Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1663/yem7yMUvk5-tf2iKSDVX15-R2ug.roa
File: yem7yMUvk5-tf2iKSDVX15-R2ug.roa (raw, json)
Hash identifier: UVtaDY1bNNGnrnz+u0HFqC2H3SCmDecAm9gOsntKJ6c=
Subject key identifier: C9:E9:BB:C8:C5:2F:93:9F:AD:7F:68:8A:48:35:57:D7:9F:91:DA:E8
Certificate issuer: /CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC
Certificate serial: 467B
Authority key identifier: 8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/yem7yMUvk5-tf2iKSDVX15-R2ug.roa
Signing time: Sun 24 Aug 2025 03:32:42 +0000
ROA not before: Sun 24 Aug 2025 03:32:42 +0000
ROA not after: Mon 03 Aug 2026 08:44:40 +0000
asID: 134762
IP address blocks: 43.226.72.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18043 (0x467b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC
Validity
Not Before: Aug 24 03:32:42 2025 GMT
Not After : Aug 3 08:44:40 2026 GMT
Subject: CN=C9E9BBC8C52F939FAD7F688A483557D79F91DAE8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:20:98:17:8f:81:9a:34:ae:da:3e:0a:c0:b9:
d6:4b:4e:bf:67:90:d4:41:1e:5e:5b:0e:51:ce:b5:
d8:e9:74:85:b7:51:2c:33:d0:99:f8:b4:d9:84:31:
07:cf:2f:58:e9:54:85:96:ca:40:7a:f1:5a:03:cb:
70:00:84:30:62:25:5d:51:16:56:5e:9d:9d:3c:e4:
bb:48:f4:f5:06:59:ea:49:b8:a6:e5:e1:d7:e6:c2:
0e:45:6e:37:84:74:8d:84:44:a0:bd:81:51:fa:e2:
38:1a:b5:b0:e9:ee:be:42:23:9f:28:c2:a6:83:e8:
f4:82:37:68:8f:c6:60:43:4b:8f:a4:42:44:37:7a:
85:f6:c3:d5:f5:e6:98:93:63:c8:82:ee:74:7f:25:
bb:b6:48:0c:a5:b4:24:40:0f:f5:ec:1b:04:b9:11:
fd:28:f4:70:5d:7d:b6:52:64:99:37:92:de:74:af:
36:a3:6d:ba:02:20:40:c2:94:2d:b8:58:18:f7:c5:
45:b2:18:8d:e8:49:71:19:16:c1:54:55:92:db:d8:
fb:2a:cb:44:61:df:4a:71:9d:6c:1d:ed:d4:14:30:
39:f5:5b:4a:3f:93:a4:6a:b2:02:14:53:4a:45:1b:
e5:31:e4:92:c5:58:1b:49:9b:21:c0:b6:48:23:3c:
3c:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:E9:BB:C8:C5:2F:93:9F:AD:7F:68:8A:48:35:57:D7:9F:91:DA:E8
X509v3 Authority Key Identifier:
keyid:8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/yem7yMUvk5-tf2iKSDVX15-R2ug.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.226.72.0/22
Signature Algorithm: sha256WithRSAEncryption
44:cb:a2:17:09:df:f3:43:c7:d2:b1:7f:d7:5e:65:dd:7c:e7:
8b:e5:73:2d:7b:50:e3:be:d4:4a:39:ad:d0:d9:76:87:fb:c1:
