Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/LRmOhMnjU21QWDYgnxstIk_oPGc.roa
File: LRmOhMnjU21QWDYgnxstIk_oPGc.roa (raw, json)
Hash identifier: z4F5mlA1ilw7vYqRDWgGZaZEHEQxtpSX5MtxAJixhYk=
Subject key identifier: 2D:19:8E:84:C9:E3:53:6D:50:58:36:20:9F:1B:2D:22:4F:E8:3C:67
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 06D4
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LRmOhMnjU21QWDYgnxstIk_oPGc.roa
Signing time: Fri 16 May 2025 04:38:12 +0000
ROA not before: Fri 16 May 2025 04:38:12 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1748 (0x6d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 16 04:38:12 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=2D198E84C9E3536D505836209F1B2D224FE83C67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a2:53:d8:44:0e:24:08:22:0a:c0:5c:fe:02:
0e:a2:cf:4b:15:96:e1:3c:68:26:04:55:9f:5f:62:
bb:09:19:40:56:38:fa:0b:f1:c0:f8:c2:dc:49:5d:
0c:4a:16:f4:69:b0:bb:f8:82:53:9e:fd:b8:45:36:
4a:ce:e2:8d:80:fc:8e:30:f3:0e:25:94:dd:b8:e2:
1b:08:8f:27:1e:c0:ab:3f:ff:89:f7:2b:01:30:99:
69:d3:04:e2:9c:f6:80:60:f4:ea:ea:2a:f1:dc:05:
c8:b0:3d:c4:28:2f:65:1b:49:43:0a:44:b3:54:0f:
01:1b:ee:95:1b:7a:9e:e4:fe:d5:c5:3e:cf:cf:fb:
78:d0:a4:e2:90:b3:aa:5d:ef:c0:e7:0c:28:08:8f:
98:66:d7:9d:d1:bf:b6:a8:e6:d7:aa:45:29:c2:1b:
c4:1e:ee:36:3b:a8:eb:9b:69:e8:6d:56:7e:0d:9a:
ac:7a:d7:69:4d:40:b6:9d:5f:66:12:8d:4b:37:82:
29:5f:fa:63:a3:6c:29:e9:8b:26:4e:cb:ae:a9:0a:
9a:f6:36:19:9e:d9:32:0b:53:88:ae:ea:8b:cf:93:
e4:ac:33:00:71:a6:a1:23:63:86:76:67:38:fd:cd:
25:47:cf:e3:de:92:4e:16:32:52:66:2e:54:ba:69:
b9:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:19:8E:84:C9:E3:53:6D:50:58:36:20:9F:1B:2D:22:4F:E8:3C:67
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LRmOhMnjU21QWDYgnxstIk_oPGc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
83:33:b3:15:78:e5:5c:37:e8:fc:8e:aa:30:19:d1:8a:e0:cd:
76:85:61:a4:9a:c3:f1:e0:26:63:57:d1:14:d1:ef:20:3d:22:
ca:9f:71:d2:6a:54:49:7a:0b:36:17:c7:ea:57:51:9e:c7:bc:
da:79:e1:7e:84:24:f5:1d:54:ea:ac:c1:5e:46:f8:61:0c:00:
ce:41:90:67:ec:60:1a:03:09:43:55:ba:23:dc:74:a1:44:53:
cb:a6:c8:77:3a:9f:7b:eb:1e:54:2b:dd:40:f6:c8:0a:1c:05:
0e:85:e8:17:de:72:04:7a:fa:10:56:c2:cf:56:48:a3:81:3c:
e4:54:cc:b1:5f:81:e7:7f:a0:79:23:f4:ad:8e:0b:2a:ef:70:
2e:99:5b:e3:c5:bd:50:72:0c:a5:f0:b2:76:9e:26:70:66:85:
4c:d9:74:42:c0:cf:7b:20:91:d3:3c:9d:e4:f6:d8:96:1e:94:
37:02:78:ac:19:27:f2:45:85:0f:3c:c9:dd:ae:b4:28:c6:03:
83:e2:ca:ab:ce:6b:c3:df:30:09:83:bc:a4:f3:11:12:16:46:
52:aa:b3:8e:e7:52:d1:b7:35:58:1c:cc:e7:e7:2a:0d:6e:a7:
16:a2:c8:73:eb:ee:e1:5c:57:50:5d:d7:d3:0d:9a:33:87:a6:
8a:92:a2:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 06:46:11 2025 by rpki-client