Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/1ELmReFE8sLG0JQlUxgno7oJZDs.roa
File: 1ELmReFE8sLG0JQlUxgno7oJZDs.roa (raw, json)
Hash identifier: JsjirqTmjV0PARuyjuBMf7pN3lJ8Uv5pHlqjeOYwl9c=
Subject key identifier: D4:42:E6:45:E1:44:F2:C2:C6:D0:94:25:53:18:27:A3:BA:09:64:3B
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0AE8
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/1ELmReFE8sLG0JQlUxgno7oJZDs.roa
Signing time: Wed 21 May 2025 15:08:33 +0000
ROA not before: Wed 21 May 2025 15:08:33 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2792 (0xae8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 21 15:08:33 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=D442E645E144F2C2C6D09425531827A3BA09643B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:54:04:a0:24:db:fe:e3:7f:e6:ab:19:9b:f3:
db:aa:bb:86:e0:24:5a:0d:54:6d:40:a3:95:95:a9:
4b:db:15:8c:83:75:9d:b8:4c:d2:85:d6:1a:54:2c:
cc:c6:0e:16:a5:16:44:5b:9a:5b:0d:1d:4c:9d:2c:
1b:3c:16:fe:91:69:98:df:aa:1f:09:92:5a:91:99:
76:98:45:18:c0:55:e9:b3:11:12:a6:dc:83:1c:a7:
78:4b:15:39:18:f0:b6:81:42:05:26:d1:59:19:39:
d9:21:ce:27:ea:8b:6f:fe:b6:50:8e:5b:66:51:e6:
1e:46:14:8d:7c:1b:a5:20:de:20:ef:d7:23:39:a1:
98:18:31:bd:78:91:a9:58:bb:fd:7b:b3:93:a7:05:
c5:51:95:64:1c:e6:b9:d3:ec:6a:08:51:f8:f8:f1:
a2:58:1f:5c:ac:dc:55:41:ea:6b:f0:27:38:30:9b:
bb:53:9e:88:f3:12:50:74:a2:39:62:33:d1:82:1a:
a0:ce:cb:5a:83:59:d2:9e:12:68:62:79:65:9c:fd:
6b:bb:10:ee:c6:40:5b:01:bb:ec:f4:eb:60:a3:1e:
3e:bc:49:30:69:8c:f8:af:8e:3b:c2:b8:fd:1e:a5:
80:57:6c:a2:99:21:cd:28:99:b6:c4:49:a7:2f:0d:
e7:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:42:E6:45:E1:44:F2:C2:C6:D0:94:25:53:18:27:A3:BA:09:64:3B
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/1ELmReFE8sLG0JQlUxgno7oJZDs.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
44:12:e5:1f:42:4c:18:ec:3c:b4:5b:da:e2:b2:d4:42:e0:da:
7a:a9:0c:a2:69:9c:6f:36:76:ea:a3:d2:ad:96:62:18:8b:7b:
74:8d:ed:37:d0:77:63:f7:86:44:80:66:3f:60:c9:7f:e9:df:
d5:a5:86:bc:62:6d:a0:08:c3:23:4b:3b:4a:a7:aa:c8:43:d8:
7f:4f:1f:a4:a3:5e:ba:90:aa:a1:91:74:bf:d5:6f:77:de:b4:
0c:e8:4a:c1:62:6a:b8:3e:8d:72:c9:a4:9d:3e:14:cc:14:4f:
55:7d:60:bf:a1:b4:ee:6b:f8:0f:51:52:12:04:2d:fd:2c:aa:
9e:23:d1:d3:26:fe:99:ce:47:ce:39:a3:87:95:73:a8:03:d1:
00:e1:12:6a:93:45:ef:bc:02:c2:9c:35:8c:5c:a2:6a:3e:f3:
cb:dc:21:4f:0a:9c:4b:5f:d8:07:83:71:6f:19:2c:d0:7f:c6:
9f:8d:5d:e4:63:26:22:b5:03:82:d8:b1:2f:42:13:d4:e2:5f:
e0:ee:29:c4:90:09:fd:42:77:26:e6:01:24:d9:f4:cc:3c:61:
3b:a6:b1:0e:a6:f4:4c:ad:88:72:8a:d7:52:dd:b5:de:b9:6c:
a3:67:39:8e:b5:55:0b:ce:4c:4c:13:98:4c:8b:46:0e:5f:bd:
e3:f4:d1:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 01:06:18 2025 by rpki-client