Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/LauA3iBBHBGtG6kUJHrDlz_Wj-0.roa
File: LauA3iBBHBGtG6kUJHrDlz_Wj-0.roa (raw, json)
Hash identifier: jNKX6xkfZVYyhnWqZSkImai/FR6RRWupD1jmYhAkOOY=
Subject key identifier: 2D:AB:80:DE:20:41:1C:11:AD:1B:A9:14:24:7A:C3:97:3F:D6:8F:ED
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 024C
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LauA3iBBHBGtG6kUJHrDlz_Wj-0.roa
Signing time: Sat 10 May 2025 03:37:50 +0000
ROA not before: Sat 10 May 2025 03:37:50 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 588 (0x24c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 10 03:37:50 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=2DAB80DE20411C11AD1BA914247AC3973FD68FED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:fe:e8:2a:46:83:13:b7:5a:ec:c4:d1:21:48:
d3:e9:10:19:e5:7c:e5:65:9a:ae:d8:b3:3a:50:d2:
b0:d2:c0:6c:89:25:92:e3:3a:c8:0c:aa:d3:bf:30:
39:17:82:0d:31:08:3f:3a:de:11:49:37:31:ad:7c:
c3:8e:9a:1a:5d:7c:aa:ce:c1:22:0b:16:16:02:a0:
27:59:a1:77:eb:9a:7d:4f:49:53:bd:24:86:3a:1f:
76:59:9a:68:cc:7f:4f:be:ee:47:af:24:84:70:7a:
d8:27:ff:c9:09:c0:10:1c:78:bc:19:d6:eb:d4:5d:
a3:8f:89:19:f0:21:c4:f7:f5:c2:a0:f5:c9:35:71:
51:6b:c0:09:93:92:b6:49:d2:99:5e:b9:da:5e:71:
e3:28:af:9f:9e:a8:3e:2e:0f:66:c7:8f:08:40:f9:
c3:13:15:d7:12:cd:90:a1:6e:79:2f:9e:d6:4c:c4:
cc:47:cf:c1:dd:82:d0:72:0c:69:4b:0d:08:ef:28:
e8:53:d8:7a:50:2b:8c:52:83:e5:61:c8:65:37:76:
da:8c:27:d9:b1:aa:f4:bb:11:6b:42:53:08:47:fd:
24:56:2b:fa:da:4e:96:81:b5:c2:fb:e6:39:ea:9c:
ef:7a:f4:04:6a:3b:b4:7c:aa:a3:56:db:0f:1e:51:
40:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:AB:80:DE:20:41:1C:11:AD:1B:A9:14:24:7A:C3:97:3F:D6:8F:ED
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LauA3iBBHBGtG6kUJHrDlz_Wj-0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
8b:8c:8e:e3:fe:1c:39:88:8c:b1:07:a1:51:ce:0e:50:1b:67:
2c:c5:6c:2a:5e:3b:6f:92:59:c5:7d:21:2e:f9:8e:eb:bd:f2:
14:1c:5b:44:92:fc:cd:63:1b:2f:4d:31:1c:0c:4b:0c:a6:ac:
6d:fc:db:21:e8:e5:dd:57:41:63:50:7a:13:d2:4a:8a:09:6a:
f4:c4:95:3b:f1:65:0a:04:cf:92:cf:ed:3e:f8:3d:20:a3:ca:
8f:a2:da:2a:6f:75:2c:f6:07:6e:5f:a2:57:f6:7c:40:17:ab:
50:75:12:2b:4d:62:06:87:5f:f3:ce:b2:2a:5f:6b:e3:20:fb:
e0:1a:26:eb:72:55:42:f4:44:41:7f:50:c5:d0:f7:fb:5a:36:
ba:03:e9:9f:53:02:72:26:9b:03:12:8a:8b:20:26:9f:8c:4b:
37:72:09:d2:3d:7b:f1:01:bd:08:7b:f9:c0:99:30:32:29:ea:
97:90:df:b3:c4:e3:a7:e1:f0:0f:02:a3:b2:1b:1f:7f:9b:3b:
3d:87:cf:53:3a:bb:2f:44:fd:45:cc:01:74:2d:94:a4:55:bc:
41:ef:70:70:97:2c:ff:05:30:e5:1b:6c:be:55:1e:33:51:1d:
73:bc:8e:96:b3:76:aa:cd:ca:64:47:e1:67:01:87:62:18:9b:
c2:14:af:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 01:12:11 2025 by rpki-client