Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1663/HV8GbztLWnbgNaaUwTkdlB5F9Cg.roa
File: HV8GbztLWnbgNaaUwTkdlB5F9Cg.roa (raw, json)
Hash identifier: UaPfLW99jQntNU6IX0TRnO/sKj7H4WUu2nmdSv5P9sw=
Subject key identifier: 1D:5F:06:6F:3B:4B:5A:76:E0:35:A6:94:C1:39:1D:94:1E:45:F4:28
Certificate issuer: /CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC
Certificate serial: 5763
Authority key identifier: 8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/HV8GbztLWnbgNaaUwTkdlB5F9Cg.roa
Signing time: Mon 08 Sep 2025 04:33:24 +0000
ROA not before: Mon 08 Sep 2025 04:33:24 +0000
ROA not after: Mon 03 Aug 2026 08:44:40 +0000
asID: 63612
IP address blocks: 43.227.80.0/20 maxlen: 20
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22371 (0x5763)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC
Validity
Not Before: Sep 8 04:33:24 2025 GMT
Not After : Aug 3 08:44:40 2026 GMT
Subject: CN=1D5F066F3B4B5A76E035A694C1391D941E45F428
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:24:c2:55:cd:c7:b3:3f:cd:70:1d:69:a2:25:
d1:c2:3c:9b:c6:65:db:bc:ea:a3:bc:c3:1b:0c:e8:
55:0c:6d:f1:74:1b:9f:fc:af:7b:af:76:83:32:cc:
ef:5f:72:c9:f9:bb:b4:2d:7c:52:f1:d0:32:65:38:
ec:fc:1e:fe:97:46:83:35:56:d3:08:e8:65:27:f4:
7a:d7:15:08:cc:8f:48:fc:be:b9:e2:30:31:15:c1:
08:ae:23:bc:a5:e3:d8:73:28:2c:d1:fe:fa:73:45:
b4:58:c4:3e:da:8f:34:2f:79:0a:42:8d:86:96:bf:
4f:a0:8c:f5:e7:6b:4f:3f:b4:02:90:37:34:68:ff:
97:5e:9c:7d:b5:a7:cd:70:83:41:87:68:89:d3:5b:
62:1a:1d:bc:80:c8:db:fb:d5:03:1c:7d:4b:be:e3:
e6:d3:4f:5b:ea:b9:d8:27:fe:27:da:9a:9a:1f:93:
d2:8a:4f:98:fe:82:7f:5d:7f:6f:58:85:41:34:21:
ce:bf:e8:3e:8e:59:4f:84:63:6a:d9:fd:a1:24:5b:
c3:82:5a:fe:dd:2c:08:1e:e2:41:4f:c4:85:04:e2:
29:5e:f4:22:05:c5:a0:a3:a2:2b:71:5c:e0:da:8e:
a0:9d:fb:63:ca:87:83:17:6c:9b:da:c1:71:0b:52:
d0:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:5F:06:6F:3B:4B:5A:76:E0:35:A6:94:C1:39:1D:94:1E:45:F4:28
X509v3 Authority Key Identifier:
keyid:8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/HV8GbztLWnbgNaaUwTkdlB5F9Cg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.227.80.0/20
Signature Algorithm: sha256WithRSAEncryption
53:9f:9a:1a:c4:f1:2d:21:4e:33:63:b7:88:d4:ae:3c:b9:c4:
83:33:10:c5:dd:bc:e6:d9:59:95:9f:fa:7e:87:bb:bd:82:60:
