Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/LJzEteZEIqp-mIetejJElqg2m54.roa
File: LJzEteZEIqp-mIetejJElqg2m54.roa (raw, json)
Hash identifier: td6GgrULsg8Wtt7p/OJ1vBkdERZauQnB4lg3w3pclYc=
Subject key identifier: 2C:9C:C4:B5:E6:44:22:AA:7E:98:87:AD:7A:32:44:96:A8:36:9B:9E
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0240
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LJzEteZEIqp-mIetejJElqg2m54.roa
Signing time: Sat 10 May 2025 02:07:49 +0000
ROA not before: Sat 10 May 2025 02:07:49 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 576 (0x240)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 10 02:07:49 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=2C9CC4B5E64422AA7E9887AD7A324496A8369B9E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:29:ff:ee:33:10:d4:67:cc:cf:70:35:47:7e:
9d:12:58:87:c2:c7:a1:c1:6d:03:62:4a:8c:cf:0b:
6f:9f:a3:98:d2:2f:26:1f:a8:e4:ca:e3:1e:2b:fe:
f7:1b:58:85:22:48:13:01:53:51:a5:0b:9a:6e:d2:
6a:45:67:c9:73:cb:d7:12:f3:ed:23:a5:bd:5f:84:
af:7f:82:3d:34:59:c8:7f:e3:c5:d3:dc:4c:da:6f:
c7:d4:8c:92:63:c6:d2:e8:53:44:c3:2e:d3:88:15:
35:5f:ca:de:0e:5a:4f:9c:1e:76:9f:0a:36:72:fa:
39:1e:70:0e:9b:d8:6e:af:79:8d:1b:de:bb:63:5a:
95:af:e2:16:80:20:90:3c:08:a3:7c:74:35:09:89:
2c:c4:d5:29:36:06:b9:ba:92:34:dc:3a:59:77:44:
d8:0e:50:8e:1a:4f:d5:5f:b3:a3:3a:e9:f3:50:8e:
78:26:d9:3c:74:eb:3b:5f:1d:0f:b2:37:d1:e7:9c:
34:50:00:4e:be:55:aa:cd:89:d4:19:ee:1e:76:a9:
cd:d6:06:a4:bb:34:14:7d:5a:9f:83:35:3d:cb:87:
e6:9c:56:b5:bb:2a:0a:f5:86:18:7c:0f:42:4b:8c:
52:fc:43:32:a5:55:10:b6:8c:e8:60:29:2b:2b:9b:
c6:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:9C:C4:B5:E6:44:22:AA:7E:98:87:AD:7A:32:44:96:A8:36:9B:9E
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LJzEteZEIqp-mIetejJElqg2m54.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
07:e4:18:88:ad:73:03:23:b9:e8:a7:7e:4d:11:d5:92:33:dd:
6e:54:c4:ae:e0:a8:b9:19:56:70:a6:6d:95:dd:1e:fa:a1:1a:
7b:5c:f6:84:a6:5b:4b:8b:2f:59:54:62:52:88:6a:01:71:16:
ef:db:5c:40:44:f4:80:95:b7:09:60:17:aa:05:b4:20:10:49:
9f:8d:74:0b:9b:e7:ca:f9:77:f3:0a:ab:1a:08:16:d9:b6:e7:
c0:56:77:3f:77:67:4a:f8:ac:85:ac:70:f3:23:15:76:b7:e4:
be:e3:14:f9:3c:a2:99:fc:8a:8f:70:ac:90:91:28:ff:5e:20:
2a:38:0f:fb:b2:38:a0:2d:f5:38:97:32:4b:a8:77:ef:59:72:
a0:ae:04:86:8b:0a:1e:4d:87:5b:6e:90:af:f0:43:16:a5:93:
71:c3:e5:be:88:0d:79:eb:ec:42:ec:16:07:4b:84:f2:6b:69:
ca:4a:c8:97:f4:37:a4:ca:c4:e7:6b:11:bd:94:16:74:37:e4:
a3:ca:2a:6e:3b:e7:fa:dd:16:2c:52:44:d9:f7:bb:93:f3:9d:
ac:8e:f1:98:fc:5e:60:cf:c9:8e:2f:6d:1f:f4:69:ad:36:95:
cf:d3:ed:9e:39:bf:30:8f:60:0e:3e:79:64:44:da:89:7f:cf:
f8:a2:6d:0d
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICAkAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy
NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA1MTAw
MjA3NDlaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKDJDOUNDNEI1RTY0NDIy
QUE3RTk4ODdBRDdBMzI0NDk2QTgzNjlCOUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDDKf/uMxDUZ8zPcDVHfp0SWIfCx6HBbQNiSozPC2+fo5jSLyYf
qOTK4x4r/vcbWIUiSBMBU1GlC5pu0mpFZ8lzy9cS8+0jpb1fhK9/gj00Wch/48XT
3Ezab8fUjJJjxtLoU0TDLtOIFTVfyt4OWk+cHnafCjZy+jkecA6b2G6veY0b3rtj
WpWv4haAIJA8CKN8dDUJiSzE1Sk2Brm6kjTcOll3RNgOUI4aT9Vfs6M66fNQjngm
2Tx06ztfHQ+yN9HnnDRQAE6+VarNidQZ7h52qc3WBqS7NBR9Wp+DNT3Lh+acVrW7
Kgr1hhh8D0JLjFL8QzKlVRC2jOhgKSsrm8YlAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQULJzEteZEIqp+mIetejJElqg2m54wHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK
ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv
TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni9MSnpFdGVaRUlxcC1tSWV0
ZWpKRWxxZzJtNTQucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
fakwDQYJKoZIhvcNAQELBQADggEBAAfkGIitcwMjueinfk0R1ZIz3W5UxK7gqLkZ
VnCmbZXdHvqhGntc9oSmW0uLL1lUYlKIagFxFu/bXEBE9ICVtwlgF6oFtCAQSZ+N
dAub58r5d/MKqxoIFtm258BWdz93Z0r4rIWscPMjFXa35L7jFPk8opn8io9wrJCR
KP9eICo4D/uyOKAt9TiXMkuod+9ZcqCuBIaLCh5Nh1tukK/wQxalk3HD5b6IDXnr
7ELsFgdLhPJracpKyJf0N6TKxOdrEb2UFnQ35KPKKm475/rdFixSRNn3u5PznayO
8Zj8XmDPyY4vbR/0aa02lc/T7Z45vzCPYA4+eWRE2ol/z/iibQ0=
-----END CERTIFICATE-----
Generated at Sat May 17 21:32:27 2025 by rpki-client