Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1663/z_lK68q3HuQ2YA-o5O1-QTLxSVs.roa
File: z_lK68q3HuQ2YA-o5O1-QTLxSVs.roa (raw, json)
Hash identifier: djDiaR6F3C232funPEOT/ASADrhJX0R/3wJbKzu0uPk=
Subject key identifier: CF:F9:4A:EB:CA:B7:1E:E4:36:60:0F:A8:E4:ED:7E:41:32:F1:49:5B
Certificate issuer: /CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC
Certificate serial: 86AB
Authority key identifier: 8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/z_lK68q3HuQ2YA-o5O1-QTLxSVs.roa
Signing time: Mon 20 Oct 2025 03:35:13 +0000
ROA not before: Mon 20 Oct 2025 03:35:13 +0000
ROA not after: Mon 03 Aug 2026 08:44:40 +0000
asID: 63612
IP address blocks: 103.45.128.0/19 maxlen: 19
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34475 (0x86ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC
Validity
Not Before: Oct 20 03:35:13 2025 GMT
Not After : Aug 3 08:44:40 2026 GMT
Subject: CN=CFF94AEBCAB71EE436600FA8E4ED7E4132F1495B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:aa:b0:dc:d3:52:21:d0:7c:c8:72:f8:0b:dc:
85:f9:e3:c7:d3:16:ec:54:9f:07:1b:6f:25:ab:63:
f7:d3:ec:76:4e:82:04:be:b0:09:79:ef:ff:52:51:
0a:62:1c:ad:49:5f:ab:1c:bc:17:7e:74:5f:09:0c:
b2:12:a0:11:da:e8:a9:31:eb:40:87:21:f8:8b:f9:
f8:93:b8:69:11:31:6a:a7:65:4f:39:dd:72:b9:0f:
ba:19:87:34:d9:79:60:c7:c1:d2:51:65:9e:a8:94:
d9:4e:79:9f:ba:54:b4:95:96:58:29:59:c0:79:92:
4b:f9:65:17:81:2a:f6:0c:2a:3c:f2:1c:a0:d7:2b:
95:03:2d:21:f5:dc:d2:7c:93:ff:cb:cd:8a:20:d1:
c4:1f:5a:3b:64:98:16:2e:75:3a:b1:98:d3:8e:83:
91:c8:af:86:b6:28:38:67:67:17:d7:d3:b5:12:83:
62:b5:a3:1c:e2:f8:07:4e:86:84:f7:25:bd:a0:d5:
d3:f2:0f:0a:fd:ae:b8:d0:77:8f:22:6f:13:4d:72:
83:c1:6d:d3:f1:74:b2:6f:fc:0b:b9:1d:98:66:2b:
41:7c:04:37:00:00:0b:28:48:ef:ff:86:fb:65:6c:
05:6c:8a:f7:27:0a:20:4f:ce:d2:6d:6f:17:83:0a:
3b:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:F9:4A:EB:CA:B7:1E:E4:36:60:0F:A8:E4:ED:7E:41:32:F1:49:5B
X509v3 Authority Key Identifier:
keyid:8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/z_lK68q3HuQ2YA-o5O1-QTLxSVs.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.45.128.0/19
Signature Algorithm: sha256WithRSAEncryption
30:e2:22:3e:a7:ba:a1:45:44:ec:2f:66:0b:a5:f2:f6:f0:75:
96:da:34:88:6c:96:9e:8a:2a:f2:84:94:0a:09:c6:9f:01:93:
35:8d:d3:55:b1:2b:66:31:88:dc:0f:d7:86:68:9d:67:64:cc:
c2:aa:49:6b:16:b8:0c:67:ba:95:b5:38:b4:ba:c5:30:7c:67:
52:43:4b:eb:3a:9a:ff:16:c1:33:e9:78:ea:2a:2a:62:0e:6e:
86:24:b2:95:26:c7:cb:2c:b3:af:ce:69:28:de:b6:a9:04:e0:
32:ee:8e:87:eb:be:a2:e8:21:94:dd:35:e4:28:6a:c2:22:38:
a2:83:4a:19:14:7c:8a:eb:a9:28:95:18:4c:a0:ec:08:45:18:
af:a6:20:39:b6:2a:43:5a:14:07:11:43:e8:60:72:55:92:90:
1a:d1:83:d8:05:c6:69:ce:13:a2:8d:9d:ec:b1:70:fc:9c:eb:
5a:36:d3:2c:aa:ff:07:89:16:5e:b4:58:10:67:eb:00:a8:5d:
0c:81:b5:bb:62:46:f3:8b:b5:ac:56:01:ce:1d:af:9b:f2:ac:
fe:9c:f3:ab:8d:ee:07:5e:e0:f9:35:80:b3:94:4d:35:ec:96:
fb:4c:79:f8:77:7b:f7:9e:7e:28:a5:66:d8:7d:94:44:23:48:
c5:05:9b:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:42:51 2025 by rpki-client