Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1663/HoEgrQS7FwHs95-6R55SzekuW-I.roa
File: HoEgrQS7FwHs95-6R55SzekuW-I.roa (raw, json)
Hash identifier: 2F+NVeRkKLa7l4qF4AyeMfWLpZjMGWpio9ACWFdDAYw=
Subject key identifier: 1E:81:20:AD:04:BB:17:01:EC:F7:9F:BA:47:9E:52:CD:E9:2E:5B:E2
Certificate issuer: /CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC
Certificate serial: 997D
Authority key identifier: 8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/HoEgrQS7FwHs95-6R55SzekuW-I.roa
Signing time: Wed 05 Nov 2025 20:12:16 +0000
ROA not before: Wed 05 Nov 2025 20:12:16 +0000
ROA not after: Fri 23 Oct 2026 03:01:03 +0000
asID: 63612
IP address blocks: 103.45.128.0/19 maxlen: 19
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 39293 (0x997d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC
Validity
Not Before: Nov 5 20:12:16 2025 GMT
Not After : Oct 23 03:01:03 2026 GMT
Subject: CN=1E8120AD04BB1701ECF79FBA479E52CDE92E5BE2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a2:e0:3c:4d:ce:69:8b:09:40:e6:c0:63:8a:
66:57:95:78:3c:c8:ba:e5:c6:28:1f:20:fd:e1:87:
d8:3a:98:f4:6f:89:f4:e4:9f:09:0a:1b:49:16:aa:
31:9e:55:e0:55:b3:b4:30:f4:8b:8e:13:b6:af:ab:
6e:96:aa:c1:3d:98:af:57:5e:99:07:c8:60:a6:a3:
e2:ac:1d:32:3a:c5:07:e6:9a:8a:b4:2e:a8:3f:b1:
f0:9a:e5:26:1e:67:4d:74:3d:78:fd:be:a8:1d:02:
a8:de:42:5c:2b:f0:68:3f:c7:3b:e0:c3:ae:d0:07:
fe:ce:23:ac:ef:b0:7d:80:54:d6:2f:35:36:60:c6:
2d:45:ae:40:ed:3a:e0:34:2d:fa:d3:dd:b7:9a:10:
e6:49:97:7b:32:ae:a5:61:30:23:66:94:ed:0b:81:
2e:eb:da:70:7d:8c:98:41:65:d1:b8:bc:d9:f4:47:
38:70:99:8b:7e:73:aa:63:b7:1c:5a:b0:83:35:43:
b8:f5:27:a2:93:f4:a5:57:d5:18:99:c5:2e:11:b8:
fd:5a:bd:6a:04:23:a8:f5:ea:77:7f:37:17:88:03:
82:d8:48:78:6d:f3:65:6c:95:a0:65:ce:e6:df:9a:
93:18:ec:2b:98:f9:24:76:e3:53:bb:57:3e:e9:0f:
48:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:81:20:AD:04:BB:17:01:EC:F7:9F:BA:47:9E:52:CD:E9:2E:5B:E2
X509v3 Authority Key Identifier:
keyid:8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/HoEgrQS7FwHs95-6R55SzekuW-I.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.45.128.0/19
Signature Algorithm: sha256WithRSAEncryption
3a:c4:e0:e7:6d:4c:1c:b4:50:91:32:36:b5:3b:27:86:4f:42:
41:e2:7d:22:0d:4b:ef:28:15:79:ea:a3:69:84:4f:75:de:7d:
d9:4a:b1:b9:e7:49:55:20:96:e8:fa:70:14:87:0e:3a:b1:3f:
5d:a3:77:d7:2d:af:78:e3:a7:f1:23:3b:22:64:82:31:aa:8a:
9b:9c:57:b4:7f:b6:b8:83:8d:83:e0:f3:77:87:d4:9d:45:25:
ff:40:67:67:32:57:70:22:60:9f:95:3c:cb:0f:cb:ae:2f:92:
c1:5e:47:cb:22:21:53:1a:a6:ca:aa:08:b7:40:e9:41:45:c0:
76:f3:1a:cc:66:f3:d4:e7:9b:d5:1e:09:6b:a6:04:65:2f:64:
dd:da:fe:e7:68:99:12:58:39:4c:59:3c:77:55:90:92:67:1b:
fd:4d:02:06:03:a7:cd:a9:c2:d5:d1:4c:ae:7d:0d:66:71:92:
16:e1:22:f6:af:82:7c:fc:7d:3c:ff:11:6d:00:3b:a8:03:0e:
89:6e:4d:39:f4:ec:bf:72:ff:1b:ee:3c:ba:7b:dd:15:aa:69:
f5:f0:60:0c:e4:46:33:da:9b:76:14:d1:9d:d1:0a:3f:d5:24:
cf:54:08:6a:2e:6b:9d:af:be:16:61:c6:bd:a9:fc:fc:e8:89:
a9:98:8c:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 00:01:10 2025 by rpki-client