Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1663/_zuIIDyrEf45zCPrbsmU_PQUngc.roa
File: _zuIIDyrEf45zCPrbsmU_PQUngc.roa (raw, json)
Hash identifier: nmTWWpZrX4EyLXcnwgwxDEsnE1w3WLcSWzk6UgEgYtU=
Subject key identifier: FF:3B:88:20:3C:AB:11:FE:39:CC:23:EB:6E:C9:94:FC:F4:14:9E:07
Certificate issuer: /CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC
Certificate serial: 58B9
Authority key identifier: 8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/_zuIIDyrEf45zCPrbsmU_PQUngc.roa
Signing time: Tue 09 Sep 2025 09:04:10 +0000
ROA not before: Tue 09 Sep 2025 09:04:10 +0000
ROA not after: Mon 03 Aug 2026 08:44:40 +0000
asID: 63612
IP address blocks: 43.227.80.0/20 maxlen: 20
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22713 (0x58b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC
Validity
Not Before: Sep 9 09:04:10 2025 GMT
Not After : Aug 3 08:44:40 2026 GMT
Subject: CN=FF3B88203CAB11FE39CC23EB6EC994FCF4149E07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:97:2a:81:f2:c3:10:19:fc:6d:0f:e1:f9:79:
7f:57:b1:a6:a2:c0:30:c0:1c:e8:13:cf:e4:db:8a:
24:73:df:0f:d1:7c:bb:75:9e:f1:54:f7:2e:f7:fc:
7c:1f:ed:f9:fe:5a:f4:40:98:9a:b8:5f:03:63:7b:
5b:3e:b1:5e:3d:83:0f:71:97:d6:e2:00:03:68:33:
95:ca:23:f4:87:fd:ed:3b:93:7f:55:fe:fb:78:26:
37:aa:ce:63:df:06:6a:e3:de:a6:44:22:a5:37:d5:
b7:f7:9f:52:05:7d:0f:b9:ba:d8:35:00:a3:5f:24:
0f:b4:e3:e2:7c:4d:42:44:3e:1e:9c:b8:5a:42:76:
96:82:d8:fc:bc:77:93:6c:79:d9:3d:72:83:1f:33:
b1:e7:bc:e5:f5:a2:c6:0a:3d:bb:c4:78:47:e1:eb:
52:4f:83:93:a5:f5:0e:72:d6:43:f9:cf:26:1e:62:
4a:e7:d7:c5:9e:94:62:14:6a:91:21:89:be:63:a5:
36:2d:bd:87:95:1c:06:4d:1c:79:d6:a1:b5:03:ae:
65:1a:98:48:6d:1b:cf:29:0a:31:6c:2c:f1:95:a0:
88:59:4c:70:a5:70:a9:68:4f:0a:bf:f5:e3:c6:47:
2e:19:97:25:30:f0:2c:40:76:8e:51:3c:4d:e3:9a:
dc:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:3B:88:20:3C:AB:11:FE:39:CC:23:EB:6E:C9:94:FC:F4:14:9E:07
X509v3 Authority Key Identifier:
keyid:8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/_zuIIDyrEf45zCPrbsmU_PQUngc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.227.80.0/20
Signature Algorithm: sha256WithRSAEncryption
a8:70:84:41:85:02:00:0a:f2:7f:62:05:51:00:b7:fe:67:80:
bb:dc:83:70:b1:c9:d1:27:82:5b:87:29:e6:70:42:4f:8b:69:
