Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/OhcL3bJm6Kry2yjj7b6ymfnzsIA.roa
File: OhcL3bJm6Kry2yjj7b6ymfnzsIA.roa (raw, json)
Hash identifier: 3lr4hhBLSjDd0Qa9OuckrHLDNz0yWltgCCsr0JFn5l8=
Subject key identifier: 3A:17:0B:DD:B2:66:E8:AA:F2:DB:28:E3:ED:BE:B2:99:F9:F3:B0:80
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 212C
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/OhcL3bJm6Kry2yjj7b6ymfnzsIA.roa
Signing time: Fri 20 Jun 2025 19:11:40 +0000
ROA not before: Fri 20 Jun 2025 19:11:40 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8492 (0x212c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 20 19:11:40 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=3A170BDDB266E8AAF2DB28E3EDBEB299F9F3B080
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:0d:fb:3f:fb:93:00:4c:24:6c:e8:8e:c6:9c:
08:ef:69:ee:42:26:d5:8f:69:96:ee:4a:19:cc:6a:
77:03:05:0e:89:f5:3f:51:ab:7f:42:6b:01:c0:9c:
3e:f8:c7:25:a5:45:8f:a6:75:13:88:bc:92:fa:c0:
08:b6:3f:d6:5a:9d:15:ac:ec:61:26:d8:5b:c7:e7:
7e:dd:28:48:8a:1c:ee:53:ab:82:72:44:11:46:c4:
c8:0c:ce:39:d5:54:09:17:d5:38:de:2e:27:65:c9:
76:30:7f:b3:12:69:c5:50:5b:f0:27:f8:b3:ee:fc:
e9:92:3e:40:d9:de:4f:21:f6:ad:60:76:53:bb:f2:
ab:84:9a:9a:1d:e2:62:69:93:c7:47:cf:4f:d1:95:
e9:f4:9b:c0:19:bf:bb:ea:64:fe:af:74:9a:32:e2:
d8:49:8d:4d:6d:cb:ee:4b:a1:f0:91:b9:d3:aa:71:
bb:da:4a:71:7f:8f:ca:d1:a1:cf:3a:8c:28:35:33:
99:11:7c:d5:f4:2f:e5:e3:92:de:91:db:f8:37:4b:
f1:7b:d0:ae:8d:d3:d6:82:ee:60:30:e6:52:fe:6e:
8b:6a:25:89:bf:07:7e:b0:a9:64:7f:a8:3b:06:cf:
c2:d8:e8:79:a3:78:50:ed:e6:df:5b:bf:c7:8f:fc:
0b:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:17:0B:DD:B2:66:E8:AA:F2:DB:28:E3:ED:BE:B2:99:F9:F3:B0:80
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/OhcL3bJm6Kry2yjj7b6ymfnzsIA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
54:95:3a:f1:9b:50:5c:37:32:70:51:c7:43:8b:08:dd:44:89:
b2:f2:0a:83:c8:99:4e:2d:7a:1a:98:5f:3c:3e:d4:1f:3f:b3:
77:13:15:8f:b5:2b:69:b9:06:7c:f2:37:59:68:1c:19:14:a7:
cf:71:9e:e8:62:c9:34:d3:0e:52:0c:b3:d6:6a:1d:12:1f:df:
15:d4:80:2d:1a:b7:61:8f:68:c8:d6:16:bc:16:64:5c:ad:1f:
97:38:e6:7b:10:dc:01:89:21:c8:84:1b:00:11:bf:51:ad:92:
92:9b:3f:f2:23:5f:ab:be:9b:d4:aa:2a:eb:a1:76:a4:67:6f:
d6:b6:7d:18:3e:2e:39:ba:6f:a2:57:d7:c1:09:ef:26:ee:89:
4d:d8:a3:24:12:cf:c7:be:a5:b6:6a:5d:59:52:4d:c2:a1:d0:
d1:84:04:67:09:e5:61:fb:53:2f:2a:ed:93:82:3a:01:fb:77:
18:da:95:80:00:31:f5:e2:a0:0f:8b:74:5a:16:3f:35:e9:69:
22:64:46:2f:c4:d2:74:bc:a0:4e:bd:34:4e:32:42:64:a0:da:
1f:a7:ab:77:2c:5f:e7:96:b2:e6:30:f0:96:2f:a6:2e:57:47:
e6:4d:c7:86:4f:cd:6f:f9:02:b1:16:4b:08:c7:e0:b0:1b:12:
17:85:06:52
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICISwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy
NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA2MjAx
OTExNDBaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKDNBMTcwQkREQjI2NkU4
QUFGMkRCMjhFM0VEQkVCMjk5RjlGM0IwODAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDfDfs/+5MATCRs6I7GnAjvae5CJtWPaZbuShnMancDBQ6J9T9R
q39CawHAnD74xyWlRY+mdROIvJL6wAi2P9ZanRWs7GEm2FvH537dKEiKHO5Tq4Jy
RBFGxMgMzjnVVAkX1TjeLidlyXYwf7MSacVQW/An+LPu/OmSPkDZ3k8h9q1gdlO7
8quEmpod4mJpk8dHz0/Rlen0m8AZv7vqZP6vdJoy4thJjU1ty+5LofCRudOqcbva
SnF/j8rRoc86jCg1M5kRfNX0L+Xjkt6R2/g3S/F70K6N09aC7mAw5lL+botqJYm/
B36wqWR/qDsGz8LY6HmjeFDt5t9bv8eP/AsnAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUOhcL3bJm6Kry2yjj7b6ymfnzsIAwHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK
ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv
TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni9PaGNMM2JKbTZLcnkyeWpq
N2I2eW1mbnpzSUEucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
fakwDQYJKoZIhvcNAQELBQADggEBAFSVOvGbUFw3MnBRx0OLCN1EibLyCoPImU4t
ehqYXzw+1B8/s3cTFY+1K2m5BnzyN1loHBkUp89xnuhiyTTTDlIMs9ZqHRIf3xXU
gC0at2GPaMjWFrwWZFytH5c45nsQ3AGJIciEGwARv1GtkpKbP/IjX6u+m9SqKuuh
dqRnb9a2fRg+Ljm6b6JX18EJ7ybuiU3YoyQSz8e+pbZqXVlSTcKh0NGEBGcJ5WH7
Uy8q7ZOCOgH7dxjalYAAMfXioA+LdFoWPzXpaSJkRi/E0nS8oE69NE4yQmSg2h+n
q3csX+eWsuYw8JYvpi5XR+ZNx4ZPzW/5ArEWSwjH4LAbEheFBlI=
-----END CERTIFICATE-----
Generated at Sun Jul 20 23:13:31 2025 by rpki-client