Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1663/AwgsWEDzEZGY9xV-s859cF0_L1E.roa
File: AwgsWEDzEZGY9xV-s859cF0_L1E.roa (raw, json)
Hash identifier: 08sP7IYSusurXcpB9q9kXmGP+vVKLMuTnqnGS2Ykafk=
Subject key identifier: 03:08:2C:58:40:F3:11:91:98:F7:15:7E:B3:CE:7D:70:5D:3F:2F:51
Certificate issuer: /CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC
Certificate serial: 997C
Authority key identifier: 8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/AwgsWEDzEZGY9xV-s859cF0_L1E.roa
Signing time: Wed 05 Nov 2025 20:12:15 +0000
ROA not before: Wed 05 Nov 2025 20:12:15 +0000
ROA not after: Fri 23 Oct 2026 03:01:03 +0000
asID: 134762
IP address blocks: 43.227.68.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 39292 (0x997c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC
Validity
Not Before: Nov 5 20:12:15 2025 GMT
Not After : Oct 23 03:01:03 2026 GMT
Subject: CN=03082C5840F3119198F7157EB3CE7D705D3F2F51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:2c:a9:90:7b:e6:3c:59:6f:89:b5:1b:f5:a4:
01:05:72:90:b9:a6:43:67:03:1b:82:8a:11:77:60:
e3:8c:9b:a6:f1:71:0b:1e:26:6b:10:46:34:c2:0f:
54:46:bf:4a:c9:f6:d6:00:76:18:10:f8:f9:7f:b8:
e9:26:3e:1e:e9:0a:b8:01:b3:4f:c6:b6:a8:53:15:
9f:42:fc:1a:df:33:30:e5:de:3a:a0:6d:07:44:8b:
4a:f9:f7:86:f7:80:09:69:fb:4b:fa:83:58:45:31:
2e:ce:de:26:15:72:d6:5c:a3:d4:bb:0d:08:c7:22:
1c:c3:c7:98:8b:9f:4e:65:b1:cb:0b:86:ef:6f:6f:
cb:b4:a1:1a:3f:7d:52:98:8f:9e:f7:11:8e:03:ac:
a0:09:fa:36:1f:5c:3b:d2:36:9e:43:e6:60:bc:65:
c5:54:ed:71:a4:cc:37:45:ca:4b:e1:80:9a:c4:86:
e0:b4:01:d6:73:d8:83:05:e9:18:2a:75:d7:0a:1d:
d9:73:2c:67:5f:f2:44:e2:9e:5b:07:5a:de:c8:8f:
42:18:4f:06:93:91:c7:fd:31:6a:c0:c9:82:56:a6:
6e:66:01:2a:18:70:08:79:71:e3:87:e1:a6:7a:c9:
2b:3f:9c:26:b1:bb:fc:ee:67:84:7c:27:bc:b5:5d:
f7:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:08:2C:58:40:F3:11:91:98:F7:15:7E:B3:CE:7D:70:5D:3F:2F:51
X509v3 Authority Key Identifier:
keyid:8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/AwgsWEDzEZGY9xV-s859cF0_L1E.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.227.68.0/24
Signature Algorithm: sha256WithRSAEncryption
54:3c:5b:56:a9:9c:39:15:46:db:7e:23:0f:ab:97:be:6d:1a:
75:88:b6:94:b8:40:2e:5d:2c:2b:9b:93:1d:1e:34:76:97:bc:
03:33:a2:c2:25:1d:53:46:12:03:61:59:c0:f7:fb:c8:88:5a:
32:bb:48:e3:85:cc:c3:a8:9f:65:51:c4:04:09:ec:ac:72:4e:
db:75:6e:d1:7f:88:bb:c3:a2:7e:f0:f7:22:e5:72:1d:da:d0:
8f:f9:d5:4a:cd:4f:60:38:da:5f:0d:d7:d9:49:37:00:16:87:
a1:a9:03:c9:7f:d0:52:b7:d1:ab:c3:7d:fd:b2:b6:ce:55:03:
7e:e7:2b:c5:54:02:14:b8:60:38:bb:bb:6d:f6:6d:f1:2a:13:
9c:7c:85:d3:a3:9d:48:4d:fe:4d:2b:fc:9b:74:55:ff:a5:7f:
30:67:02:e3:63:8a:4c:f8:f7:37:4a:ac:24:5d:68:61:81:cb:
de:06:4f:a3:41:4c:32:66:14:08:26:16:f4:20:4f:ea:99:6c:
2b:73:be:eb:16:fc:e4:f9:ca:83:83:81:b8:1d:3a:c2:da:35:
3a:aa:ab:89:a1:92:9f:46:33:b2:50:40:49:c2:77:4a:db:32:
97:29:72:20:ea:2d:ef:dd:fb:93:55:4a:83:47:0f:6a:7b:b1:
43:89:60:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 00:01:12 2025 by rpki-client