9f:14:04:23:b2:2f:1a:79:14:5d:9b:80:91:d6:f7:9a:73:68:
0b:34:1c:90:f1:5f:48:be:5a:1e:5e:3f:7d:27:1c:b6:24:8a:
5e:13:3a:51:77:3a:c2:c2:b0:3b:81:9b:57:50:2a:3e:ef:27:
8d:78:9a:71:a3:c9:c4:8a:c1:03:56:bc:6e:dc:5c:03:4c:33:
a2:0e:81:0d:65:94:2f:3d:30:6c:4d:d2:a1:68:cb:5a:c4:9e:
54:1d:69:59:4e:a1:bb:a3:5f:01:41:17:78:29:b1:d2:bf:31:
a1:2f:a5:ff:7c:60:71:76:cf:98:88:b5:ba:27:2a:fc:e0:8d:
6a:7d:fd:32:46:8e:07:ec:e6:af:9a:a1:26:f9:4e:a8:7d:95:
8b:18:7d:41:58:d2:67:3a:64:58:eb:bc:76:22:b7:f6:71:bb:
42:1b:86:26:9f:c7:d0:6b:39:26:be:cf:4f:e1:86:bf:ad:35:
88:b8:dc:a9:a9:e7:68:78:75:1f:1f:39:76:fe:1f:0f:f2:6a:
a9:05:2d:81:2c:f9:19:82:18:b5:b7:13:0e:b3:2c:ee:89:f1:
11:75:34:42
-----BEGIN CERTIFICATE-----
MIIE1zCCA7+gAwIBAgICWLkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOEFF
NENGNzhCNDlERjBCMkMxRDI5RDMyRTQ4QTk0M0FFNEY0MUFDQzAeFw0yNTA5MDkw
OTA0MTBaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKEZGM0I4ODIwM0NBQjEx
RkUzOUNDMjNFQjZFQzk5NEZDRjQxNDlFMDcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCklyqB8sMQGfxtD+H5eX9XsaaiwDDAHOgTz+TbiiRz3w/RfLt1
nvFU9y73/Hwf7fn+WvRAmJq4XwNje1s+sV49gw9xl9biAANoM5XKI/SH/e07k39V
/vt4JjeqzmPfBmrj3qZEIqU31bf3n1IFfQ+5utg1AKNfJA+04+J8TUJEPh6cuFpC
dpaC2Py8d5Nsedk9coMfM7HnvOX1osYKPbvEeEfh61JPg5Ol9Q5y1kP5zyYeYkrn
18WelGIUapEhib5jpTYtvYeVHAZNHHnWobUDrmUamEhtG88pCjFsLPGVoIhZTHCl
cKloTwq/9ePGRy4ZlyUw8CxAdo5RPE3jmtyjAgMBAAGjggHzMIIB7zAdBgNVHQ4E
FgQU/zuIIDyrEf45zCPrbsmU/PQUngcwHwYDVR0jBBgwFoAUiuTPeLSd8LLB0p0y
5IqUOuT0GswwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTY2
My9pdVRQZUxTZDhMTEIwcDB5NUlxVU91VDBHc3cuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL2l1VFBlTFNkOExMQjBwMHk1SXFVT3VUMEdzdy5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzE2NjMvX3p1SUlEeXJFZjQ1
ekNQcmJzbVVfUFFVbmdjLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEBCvjUDANBgkqhkiG9w0BAQsFAAOCAQEAqHCEQYUCAAryf2IFUQC3/meAu9yD
cLHJ0SeCW4cp5nBCT4tpnxQEI7IvGnkUXZuAkdb3mnNoCzQckPFfSL5aHl4/fScc
tiSKXhM6UXc6wsKwO4GbV1AqPu8njXiacaPJxIrBA1a8btxcA0wzog6BDWWULz0w
bE3SoWjLWsSeVB1pWU6hu6NfAUEXeCmx0r8xoS+l/3xgcXbPmIi1uicq/OCNan39
MkaOB+zmr5qhJvlOqH2Vixh9QVjSZzpkWOu8diK39nG7QhuGJp/H0Gs5Jr7PT+GG
v601iLjcqannaHh1Hx85dv4fD/JqqQUtgSz5GYIYtbcTDrMs7onxEXU0Qg==
-----END CERTIFICATE-----
Generated at Tue Sep 9 14:57:07 2025 by rpki-client