1f:b9:cc:59:54:67:6e:11:1d:fa:d1:81:ef:fe:3b:45:5c:27:
1e:68:c3:26:7d:bb:5c:b7:b8:09:91:2f:7d:e8:91:e7:69:d4:
df:7a:02:ef:a5:7e:0c:70:cc:8e:c8:d8:ea:02:91:81:6a:ca:
96:bf:78:74:1f:b8:40:08:4b:25:29:c8:4f:43:59:ad:8d:ba:
03:13:d1:fc:ac:83:1d:48:3e:44:82:ea:e5:f2:d2:c8:e1:c8:
e9:04:e6:6e:6f:7a:4e:4b:3f:a0:49:b4:e7:fc:3e:ee:8f:10:
64:83:2f:5e:e6:d7:e3:8c:a7:41:f8:9d:2c:a8:54:1e:47:f8:
7c:fa:46:e5:5a:9b:61:5c:bd:ce:6d:e8:ac:fd:ec:c6:5d:bc:
dc:df:c9:56:3c:e1:7d:11:10:e9:d3:50:ab:a2:3e:0a:ac:79:
e8:7b:16:9d:ad:b6:26:13:00:b7:1c:04:05:65:8c:75:65:fb:
25:30:79:39:e5:99:85:ba:12:5c:e1:4d:48:49:54:ef:81:c1:
6c:a2:11:30:09:7a:9c:84:78:14:82:fe:17:77:44:5a:7a:14:
5d:90:1d:09
-----BEGIN CERTIFICATE-----
MIIE1zCCA7+gAwIBAgICRnswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOEFF
NENGNzhCNDlERjBCMkMxRDI5RDMyRTQ4QTk0M0FFNEY0MUFDQzAeFw0yNTA4MjQw
MzMyNDJaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKEM5RTlCQkM4QzUyRjkz
OUZBRDdGNjg4QTQ4MzU1N0Q3OUY5MURBRTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDDIJgXj4GaNK7aPgrAudZLTr9nkNRBHl5bDlHOtdjpdIW3USwz
0Jn4tNmEMQfPL1jpVIWWykB68VoDy3AAhDBiJV1RFlZenZ085LtI9PUGWepJuKbl
4dfmwg5FbjeEdI2ERKC9gVH64jgatbDp7r5CI58owqaD6PSCN2iPxmBDS4+kQkQ3
eoX2w9X15piTY8iC7nR/Jbu2SAyltCRAD/XsGwS5Ef0o9HBdfbZSZJk3kt50rzaj
bboCIEDClC24WBj3xUWyGI3oSXEZFsFUVZLb2Psqy0Rh30pxnWwd7dQUMDn1W0o/
k6RqsgIUU0pFG+Ux5JLFWBtJmyHAtkgjPDzzAgMBAAGjggHzMIIB7zAdBgNVHQ4E
FgQUyem7yMUvk5+tf2iKSDVX15+R2ugwHwYDVR0jBBgwFoAUiuTPeLSd8LLB0p0y
5IqUOuT0GswwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTY2
My9pdVRQZUxTZDhMTEIwcDB5NUlxVU91VDBHc3cuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL2l1VFBlTFNkOExMQjBwMHk1SXFVT3VUMEdzdy5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzE2NjMveWVtN3lNVXZrNS10
ZjJpS1NEVlgxNS1SMnVnLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAiviSDANBgkqhkiG9w0BAQsFAAOCAQEARMuiFwnf80PH0rF/115l3Xzni+Vz
LXtQ477USjmt0Nl2h/vBH7nMWVRnbhEd+tGB7/47RVwnHmjDJn27XLe4CZEvfeiR
52nU33oC76V+DHDMjsjY6gKRgWrKlr94dB+4QAhLJSnIT0NZrY26AxPR/KyDHUg+
RILq5fLSyOHI6QTmbm96Tks/oEm05/w+7o8QZIMvXubX44ynQfidLKhUHkf4fPpG
5VqbYVy9zm3orP3sxl283N/JVjzhfREQ6dNQq6I+Cqx56HsWna22JhMAtxwEBWWM
dWX7JTB5OeWZhboSXOFNSElU74HBbKIRMAl6nIR4FIL+F3dEWnoUXZAdCQ==
-----END CERTIFICATE-----
Generated at Sun Aug 24 09:40:16 2025 by rpki-client