Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1663/p5IYe3rzVDVPyqJ5vYoW2HwOc5M.roa
File: p5IYe3rzVDVPyqJ5vYoW2HwOc5M.roa (raw, json)
Hash identifier: 0K3zjTS3HPm7NgJrWLo/FbOhjT7hZcaRvWnYByMMD34=
Subject key identifier: A7:92:18:7B:7A:F3:54:35:4F:CA:A2:79:BD:8A:16:D8:7C:0E:73:93
Certificate issuer: /CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC
Certificate serial: 997E
Authority key identifier: 8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/p5IYe3rzVDVPyqJ5vYoW2HwOc5M.roa
Signing time: Wed 05 Nov 2025 20:12:16 +0000
ROA not before: Wed 05 Nov 2025 20:12:16 +0000
ROA not after: Fri 23 Oct 2026 03:01:03 +0000
asID: 134762
IP address blocks: 43.226.72.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 39294 (0x997e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC
Validity
Not Before: Nov 5 20:12:16 2025 GMT
Not After : Oct 23 03:01:03 2026 GMT
Subject: CN=A792187B7AF354354FCAA279BD8A16D87C0E7393
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:f9:a5:e1:3b:df:43:0c:3f:60:32:90:d3:5c:
43:93:72:3c:4c:c1:34:d9:c4:53:f5:18:80:5e:57:
e5:a6:2c:dd:c4:ef:48:af:da:77:57:a0:da:f4:f8:
37:ba:eb:ef:ef:59:1f:6e:d6:4b:ba:2c:dc:10:49:
13:e4:e0:24:05:f7:9d:f3:a2:6c:60:ee:c4:23:5f:
3a:8b:46:43:d9:a5:37:d6:4e:90:06:47:02:bc:42:
1c:2c:cc:1f:60:f7:49:b6:ff:b5:ad:a2:79:87:70:
ab:0d:d6:7c:6f:f2:e7:d1:2f:ee:6f:5b:81:9b:49:
e3:8a:d3:c0:51:4f:4a:57:be:36:8f:32:6d:18:08:
54:e5:b8:74:04:fb:85:7d:6a:27:30:32:a9:97:f0:
b0:a6:da:09:7b:7d:37:c0:88:af:37:8c:8d:2e:fc:
9b:9e:01:e8:6c:e1:40:60:86:67:e2:82:41:00:58:
1c:fa:98:15:67:df:c5:56:ba:2f:37:b7:64:44:8d:
72:e8:d7:f5:14:bd:0d:e0:e6:58:6c:49:20:fb:79:
1e:8a:00:3e:f0:b9:80:fe:2a:09:69:bc:f9:d9:49:
45:41:35:62:2c:59:7e:ac:1a:44:0f:eb:03:51:22:
e7:1a:b5:a9:d0:c6:5a:bd:19:f6:6e:e2:d1:36:31:
b4:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:92:18:7B:7A:F3:54:35:4F:CA:A2:79:BD:8A:16:D8:7C:0E:73:93
X509v3 Authority Key Identifier:
keyid:8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/p5IYe3rzVDVPyqJ5vYoW2HwOc5M.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.226.72.0/22
Signature Algorithm: sha256WithRSAEncryption
0f:81:24:02:b9:9e:4f:5b:77:e7:63:ef:86:e3:d5:c3:87:09:
59:3d:17:eb:a7:fb:b4:ad:4a:4d:1b:91:2d:6b:41:e5:32:89:
6c:44:5c:86:84:ff:c6:71:17:89:44:2e:ca:c8:c5:1b:66:23:
97:51:cf:df:35:50:78:18:96:11:89:3e:90:29:d3:7f:9c:b8:
62:7a:0c:90:78:6c:6e:b9:fc:14:7e:d7:3d:70:e8:7c:d3:fb:
37:ed:4e:b6:06:01:d0:72:3b:68:f3:fa:74:48:62:78:44:b0:
61:f6:fc:af:0d:c1:03:b6:07:98:cb:e1:d1:dc:94:8f:e7:f9:
57:3d:d2:53:06:0d:6c:76:e3:e0:13:d0:da:5e:ca:5e:3c:3a:
41:0a:8b:cc:ea:cb:29:98:52:9c:be:05:de:fc:27:e2:92:86:
a2:a2:fd:86:ec:2f:fb:3b:df:54:99:2e:bc:27:a7:97:2c:17:
e6:17:9a:50:13:63:43:35:54:94:54:37:15:87:da:e1:c8:ed:
53:7c:2d:3f:7e:ed:f9:fc:a8:82:0f:ab:2b:d0:f8:b3:f9:c5:
83:ae:56:0b:70:1e:b0:d1:4b:83:0e:53:97:96:4c:b6:57:4e:
03:37:1f:33:5a:a6:2a:17:b3:1a:59:72:8f:52:9d:a6:23:4d:
aa:f4:9f:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 00:03:12 2025 by rpki-client