Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1663/YCkuZjYdcZea127VXMVDh2Jl6Jw.roa
File: YCkuZjYdcZea127VXMVDh2Jl6Jw.roa (raw, json)
Hash identifier: /AiVyQoTHr0hq1V/l0R0ZinZJlFfIfq1LDaV8VdZRHY=
Subject key identifier: 60:29:2E:66:36:1D:71:97:9A:D7:6E:D5:5C:C5:43:87:62:65:E8:9C
Certificate issuer: /CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC
Certificate serial: 99BC
Authority key identifier: 8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/YCkuZjYdcZea127VXMVDh2Jl6Jw.roa
Signing time: Thu 06 Nov 2025 01:42:15 +0000
ROA not before: Thu 06 Nov 2025 01:42:15 +0000
ROA not after: Fri 23 Oct 2026 03:01:03 +0000
asID: 63612
IP address blocks: 43.227.80.0/20 maxlen: 20
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 39356 (0x99bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC
Validity
Not Before: Nov 6 01:42:15 2025 GMT
Not After : Oct 23 03:01:03 2026 GMT
Subject: CN=60292E66361D71979AD76ED55CC543876265E89C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ff:b1:0e:02:d7:24:53:9b:a4:dc:ef:ab:07:
85:aa:c2:60:d1:1c:a5:b0:16:3b:d3:9e:9c:64:49:
82:33:1e:d3:23:a7:f2:ee:a7:b9:4e:32:ff:65:8d:
87:1b:5a:f3:32:99:22:ad:c8:59:46:7a:c1:b9:29:
5c:92:95:f3:c1:10:ef:c9:85:c2:11:6e:7a:19:8f:
3a:5b:6f:64:de:46:58:9b:8c:a1:4c:ef:92:c4:66:
81:73:b0:9f:af:86:3c:64:7c:ae:13:0d:ad:88:71:
c9:e3:70:d0:b5:a6:4c:d4:d8:ac:cc:b3:79:a1:2a:
79:93:de:d9:0e:cb:b9:0f:a7:8a:0f:c7:34:94:f0:
1d:69:e3:03:0d:57:29:9d:b8:0c:8c:19:fe:bb:47:
17:7c:ab:ef:14:2d:eb:8a:ae:3b:2d:49:74:b3:1a:
ec:40:1b:17:a2:fb:59:bc:1c:13:36:9f:d3:ee:3a:
b5:43:ae:14:39:9b:cd:a9:35:95:a5:d6:f1:44:4e:
19:db:e1:e2:a2:d4:61:69:90:7b:98:a5:ff:a3:ad:
99:50:51:a0:0d:81:e7:f9:34:f2:ff:55:f9:99:5b:
8d:69:25:d1:2f:14:a2:19:69:fa:b7:44:bb:e5:11:
57:95:35:6b:18:a0:ec:8f:d9:52:a1:22:05:ce:bd:
77:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:29:2E:66:36:1D:71:97:9A:D7:6E:D5:5C:C5:43:87:62:65:E8:9C
X509v3 Authority Key Identifier:
keyid:8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/YCkuZjYdcZea127VXMVDh2Jl6Jw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.227.80.0/20
Signature Algorithm: sha256WithRSAEncryption
0b:aa:eb:96:12:ad:4f:87:21:fb:26:7d:0b:d9:65:8d:7e:47:
7e:7d:01:a9:9c:d7:9c:98:83:44:db:29:be:d7:cb:68:d8:7f:
a2:08:49:6f:ba:55:b8:fb:e8:d3:81:be:c7:ae:6f:77:7a:b7:
3f:09:11:e7:5e:b9:88:15:c7:ba:56:e4:9f:55:3e:1c:2e:67:
32:f4:3b:be:df:20:ae:d5:79:91:b5:99:66:41:be:e6:17:d3:
93:8d:73:e6:0b:ba:00:2b:06:4d:75:fc:7e:a4:eb:62:06:f9:
18:22:8b:f0:4e:9e:e1:38:6c:90:de:54:ba:49:6f:b1:cf:c2:
65:ef:9b:4f:eb:66:38:2c:e2:af:2b:5e:9b:d9:8f:b5:89:6a:
57:e0:26:c0:07:50:c3:f5:e2:ce:58:8f:61:75:d0:72:98:85:
7b:a8:08:f8:88:26:89:83:6c:fd:64:3e:d5:98:5c:80:63:c5:
c0:97:8e:b7:2b:86:51:96:79:96:69:67:42:c9:74:91:7c:8f:
8a:ff:26:71:60:d3:91:e3:77:f6:dc:ed:4e:a6:0b:c2:f9:9e:
4f:55:cc:d4:a4:f8:6f:39:19:26:80:2d:d7:c5:cd:c0:0d:f8:
3e:c1:8d:2f:89:51:c5:18:b5:7a:1d:5a:4b:8b:5a:eb:e7:3f:
ce:18:a0:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 04:40:58 2025 by rpki-client