Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1663/7ZLQjppKktjpEVsFjNwIPbpj_jg.roa
File: 7ZLQjppKktjpEVsFjNwIPbpj_jg.roa (raw, json)
Hash identifier: KxZFwOHggNH2lY65Vv/Y6N1StfmpvbYKD/J/2TePgj8=
Subject key identifier: ED:92:D0:8E:9A:4A:92:D8:E9:11:5B:05:8C:DC:08:3D:BA:63:FE:38
Certificate issuer: /CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC
Certificate serial: 5765
Authority key identifier: 8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/7ZLQjppKktjpEVsFjNwIPbpj_jg.roa
Signing time: Mon 08 Sep 2025 04:33:24 +0000
ROA not before: Mon 08 Sep 2025 04:33:24 +0000
ROA not after: Mon 03 Aug 2026 08:44:40 +0000
asID: 134762
IP address blocks: 43.227.68.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22373 (0x5765)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC
Validity
Not Before: Sep 8 04:33:24 2025 GMT
Not After : Aug 3 08:44:40 2026 GMT
Subject: CN=ED92D08E9A4A92D8E9115B058CDC083DBA63FE38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:a2:76:47:50:cd:4d:64:0f:26:31:1d:04:e5:
1f:10:e9:f1:ec:e6:9f:4b:e8:62:c7:f6:95:ef:6e:
36:09:c1:6c:3b:0d:28:a3:84:6c:42:64:45:e7:dc:
99:f8:93:a4:28:fc:bc:11:01:76:a2:4a:0a:a7:ab:
b6:a5:92:f3:0e:f4:e4:68:d7:83:1f:1c:74:98:24:
16:d1:b1:62:7f:65:3b:83:da:f7:5b:9e:a6:c0:4f:
20:81:0a:07:5c:5e:9c:7b:c1:8a:2a:74:11:42:34:
5c:b8:45:97:fc:01:99:b8:9a:f3:69:8e:fc:9d:fa:
fd:0c:97:18:f2:fd:e1:e1:d1:6d:8e:40:86:f6:04:
4b:3a:50:fd:fe:db:56:6a:9c:04:81:97:09:fa:13:
6b:0d:96:87:93:fb:18:85:a7:96:71:cd:47:7c:e5:
4b:0c:60:4e:3b:c4:f4:5b:b2:ba:34:01:e2:4c:e0:
c6:44:6e:a8:aa:6e:ef:85:3a:68:ad:c9:14:ce:4e:
4e:d8:75:ea:a3:0a:b4:aa:db:a3:f2:56:d9:cb:f0:
12:2b:aa:8f:8e:d4:61:97:5a:a2:ec:8f:c8:c1:97:
bb:e6:34:e6:fc:36:4f:e5:82:35:01:dc:c4:f9:af:
eb:44:1f:dd:d1:54:04:b3:79:9b:ec:77:29:e7:79:
84:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:92:D0:8E:9A:4A:92:D8:E9:11:5B:05:8C:DC:08:3D:BA:63:FE:38
X509v3 Authority Key Identifier:
keyid:8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/7ZLQjppKktjpEVsFjNwIPbpj_jg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.227.68.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:56:ef:13:dc:27:71:83:5a:c4:a4:d8:28:3c:f4:46:c6:10:
9a:7d:65:6c:1d:ab:ae:1a:d9:c3:30:1a:c2:05:c0:11:93:b8:
b1:d9:0a:ba:55:1c:70:48:ea:d7:e0:ba:a2:c2:ef:72:6a:c2:
82:e7:74:d8:f9:ed:bb:e9:ab:9f:52:23:37:4f:b8:e6:94:e3:
90:ef:70:ed:9a:6c:c8:ea:bf:d0:9c:cc:c0:d5:69:3f:fb:2a:
ac:56:2c:cb:72:58:95:6c:cd:b4:ed:a7:12:b3:de:8e:34:81:
85:a6:7a:9d:68:73:85:27:0f:bb:d1:69:00:be:ae:2e:1f:86:
92:d5:6b:a2:ea:0e:1c:55:30:9b:4d:d4:d7:71:29:d4:31:e4:
bc:75:a1:0e:09:c6:83:0e:f4:1f:ed:91:c7:6d:49:b9:e1:2b:
a7:a5:f8:41:a4:01:f6:cf:6b:39:a0:b3:24:93:38:1d:6a:cf:
1a:9e:1b:b6:17:d4:c7:13:0e:bc:56:fd:23:7f:bc:5a:a2:6f:
b9:3d:03:d1:1f:14:82:64:36:1c:b1:df:ff:08:98:fb:7b:f1:
d4:63:0f:ab:88:03:ee:4f:f0:1a:43:81:cd:60:82:de:14:6a:
b8:67:f7:e6:8e:4d:43:60:86:9a:15:d8:0c:71:e0:8d:5d:df:
66:83:3f:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 22:16:43 2025 by rpki-client