Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/GSl_ZVEU52e1zLWSac8sEdhRKv4.roa
File: GSl_ZVEU52e1zLWSac8sEdhRKv4.roa (raw, json)
Hash identifier: 8kaUI7b61wVD4H0PZp4chcikscSrwCRVyZH4qi+bdzc=
Subject key identifier: 19:29:7F:65:51:14:E7:67:B5:CC:B5:92:69:CF:2C:11:D8:51:2A:FE
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 2474
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/GSl_ZVEU52e1zLWSac8sEdhRKv4.roa
Signing time: Wed 25 Jun 2025 04:12:15 +0000
ROA not before: Wed 25 Jun 2025 04:12:15 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9332 (0x2474)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 25 04:12:15 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=19297F655114E767B5CCB59269CF2C11D8512AFE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:98:89:5d:b5:ee:92:2f:01:c1:6c:ba:78:2d:
77:7c:bd:8e:b3:d1:76:b6:d9:da:45:1c:ed:54:a8:
a9:41:38:2c:d5:f0:ff:4b:3c:d2:12:8e:76:68:e4:
c9:a9:de:d7:51:4e:81:e1:5c:c8:34:07:6c:64:6f:
74:dd:7f:d1:0a:3c:9a:b2:dd:ff:6b:3c:ba:2c:8b:
09:48:e0:cd:92:c2:9c:79:5f:3f:4e:73:8e:4f:1b:
f3:d0:82:0c:40:b9:c6:e1:3a:56:bd:86:24:3c:b4:
a3:ae:34:70:ff:ca:19:08:3e:5d:39:4e:d7:67:27:
9c:11:d1:df:88:7d:a5:06:52:8d:99:88:80:63:fe:
1d:cc:c3:5a:ba:6e:bd:c3:ad:23:27:70:39:fd:19:
45:9c:77:ca:c0:af:77:d2:f1:81:79:75:2c:6b:2e:
b8:17:78:88:8a:cd:03:1b:72:1f:54:81:67:1f:5a:
68:3c:37:25:9b:34:da:af:f1:7a:c7:a0:c1:85:5f:
63:9e:f0:c3:06:e9:63:f5:e9:a4:1b:9d:9a:61:27:
d4:fd:89:c1:b5:21:30:51:16:b5:f7:28:17:2e:9a:
95:96:0c:46:90:64:38:0f:e0:7f:28:4d:d9:45:3f:
8f:c8:8b:79:bd:c6:80:7f:9f:56:41:5c:29:6b:b1:
4a:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:29:7F:65:51:14:E7:67:B5:CC:B5:92:69:CF:2C:11:D8:51:2A:FE
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/GSl_ZVEU52e1zLWSac8sEdhRKv4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
45:05:54:36:60:32:49:ec:59:c3:c6:42:ab:ab:b5:ce:ea:c5:
76:18:67:5c:d9:2d:20:12:d7:2f:ae:c8:39:ca:ac:ac:55:8d:
b4:72:4d:d4:15:7d:b8:60:c9:87:97:7d:e1:ac:42:91:e4:df:
8b:3d:37:0c:9e:d0:57:ec:99:75:2e:b1:8d:5d:58:2e:c3:56:
db:82:a1:d7:7e:d0:02:b3:f8:a4:64:97:de:0c:0f:f0:07:16:
8e:40:41:88:20:ff:1f:8d:65:85:3d:d1:b1:25:ec:1b:eb:33:
c2:48:10:0b:ff:bb:59:23:74:0f:0b:40:ea:1e:21:1d:cd:35:
dd:b4:ba:3c:5f:03:72:ac:12:55:be:bb:df:17:ab:8d:25:aa:
16:6f:c0:bd:26:18:a2:3a:ae:23:51:71:94:5f:3b:ce:8c:e9:
7a:e5:dd:54:f6:c7:ba:c9:bf:de:dd:09:fd:0a:54:a9:8c:4c:
65:d9:56:27:06:63:f7:58:96:27:09:b6:09:ab:95:37:88:0b:
9c:40:51:0a:be:33:be:5d:63:b0:36:89:b3:9c:0e:5c:1b:cf:
41:f4:78:38:17:c5:5a:20:75:58:da:4f:de:eb:12:57:e1:b0:
bf:40:96:06:5e:8d:ce:6b:99:1e:ab:6c:c1:91:a2:4b:de:c8:
98:82:9f:4d
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICJHQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy
NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA2MjUw
NDEyMTVaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKDE5Mjk3RjY1NTExNEU3
NjdCNUNDQjU5MjY5Q0YyQzExRDg1MTJBRkUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDamIldte6SLwHBbLp4LXd8vY6z0Xa22dpFHO1UqKlBOCzV8P9L
PNISjnZo5Mmp3tdRToHhXMg0B2xkb3Tdf9EKPJqy3f9rPLosiwlI4M2Swpx5Xz9O
c45PG/PQggxAucbhOla9hiQ8tKOuNHD/yhkIPl05TtdnJ5wR0d+IfaUGUo2ZiIBj
/h3Mw1q6br3DrSMncDn9GUWcd8rAr3fS8YF5dSxrLrgXeIiKzQMbch9UgWcfWmg8
NyWbNNqv8XrHoMGFX2Oe8MMG6WP16aQbnZphJ9T9icG1ITBRFrX3KBcumpWWDEaQ
ZDgP4H8oTdlFP4/Ii3m9xoB/n1ZBXClrsUqHAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUGSl/ZVEU52e1zLWSac8sEdhRKv4wHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK
ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv
TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni9HU2xfWlZFVTUyZTF6TFdT
YWM4c0VkaFJLdjQucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
fakwDQYJKoZIhvcNAQELBQADggEBAEUFVDZgMknsWcPGQqurtc7qxXYYZ1zZLSAS
1y+uyDnKrKxVjbRyTdQVfbhgyYeXfeGsQpHk34s9Nwye0FfsmXUusY1dWC7DVtuC
odd+0AKz+KRkl94MD/AHFo5AQYgg/x+NZYU90bEl7BvrM8JIEAv/u1kjdA8LQOoe
IR3NNd20ujxfA3KsElW+u98Xq40lqhZvwL0mGKI6riNRcZRfO86M6Xrl3VT2x7rJ
v97dCf0KVKmMTGXZVicGY/dYlicJtgmrlTeIC5xAUQq+M75dY7A2ibOcDlwbz0H0
eDgXxVogdVjaT97rElfhsL9AlgZejc5rmR6rbMGRokveyJiCn00=
-----END CERTIFICATE-----
Generated at Sun Jul 20 13:02:27 2025 by rpki-client