Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1663/tspYGligjcsUf3E0pTtMxII3rvM.roa
File: tspYGligjcsUf3E0pTtMxII3rvM.roa (raw, json)
Hash identifier: TMSP60phArGg0CHuAv6cqQPSyXNUZ66QA6V9tV6cEDs=
Subject key identifier: B6:CA:58:1A:58:A0:8D:CB:14:7F:71:34:A5:3B:4C:C4:82:37:AE:F3
Certificate issuer: /CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC
Certificate serial: 99BD
Authority key identifier: 8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/tspYGligjcsUf3E0pTtMxII3rvM.roa
Signing time: Thu 06 Nov 2025 01:42:15 +0000
ROA not before: Thu 06 Nov 2025 01:42:15 +0000
ROA not after: Fri 23 Oct 2026 03:01:03 +0000
asID: 134762
IP address blocks: 43.226.49.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 39357 (0x99bd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC
Validity
Not Before: Nov 6 01:42:15 2025 GMT
Not After : Oct 23 03:01:03 2026 GMT
Subject: CN=B6CA581A58A08DCB147F7134A53B4CC48237AEF3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:26:ed:ab:36:3e:3d:96:22:b2:ac:9b:58:0f:
bf:2e:5a:f9:b6:b4:51:60:ad:37:3d:2d:12:fb:95:
9f:d5:b8:93:1e:a2:4c:fd:3e:35:50:b0:ba:ec:11:
70:f5:c7:92:a0:3d:99:7e:e0:75:d1:97:e5:e0:e0:
0a:52:12:40:8a:8e:cd:18:48:06:30:2b:d7:e0:1b:
0d:a7:95:e5:7f:58:12:e7:a9:9d:d7:25:34:5c:02:
a7:38:cd:3a:80:7e:7c:00:90:2c:65:69:f5:b0:b1:
48:20:7d:c3:84:4f:77:83:9a:de:34:88:ea:56:5a:
8a:2a:8d:47:98:c8:3d:b5:a5:f7:10:87:d4:e6:15:
2c:25:09:e9:0d:d0:f7:f1:3d:d5:4c:59:de:8a:57:
15:eb:40:f4:5b:e8:32:3b:cf:df:89:8b:7b:35:36:
ad:ea:d5:ca:a3:35:66:05:cd:44:f7:fd:60:5a:a3:
f6:c1:06:ed:51:12:85:6d:8e:58:b9:d5:36:c0:43:
e0:e6:22:8b:66:3b:58:03:20:83:17:2d:e1:5d:db:
0d:1a:71:e4:5e:92:c3:72:6d:30:7f:91:ff:33:e9:
8f:10:9a:9b:f7:13:ef:cf:9b:8b:4d:a8:24:7c:6a:
a8:4d:0d:a8:bc:85:f3:89:bc:d3:e9:d7:3c:65:91:
fa:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:CA:58:1A:58:A0:8D:CB:14:7F:71:34:A5:3B:4C:C4:82:37:AE:F3
X509v3 Authority Key Identifier:
keyid:8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/tspYGligjcsUf3E0pTtMxII3rvM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.226.49.0/24
Signature Algorithm: sha256WithRSAEncryption
68:f7:36:86:69:0e:c5:e1:36:2e:32:7f:43:41:e1:29:e7:55:
d2:c3:42:bd:32:1d:74:cf:1a:cf:4c:60:ab:72:c7:67:ef:77:
c5:ba:10:38:95:49:93:b6:b7:ee:e1:69:74:98:de:6d:1d:44:
d4:3f:b4:57:c8:04:6b:8b:50:86:1a:aa:29:21:62:62:ed:a4:
2f:35:5f:44:64:44:a8:ec:44:d8:21:e2:25:32:70:a2:aa:26:
0c:a2:2b:ea:7a:74:43:0b:1a:31:76:ab:2e:77:86:48:04:6f:
bc:81:70:53:fd:76:57:49:1e:83:1b:24:11:99:b6:76:7f:0d:
dd:54:02:48:2d:35:ee:f3:94:55:53:7c:3a:43:41:00:52:90:
e6:aa:3b:03:fb:e0:ec:6a:5c:f3:f7:2c:e4:87:51:59:be:7a:
86:c4:10:c3:23:33:ea:13:9c:fe:bb:d5:68:d9:47:af:6f:30:
70:da:f2:8d:04:2e:44:cd:d3:ec:b4:8e:0a:de:cb:c2:82:d2:
e1:e4:5d:49:c4:bb:ba:9b:4d:1d:5a:33:d1:24:fd:cb:82:f6:
07:02:8d:aa:82:a9:1b:b5:cf:2f:a8:8e:67:5d:54:b6:6a:16:
d8:fe:60:f3:69:01:e0:df:6e:f6:ed:73:79:e4:6b:b9:3a:69:
d8:b8:68:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 04:40:58 2025 by rpki-client