Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/oF_5TDHI0Pf78mwBu1hI45dZQnk.roa
File: oF_5TDHI0Pf78mwBu1hI45dZQnk.roa (raw, json)
Hash identifier: GOwCsjAwkgKM5DKlKDj3HerU7ud5difbLQ8V9nJ9GHw=
Subject key identifier: A0:5F:F9:4C:31:C8:D0:F7:FB:F2:6C:01:BB:58:48:E3:97:59:42:79
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0178
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/oF_5TDHI0Pf78mwBu1hI45dZQnk.roa
Signing time: Fri 09 May 2025 01:07:44 +0000
ROA not before: Fri 09 May 2025 01:07:44 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 376 (0x178)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 9 01:07:44 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=A05FF94C31C8D0F7FBF26C01BB5848E397594279
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:0f:55:42:8b:db:78:af:7f:5d:5c:a2:18:f5:
e2:fa:a1:6e:a4:70:51:40:df:a8:19:36:09:53:50:
d0:e8:62:98:77:83:50:9b:19:46:2b:9e:7c:51:ec:
70:81:28:93:4e:8a:98:bc:43:1c:99:61:20:16:b9:
ee:e0:5b:f7:24:69:fa:93:f1:9a:8e:b5:91:5b:d3:
eb:02:a9:de:a5:dd:5a:9c:e5:b9:51:15:9b:82:fb:
40:4e:8b:86:45:44:0f:e7:5d:db:6b:89:e3:68:7f:
39:55:33:8c:ad:67:0b:8d:22:05:fa:a0:a3:10:56:
8f:64:3f:c3:a8:3b:c3:13:f3:a6:25:0b:38:80:35:
78:cc:95:03:c7:0d:60:25:3e:af:bc:b8:52:42:12:
91:6f:c0:c3:86:d5:18:f5:83:40:c7:bc:6e:09:32:
11:6e:04:fb:7e:bf:b2:68:09:89:e3:b3:92:65:09:
81:e9:74:43:30:ea:b0:e3:a0:17:eb:66:ee:51:9a:
87:ae:c1:30:e7:53:62:d6:ac:3d:39:f6:43:ee:49:
bb:30:11:a1:2e:d0:f0:82:ca:d8:0e:a9:ca:7f:1f:
be:98:d9:97:68:c9:9e:35:4e:73:c2:9f:26:ca:55:
26:fd:5d:45:4d:99:db:09:3a:1b:ac:04:93:ae:ca:
ff:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:5F:F9:4C:31:C8:D0:F7:FB:F2:6C:01:BB:58:48:E3:97:59:42:79
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/oF_5TDHI0Pf78mwBu1hI45dZQnk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
34:d1:33:e9:de:f4:7d:ed:b6:8b:ca:1e:05:2e:7e:1a:00:29:
dc:40:60:38:fb:d9:1d:4c:c1:5e:35:0e:1b:d6:0b:ba:77:b3:
fb:f3:47:c4:60:07:cf:84:2f:78:64:3b:5d:60:62:37:4b:0f:
20:19:0d:9c:51:b0:6d:04:9a:8b:81:f2:8d:57:34:22:c1:13:
fa:7c:ef:8a:2c:6d:f6:d3:75:32:cb:d3:98:74:ab:73:09:23:
e7:7b:c1:52:98:83:53:85:64:ff:ad:5a:14:e7:38:c5:3b:17:
ff:45:61:65:e5:69:d5:ca:d4:bb:87:95:fb:fc:25:70:34:ee:
d1:4e:62:1a:c3:c1:47:b1:ac:64:c6:29:d3:a7:32:95:3e:b3:
83:48:f0:3b:be:e0:af:17:18:4d:55:0c:32:bf:e1:63:2b:3d:
c1:f0:84:b9:95:18:e4:fa:14:3f:01:88:a5:89:9e:1a:06:42:
11:66:ff:c7:a0:9b:be:dd:0a:8f:ca:27:9a:4b:42:cf:61:57:
f5:f4:af:b6:c7:91:b9:bb:ba:27:df:a9:31:37:e7:a8:81:eb:
36:52:e0:66:25:25:d3:ed:2d:db:08:aa:e5:18:02:e4:9f:0e:
ca:83:cb:40:91:18:6e:45:85:a1:d7:3d:73:2f:65:e2:c1:6f:
12:cb:05:e9
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICAXgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy
NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA1MDkw
MTA3NDRaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKEEwNUZGOTRDMzFDOEQw
RjdGQkYyNkMwMUJCNTg0OEUzOTc1OTQyNzkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC9D1VCi9t4r39dXKIY9eL6oW6kcFFA36gZNglTUNDoYph3g1Cb
GUYrnnxR7HCBKJNOipi8QxyZYSAWue7gW/ckafqT8ZqOtZFb0+sCqd6l3Vqc5blR
FZuC+0BOi4ZFRA/nXdtrieNofzlVM4ytZwuNIgX6oKMQVo9kP8OoO8MT86YlCziA
NXjMlQPHDWAlPq+8uFJCEpFvwMOG1Rj1g0DHvG4JMhFuBPt+v7JoCYnjs5JlCYHp
dEMw6rDjoBfrZu5RmoeuwTDnU2LWrD059kPuSbswEaEu0PCCytgOqcp/H76Y2Zdo
yZ41TnPCnybKVSb9XUVNmdsJOhusBJOuyv9tAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUoF/5TDHI0Pf78mwBu1hI45dZQnkwHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK
ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv
TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni9vRl81VERISTBQZjc4bXdC
dTFoSTQ1ZFpRbmsucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
fakwDQYJKoZIhvcNAQELBQADggEBADTRM+ne9H3ttovKHgUufhoAKdxAYDj72R1M
wV41DhvWC7p3s/vzR8RgB8+EL3hkO11gYjdLDyAZDZxRsG0EmouB8o1XNCLBE/p8
74osbfbTdTLL05h0q3MJI+d7wVKYg1OFZP+tWhTnOMU7F/9FYWXladXK1LuHlfv8
JXA07tFOYhrDwUexrGTGKdOnMpU+s4NI8Du+4K8XGE1VDDK/4WMrPcHwhLmVGOT6
FD8BiKWJnhoGQhFm/8egm77dCo/KJ5pLQs9hV/X0r7bHkbm7uiffqTE356iB6zZS
4GYlJdPtLdsIquUYAuSfDsqDy0CRGG5FhaHXPXMvZeLBbxLLBek=
-----END CERTIFICATE-----
Generated at Thu Jun 5 20:29:11 2025 by rpki-client