Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/oKgeU-8SYBBJ515PJxfYVBCGJ4I.roa
File: oKgeU-8SYBBJ515PJxfYVBCGJ4I.roa (raw, json)
Hash identifier: 8sKgYxEkSINc4DF5vhsPrrcUcKy5FX1ROQmBQc87E0A=
Subject key identifier: A0:A8:1E:53:EF:12:60:10:49:E7:5E:4F:27:17:D8:54:10:86:27:82
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0754
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/oKgeU-8SYBBJ515PJxfYVBCGJ4I.roa
Signing time: Fri 16 May 2025 20:38:06 +0000
ROA not before: Fri 16 May 2025 20:38:06 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1876 (0x754)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 16 20:38:06 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=A0A81E53EF12601049E75E4F2717D85410862782
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:97:97:fa:af:df:df:e9:47:c2:e4:75:24:df:
7b:15:5b:d4:45:b0:a2:c1:3a:d0:c5:d4:37:04:3a:
55:2f:84:6f:c3:7a:40:d1:06:9b:5a:87:35:f2:71:
24:70:de:96:7c:07:c1:b8:4f:13:64:4a:bd:96:0e:
d5:37:80:45:91:c3:1e:41:1b:5b:31:93:50:e5:60:
14:78:5a:78:9c:7e:9d:c4:dd:8e:31:34:bb:f9:97:
20:35:cc:4a:57:34:3e:6b:4a:8a:8e:00:6e:63:d2:
18:a4:2e:0e:89:4f:70:98:44:cb:85:b7:91:71:89:
b1:aa:b2:89:d4:61:76:ad:c9:2d:44:b6:5b:df:21:
3d:51:b7:76:1c:d9:63:e9:38:c8:7b:35:57:15:a2:
0d:27:c2:bd:65:17:51:74:4c:9b:45:c0:21:56:62:
ee:54:2d:fe:3b:7f:16:d9:82:aa:9f:b9:77:9f:d7:
af:34:34:1a:29:3a:c0:b9:70:07:aa:14:a6:77:d4:
38:fb:08:07:c4:8a:7e:74:5b:f3:a5:9e:49:0e:27:
9d:21:86:44:f7:54:fa:f3:51:13:cb:63:86:1a:fd:
92:1d:bd:0a:9a:17:bc:0d:93:74:34:ca:e5:63:29:
99:76:9e:7f:fd:5a:31:e7:67:ed:a3:6f:e5:87:b2:
d8:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:A8:1E:53:EF:12:60:10:49:E7:5E:4F:27:17:D8:54:10:86:27:82
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/oKgeU-8SYBBJ515PJxfYVBCGJ4I.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
9f:30:31:31:3d:f7:e1:1e:76:7b:25:4d:44:4f:44:f2:64:d7:
db:d5:46:5d:27:16:21:90:f4:84:07:1f:cf:a9:79:c6:9e:ee:
ec:75:1e:93:74:92:35:ba:25:de:ea:ce:9a:d6:b4:44:a6:2e:
ae:ea:d5:84:b9:a3:36:5d:09:3f:c4:c4:0f:b1:04:52:2b:a3:
77:41:0f:df:62:d6:d4:14:c5:dc:06:f7:94:f8:cb:dc:b3:ae:
8f:ff:48:fb:f4:cc:49:0e:de:2e:56:89:09:aa:fc:85:2e:d9:
c0:7e:4c:c9:ce:2a:b3:18:43:5b:26:34:97:98:5a:3e:07:b4:
a6:ae:01:c1:57:32:77:9e:5a:e4:94:4f:77:a8:92:f3:13:42:
80:29:7a:cd:a7:51:e3:6c:96:33:d1:17:0e:69:6e:c1:fb:f5:
66:f7:59:38:4e:a9:23:13:96:a9:a3:af:be:68:3a:d3:ac:7f:
a7:e1:df:50:35:42:5a:49:38:93:23:30:5e:a0:c3:e1:bf:cd:
9e:b8:61:2a:a7:f3:1f:6b:82:ef:5c:c4:09:d0:81:35:ae:b0:
5b:cc:27:bb:27:f3:0d:f5:01:5b:5e:2b:dd:14:69:3c:e4:d1:
f9:c7:cf:02:d5:af:ec:f8:3f:7d:7a:fe:d9:2a:83:0f:3e:7a:
9f:cf:5b:13
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICB1QwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy
NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA1MTYy
MDM4MDZaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKEEwQTgxRTUzRUYxMjYw
MTA0OUU3NUU0RjI3MTdEODU0MTA4NjI3ODIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDJl5f6r9/f6UfC5HUk33sVW9RFsKLBOtDF1DcEOlUvhG/DekDR
BptahzXycSRw3pZ8B8G4TxNkSr2WDtU3gEWRwx5BG1sxk1DlYBR4Wnicfp3E3Y4x
NLv5lyA1zEpXND5rSoqOAG5j0hikLg6JT3CYRMuFt5FxibGqsonUYXatyS1Etlvf
IT1Rt3Yc2WPpOMh7NVcVog0nwr1lF1F0TJtFwCFWYu5ULf47fxbZgqqfuXef1680
NBopOsC5cAeqFKZ31Dj7CAfEin50W/OlnkkOJ50hhkT3VPrzURPLY4Ya/ZIdvQqa
F7wNk3Q0yuVjKZl2nn/9WjHnZ+2jb+WHstinAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUoKgeU+8SYBBJ515PJxfYVBCGJ4IwHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK
ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv
TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni9vS2dlVS04U1lCQko1MTVQ
SnhmWVZCQ0dKNEkucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
fakwDQYJKoZIhvcNAQELBQADggEBAJ8wMTE99+EednslTURPRPJk19vVRl0nFiGQ
9IQHH8+pecae7ux1HpN0kjW6Jd7qzprWtESmLq7q1YS5ozZdCT/ExA+xBFIro3dB
D99i1tQUxdwG95T4y9yzro//SPv0zEkO3i5WiQmq/IUu2cB+TMnOKrMYQ1smNJeY
Wj4HtKauAcFXMneeWuSUT3eokvMTQoApes2nUeNsljPRFw5pbsH79Wb3WThOqSMT
lqmjr75oOtOsf6fh31A1QlpJOJMjMF6gw+G/zZ64YSqn8x9rgu9cxAnQgTWusFvM
J7sn8w31AVteK90UaTzk0fnHzwLVr+z4P316/tkqgw8+ep/PWxM=
-----END CERTIFICATE-----
Generated at Sun May 18 03:07:34 2025 by rpki-client