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=2121CBD8D93CB686979AB3F9D8875D44EF3A942B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:79:20:f1:cd:1f:94:41:09:05:c1:0e:ea:6c:
11:49:7a:36:1d:0b:b9:5d:4d:dc:7a:c7:00:d8:72:
f7:ca:fd:b2:a0:4e:04:1e:aa:28:67:5c:8f:83:a7:
82:ca:04:0b:f6:d6:af:64:80:3f:f7:44:f4:9f:76:
6c:b9:85:1a:8f:7f:30:15:06:49:e1:db:dd:ca:63:
6c:18:95:82:70:74:6a:be:06:b5:c4:0e:88:0f:4a:
2c:8e:df:b8:13:96:eb:b2:c3:0f:f5:a8:cb:2e:b9:
62:dc:a8:1d:2d:9e:67:23:8a:75:bc:77:86:97:1c:
3a:7e:1d:ff:cd:17:3d:da:24:f7:d0:35:8a:87:a5:
7f:0d:84:98:a9:4b:14:da:6c:1b:a2:79:e0:73:01:
12:5d:52:02:81:52:53:00:ef:61:b3:ed:2a:09:94:
7a:ce:0f:b1:9b:2f:1f:0f:b2:a4:90:af:d0:07:0b:
ff:01:07:91:1f:02:62:76:10:d4:dc:bf:81:f7:c9:
5c:4c:84:30:5f:9b:a3:43:71:c2:b6:11:57:35:d0:
39:51:ce:cc:e5:65:0d:3c:9c:52:6e:4d:8e:29:73:
c9:71:34:bd:f7:a3:39:d6:ab:c6:d8:9d:6f:de:5a:
dc:e0:08:12:8b:ce:f4:a9:71:4b:69:2e:73:97:58:
b4:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:21:CB:D8:D9:3C:B6:86:97:9A:B3:F9:D8:87:5D:44:EF:3A:94:2B
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/ISHL2Nk8toaXmrP52IddRO86lCs.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
90:87:33:7b:7d:67:aa:4e:42:89:69:a6:4c:34:e1:83:b8:a4:
37:60:e7:a0:4a:c1:87:cd:5c:6c:e5:fb:5a:70:92:b4:95:df:
b7:b4:c5:11:9d:3e:f1:24:18:a0:67:c6:e0:16:e8:3b:90:ba:
f5:0c:f4:0b:54:8c:6b:11:7a:3a:ff:58:31:f5:4a:e8:d2:c5:
17:0e:36:ea:0b:fd:c0:4e:52:e9:e9:50:fa:91:6e:1b:e2:6f:
b8:6b:04:99:c4:28:32:4f:a5:f5:17:55:47:04:f6:b0:6f:c0:
26:aa:2b:2e:df:fe:8a:9b:a6:ba:e1:b9:8a:cd:6a:d9:9a:6a:
53:32:21:39:69:c4:76:a5:b9:b4:3b:15:41:1b:06:65:25:8f:
e7:6a:02:d0:80:68:fa:69:ef:2f:23:c4:62:89:74:85:1f:25:
ce:2c:13:f9:83:98:56:62:c3:51:bb:70:8f:a1:3a:55:c3:08:
49:9b:7b:1d:3c:63:be:de:a8:46:4e:c8:ed:f9:33:6a:ac:45:
54:d1:93:45:1c:c8:50:24:b4:e4:06:31:4d:68:70:45:58:e8:
b8:c8:08:1e:b8:c6:a5:f4:27:ca:a2:16:7e:22:9d:42:59:cb:
d0:c3:dc:a1:5b:f8:20:1c:a7:4d:12:91:c6:0f:aa:0c:21:1c:
0f:b5:9d:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 16:40:33 2025 by rpki-client