Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/IBfieQ3-wsrsjxPgEJDZE1VOujk.roa
File: IBfieQ3-wsrsjxPgEJDZE1VOujk.roa (raw, json)
Hash identifier: Q51UnRM3lF2ixAzOTW27QqFnDonGx164fJkZ48kDatc=
Subject key identifier: 20:17:E2:79:0D:FE:C2:CA:EC:8F:13:E0:10:90:D9:13:55:4E:BA:39
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 03E8
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/IBfieQ3-wsrsjxPgEJDZE1VOujk.roa
Signing time: Mon 12 May 2025 07:07:58 +0000
ROA not before: Mon 12 May 2025 07:07:58 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1000 (0x3e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 12 07:07:58 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=2017E2790DFEC2CAEC8F13E01090D913554EBA39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:05:0f:45:7a:37:64:cb:2b:72:42:a8:18:66:
6b:5b:6e:c0:9c:ad:19:d8:5e:28:56:21:39:b3:dd:
d6:e3:a2:81:03:4d:b4:fd:81:71:aa:1f:b1:9f:23:
d1:58:9a:90:fd:ad:da:29:9d:1e:3d:ee:71:ec:0d:
f8:f5:d8:c6:dc:bc:ce:21:84:78:32:3e:9a:8d:fe:
e9:af:50:29:a7:1b:ad:d3:fe:27:a0:09:8a:54:6e:
2a:5a:e9:b3:10:5f:61:22:ee:95:64:92:d5:7b:f5:
1e:ad:d5:c5:e6:62:24:84:c5:13:85:30:67:ae:d6:
69:44:10:83:9d:c8:48:23:88:94:da:a3:d6:17:40:
7f:40:86:8d:b8:1d:92:9f:18:2f:33:29:80:a9:f9:
0f:77:cd:ff:0a:8a:ba:62:07:8a:21:e4:78:c9:43:
b6:ae:f0:d0:ba:1a:a2:75:bd:f3:ea:79:77:7c:a5:
a4:a1:e9:19:1a:20:39:6a:53:cf:ff:80:2d:41:00:
7f:86:ce:4a:3c:d5:41:bc:86:d3:be:4f:e2:e2:23:
ce:22:54:c1:97:13:2e:d2:42:f1:d4:43:22:ce:ce:
ec:ce:91:21:49:db:5f:76:70:15:a4:9b:54:f4:bf:
dc:75:2d:58:ab:90:75:79:9e:41:93:69:11:01:99:
d2:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:17:E2:79:0D:FE:C2:CA:EC:8F:13:E0:10:90:D9:13:55:4E:BA:39
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/IBfieQ3-wsrsjxPgEJDZE1VOujk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
3a:81:e6:07:01:16:67:75:6c:f7:bb:1f:0b:68:c7:e0:6a:89:
2b:25:a8:e4:f9:34:f0:a0:a0:88:a1:2c:98:b0:c7:66:40:ac:
9f:1f:57:32:81:42:e6:89:75:b4:6e:2d:29:12:5f:c1:38:84:
c9:36:57:36:02:39:63:2d:bf:3b:df:b0:85:15:35:93:56:8f:
df:1c:7e:4c:37:5f:db:3c:6a:28:db:41:81:a4:b4:b6:c8:7a:
aa:79:05:01:30:5b:e5:51:b8:26:00:46:69:c2:7b:10:2e:63:
c6:04:b3:2d:e4:a0:2f:53:56:a9:b6:a5:8d:b6:4d:5f:3e:02:
e2:96:8c:91:45:98:6b:cf:fc:df:28:89:3f:5e:ba:2f:d7:44:
11:7c:21:1c:d7:ff:3d:21:8c:89:6b:5e:2e:57:74:ac:f8:80:
6c:6d:0c:80:9b:9e:a0:5c:35:c3:49:f0:8f:98:0a:fb:06:fc:
30:ec:73:7b:44:7a:05:e9:4d:ad:bb:7d:89:56:f5:9c:61:cd:
cb:c8:28:e2:0e:5c:c2:38:ed:0d:6a:cb:31:31:24:09:c1:bb:
59:dc:49:e1:95:fd:67:39:80:06:98:c1:27:c8:5a:05:5e:60:
3f:de:df:6f:85:8b:ba:42:66:2a:1e:be:f4:08:6b:cc:14:d1:
79:05:08:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 02:16:28 2025 by rpki-client