bf:0f:ce:2a:5c:79:60:56:91:f6:27:1e:e3:c3:8f:11:34:cb:
2a:c1:7f:2e:3a:ab:4e:65:e9:86:49:ec:3a:47:80:7c:90:6c:
d6:cb:4e:5c:5f:99:05:16:c4:c8:07:af:c9:fb:7b:00:e2:bb:
cf:17:32:81:34:89:e6:ed:0b:44:20:d7:40:0b:d6:c1:7f:72:
10:10:66:de:3f:a0:0b:7b:99:7a:dd:5f:29:e9:d7:dd:bb:84:
e7:32:0c:e3:ed:86:05:dc:a6:bc:de:ce:29:e7:f2:ff:f2:57:
46:d5:58:b0:29:a3:65:de:3e:cc:ec:23:9b:fc:9c:49:cc:d0:
f9:7f:11:b1:16:61:9e:be:3c:3d:c6:23:87:e9:69:5f:03:5b:
37:94:31:bc:6b:6a:62:20:53:3f:f6:70:2c:07:4a:17:49:65:
f4:ac:4a:14:7d:d0:b5:ac:b5:c0:e9:60:83:f0:34:df:a5:61:
9b:ec:7a:85:d9:d8:55:d5:2e:d0:fc:b6:14:9d:28:9f:e5:4c:
64:08:9b:46:70:1b:0d:b7:20:85:a6:69:a2:3b:66:0d:a9:fb:
b0:73:f7:ec
-----BEGIN CERTIFICATE-----
MIIE1zCCA7+gAwIBAgICV2MwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOEFF
NENGNzhCNDlERjBCMkMxRDI5RDMyRTQ4QTk0M0FFNEY0MUFDQzAeFw0yNTA5MDgw
NDMzMjRaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDFENUYwNjZGM0I0QjVB
NzZFMDM1QTY5NEMxMzkxRDk0MUU0NUY0MjgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDAJMJVzcezP81wHWmiJdHCPJvGZdu86qO8wxsM6FUMbfF0G5/8
r3uvdoMyzO9fcsn5u7QtfFLx0DJlOOz8Hv6XRoM1VtMI6GUn9HrXFQjMj0j8vrni
MDEVwQiuI7yl49hzKCzR/vpzRbRYxD7ajzQveQpCjYaWv0+gjPXna08/tAKQNzRo
/5denH21p81wg0GHaInTW2IaHbyAyNv71QMcfUu+4+bTT1vqudgn/ifampofk9KK
T5j+gn9df29YhUE0Ic6/6D6OWU+EY2rZ/aEkW8OCWv7dLAge4kFPxIUE4ile9CIF
xaCjoitxXODajqCd+2PKh4MXbJvawXELUtB1AgMBAAGjggHzMIIB7zAdBgNVHQ4E
FgQUHV8GbztLWnbgNaaUwTkdlB5F9CgwHwYDVR0jBBgwFoAUiuTPeLSd8LLB0p0y
5IqUOuT0GswwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTY2
My9pdVRQZUxTZDhMTEIwcDB5NUlxVU91VDBHc3cuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL2l1VFBlTFNkOExMQjBwMHk1SXFVT3VUMEdzdy5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzE2NjMvSFY4R2J6dExXbmJn
TmFhVXdUa2RsQjVGOUNnLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEBCvjUDANBgkqhkiG9w0BAQsFAAOCAQEAU5+aGsTxLSFOM2O3iNSuPLnEgzMQ
xd285tlZlZ/6foe7vYJgvw/OKlx5YFaR9ice48OPETTLKsF/LjqrTmXphknsOkeA
fJBs1stOXF+ZBRbEyAevyft7AOK7zxcygTSJ5u0LRCDXQAvWwX9yEBBm3j+gC3uZ
et1fKenX3buE5zIM4+2GBdymvN7OKefy//JXRtVYsCmjZd4+zOwjm/ycSczQ+X8R
sRZhnr48PcYjh+lpXwNbN5QxvGtqYiBTP/ZwLAdKF0ll9KxKFH3Qtay1wOlgg/A0
36Vhm+x6hdnYVdUu0Py2FJ0on+VMZAibRnAbDbcghaZpojtmDan7sHP37A==
-----END CERTIFICATE-----
Generated at Tue Sep 9 03:35:14 2025 by rpki-client