Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/8oaTo6gEpCr63AN_JNB3xuxy-_k.roa
File: 8oaTo6gEpCr63AN_JNB3xuxy-_k.roa (raw, json)
Hash identifier: bq5oJtoilDuk/kIetD/RWJJat4U22MzzPp+ZZBoH0ck=
Subject key identifier: F2:86:93:A3:A8:04:A4:2A:FA:DC:03:7F:24:D0:77:C6:EC:72:FB:F9
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 02F0
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/8oaTo6gEpCr63AN_JNB3xuxy-_k.roa
Signing time: Sun 11 May 2025 00:07:51 +0000
ROA not before: Sun 11 May 2025 00:07:51 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 752 (0x2f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 11 00:07:51 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=F28693A3A804A42AFADC037F24D077C6EC72FBF9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:4d:ae:9e:43:eb:65:b2:0c:41:e5:69:37:1c:
e3:d9:40:7c:ef:51:49:b6:71:e0:ed:4a:ff:bd:f4:
f1:5a:16:27:bc:91:cf:4c:96:89:48:6d:a3:ae:aa:
ec:1e:20:aa:69:f8:ef:ce:85:96:8f:f8:d4:41:db:
12:65:2e:8a:f1:56:dd:e8:17:18:11:99:62:2f:6e:
26:c7:d1:77:fe:a3:1c:cf:d6:4d:6e:a8:c7:24:aa:
55:d1:20:7b:79:74:4b:0d:78:fe:ac:48:83:94:b6:
69:36:58:ad:ba:7f:8e:ee:ad:6d:07:cc:22:8b:11:
eb:e2:ce:85:2a:aa:24:93:d9:3b:91:46:d3:fb:71:
3e:44:b8:a9:80:a1:f9:ba:a5:76:9b:1a:de:af:8c:
3d:57:c4:cd:91:f4:91:f5:43:4f:3a:0a:bc:4a:12:
2a:6b:08:6d:81:ac:1c:e7:a7:b2:44:34:8c:42:a3:
61:d8:6e:ce:5c:5b:35:ee:55:38:84:ad:83:d2:ba:
0c:20:28:a4:9f:88:43:7a:e3:52:12:6f:9d:f1:cb:
64:b6:7f:70:4e:eb:9e:08:6e:07:d6:53:a1:71:2b:
cf:36:c1:bd:d9:7f:c2:be:99:84:eb:8a:3c:b2:e3:
88:af:25:3b:60:9c:4b:37:db:c7:72:f9:42:ca:cb:
ea:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:86:93:A3:A8:04:A4:2A:FA:DC:03:7F:24:D0:77:C6:EC:72:FB:F9
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/8oaTo6gEpCr63AN_JNB3xuxy-_k.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
8e:c2:17:a9:6f:ad:f8:16:87:83:78:87:f7:5b:dd:c6:dd:53:
31:6a:a0:38:47:11:c7:59:22:fe:fe:da:08:00:a1:aa:bd:54:
f5:47:43:a4:26:1e:7b:ab:63:a1:1c:60:a1:3d:b1:ac:14:b4:
c0:7d:f3:c0:de:fa:8e:2d:31:97:04:91:ad:4c:16:07:0e:77:
8d:ed:5c:53:a4:bc:34:48:e2:d1:66:a5:b2:61:99:06:a8:df:
19:04:fd:5f:34:1e:10:3b:94:70:e2:89:42:c1:80:b2:96:de:
2b:79:f3:89:07:bd:5d:b1:69:15:f9:af:2d:fa:1b:c4:43:99:
64:c4:45:5c:60:19:3e:3c:d4:0c:c0:17:35:01:d3:4f:e7:a4:
92:db:9e:fb:9b:a6:bf:8c:a2:7c:03:8e:70:6f:fc:90:4a:6d:
fe:3d:6c:31:62:c3:c8:be:83:03:dd:c8:6d:96:80:b3:9f:f2:
54:de:eb:53:66:e8:5c:b8:b5:8b:76:73:1b:93:a0:a6:66:1c:
77:1d:af:cc:6c:e8:f9:d2:da:b5:d3:a4:8d:09:f7:fc:3b:0c:
0f:a5:cf:92:87:59:09:c2:c7:a2:32:d7:7d:ec:3d:96:1e:e2:
f9:ce:7c:07:f5:bf:43:19:8a:b1:25:d7:09:55:1e:14:5f:7e:
96:32:f1:02
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICAvAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy
NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA1MTEw
MDA3NTFaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKEYyODY5M0EzQTgwNEE0
MkFGQURDMDM3RjI0RDA3N0M2RUM3MkZCRjkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDSTa6eQ+tlsgxB5Wk3HOPZQHzvUUm2ceDtSv+99PFaFie8kc9M
lolIbaOuquweIKpp+O/OhZaP+NRB2xJlLorxVt3oFxgRmWIvbibH0Xf+oxzP1k1u
qMckqlXRIHt5dEsNeP6sSIOUtmk2WK26f47urW0HzCKLEevizoUqqiST2TuRRtP7
cT5EuKmAofm6pXabGt6vjD1XxM2R9JH1Q086CrxKEiprCG2BrBznp7JENIxCo2HY
bs5cWzXuVTiErYPSugwgKKSfiEN641ISb53xy2S2f3BO654IbgfWU6FxK882wb3Z
f8K+mYTrijyy44ivJTtgnEs328dy+ULKy+pxAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQU8oaTo6gEpCr63AN/JNB3xuxy+/kwHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK
ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv
TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni84b2FUbzZnRXBDcjYzQU5f
Sk5CM3h1eHktX2sucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
fakwDQYJKoZIhvcNAQELBQADggEBAI7CF6lvrfgWh4N4h/db3cbdUzFqoDhHEcdZ
Iv7+2ggAoaq9VPVHQ6QmHnurY6EcYKE9sawUtMB988De+o4tMZcEka1MFgcOd43t
XFOkvDRI4tFmpbJhmQao3xkE/V80HhA7lHDiiULBgLKW3it584kHvV2xaRX5ry36
G8RDmWTERVxgGT481AzAFzUB00/npJLbnvubpr+MonwDjnBv/JBKbf49bDFiw8i+
gwPdyG2WgLOf8lTe61Nm6Fy4tYt2cxuToKZmHHcdr8xs6PnS2rXTpI0J9/w7DA+l
z5KHWQnCx6Iy133sPZYe4vnOfAf1v0MZirEl1wlVHhRffpYy8QI=
-----END CERTIFICATE-----
Generated at Sun May 18 23:15:02 2025 by rpki-client