Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/lplMKUThl2S_811KOPn65U0vAVY.roa
File: lplMKUThl2S_811KOPn65U0vAVY.roa (raw, json)
Hash identifier: XJcweE2Ktnaq306sdkbMsgaCM3IB3oBc5A+t8FQL2kU=
Subject key identifier: 96:99:4C:29:44:E1:97:64:BF:F3:5D:4A:38:F9:FA:E5:4D:2F:01:56
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 01E8
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/lplMKUThl2S_811KOPn65U0vAVY.roa
Signing time: Fri 09 May 2025 15:08:14 +0000
ROA not before: Fri 09 May 2025 15:08:14 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 488 (0x1e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 9 15:08:14 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=96994C2944E19764BFF35D4A38F9FAE54D2F0156
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:12:e9:f0:26:2e:47:7a:6c:61:66:fb:ce:90:
09:3d:6c:de:61:9d:b4:8b:d6:bf:29:20:bf:ea:f5:
d6:07:53:f8:4f:e8:d0:7b:51:d7:d2:97:dd:e5:f1:
bd:d5:fa:e6:2d:bb:c5:26:ac:14:e1:5a:8d:c3:7d:
cd:30:46:dc:d3:07:56:56:40:e9:10:aa:54:c4:33:
62:1c:83:d7:11:c6:16:0a:92:b8:25:e4:b4:81:3e:
20:9f:77:02:b4:bc:97:4c:fd:c0:62:f0:63:17:29:
a4:2d:4b:57:bb:b5:02:a4:dd:e2:9e:13:2f:3f:02:
74:b1:61:ff:0b:b3:eb:35:33:65:71:3a:9f:67:aa:
57:62:d4:18:c4:91:3b:c3:be:1a:b8:81:87:ab:ed:
66:12:cb:ef:ff:dc:34:d6:22:aa:c3:38:a4:f0:12:
dd:56:bd:b7:01:b2:43:b3:d1:e2:2a:20:da:f2:ff:
00:3f:0d:04:67:bf:5c:50:2e:35:c5:b4:65:3d:78:
58:2b:ad:0f:af:34:d9:55:f1:81:72:e0:47:32:80:
12:b5:61:3e:09:65:ca:d4:cb:c8:4a:c9:cb:d6:17:
f1:8d:d1:58:b8:bf:b9:b5:d7:af:8f:9b:86:73:cc:
9a:ff:9f:47:fc:02:81:31:45:27:11:6e:f2:d9:f7:
cc:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:99:4C:29:44:E1:97:64:BF:F3:5D:4A:38:F9:FA:E5:4D:2F:01:56
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/lplMKUThl2S_811KOPn65U0vAVY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
48:76:f6:be:6a:f7:e9:b9:ae:3a:57:cd:31:83:fe:ab:32:fe:
58:6a:bc:ae:a9:b8:55:7f:a6:6e:bd:f4:c7:ee:8f:ff:46:75:
9d:fd:d0:9c:a5:42:0b:9d:c7:5b:e5:a5:e5:1e:78:e0:ef:9e:
c4:9a:af:4b:87:9a:57:a7:13:89:b0:75:08:5f:55:bb:1d:f6:
c4:57:78:85:71:38:7b:a8:f1:09:20:f1:c5:02:be:3e:5f:f4:
74:c9:07:0c:d1:5a:a2:e9:4c:63:29:df:79:62:ef:e4:03:7f:
91:c2:b8:ed:78:48:5d:c5:22:58:ea:ec:27:76:8b:98:6c:95:
d1:a0:51:41:b4:5a:d6:1a:bc:3c:8d:f9:e1:38:3d:ec:ce:b4:
a2:be:5b:f8:69:22:f3:e1:10:e6:6c:62:6b:81:5b:49:ab:91:
64:6a:64:34:d2:9a:12:5e:c1:3d:f3:b7:d7:17:4e:65:08:23:
9f:af:de:21:d7:26:1b:a1:27:c2:f4:b3:b1:5b:7a:b2:1b:15:
59:e9:ec:7e:60:a4:c3:25:d7:60:14:ec:91:e7:74:5c:7e:a4:
1a:b0:7f:29:23:fc:fa:67:00:69:53:af:2c:bc:44:6e:4d:a9:
42:b4:c3:a5:c1:70:dd:cd:a8:90:9c:31:6b:87:71:a3:fa:9a:
22:4f:a8:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 23:42:19 2025 by rpki-client