Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/12qBgzzhHZkPVMxYcz5PJdWkg4Y.roa
File: 12qBgzzhHZkPVMxYcz5PJdWkg4Y.roa (raw, json)
Hash identifier: xFEVm+5R1NVmRpkFz1WIcBxLYdq6uCmYC7+hY5xIWLI=
Subject key identifier: D7:6A:81:83:3C:E1:1D:99:0F:54:CC:58:73:3E:4F:25:D5:A4:83:86
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 72B4
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/12qBgzzhHZkPVMxYcz5PJdWkg4Y.roa
Signing time: Thu 03 Jul 2025 04:44:56 +0000
ROA not before: Thu 03 Jul 2025 04:44:56 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29364 (0x72b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jul 3 04:44:56 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=D76A81833CE11D990F54CC58733E4F25D5A48386
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:76:f0:54:af:f2:0f:a7:a3:5f:9a:85:84:4b:
df:4c:9a:8c:be:0f:ac:cd:ba:c8:ac:0a:95:75:5f:
f0:6d:7e:66:b4:0b:29:02:73:b2:1a:56:fa:3f:de:
53:60:aa:36:6b:b8:98:94:7d:e9:63:f8:b1:a3:72:
16:9d:73:4f:22:65:29:93:8f:5d:6e:1f:4d:17:6c:
57:9e:cc:7c:2a:2a:9a:32:94:62:29:69:13:4b:99:
3b:be:be:55:ad:00:dc:60:56:ae:c1:76:5d:be:b1:
ca:c8:49:07:49:ad:6f:91:4c:9e:3b:a1:ba:11:72:
5c:c7:79:fb:96:c8:ca:24:d7:37:8d:29:a3:4e:4d:
0b:85:10:c2:da:b7:ca:9d:b3:0a:9b:07:dd:d9:b4:
b1:a5:25:ab:cf:be:ca:20:da:f0:fa:53:2c:97:9f:
25:18:1d:b5:20:cc:5b:fb:13:87:d4:4a:af:a9:0e:
5e:ee:5c:ab:cf:13:cf:0c:b8:b9:2c:e5:eb:2c:4b:
bf:f0:60:d6:48:bb:4b:01:71:b0:c0:16:3b:8e:44:
0d:ed:b8:1a:7a:f6:db:87:16:49:76:ff:8e:a6:13:
48:70:27:17:13:d9:7f:2f:ff:44:81:b9:29:01:d7:
94:ea:69:2b:fb:f9:ba:03:95:c5:ed:b0:ac:92:61:
98:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:6A:81:83:3C:E1:1D:99:0F:54:CC:58:73:3E:4F:25:D5:A4:83:86
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/12qBgzzhHZkPVMxYcz5PJdWkg4Y.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
1d:9c:13:4c:6c:77:ce:ef:ba:42:81:76:2e:32:b5:e9:76:80:
f8:7d:77:87:97:58:f0:2d:fc:b5:3d:a8:b2:47:64:1c:21:3b:
3f:a1:29:19:a8:c5:83:19:c1:53:95:de:48:3d:52:3e:90:46:
47:51:5c:02:91:92:6b:d4:44:4c:33:c7:56:f8:7f:4e:0c:f5:
7c:23:0e:04:fc:b9:f9:11:da:7b:e9:e8:29:07:16:5f:20:58:
8b:b5:61:9b:fa:55:e0:ef:4c:69:f1:3f:dd:65:a4:d4:e7:f3:
1e:f8:14:84:4c:96:2e:31:fa:22:e0:80:6a:c5:aa:a3:1d:61:
a6:c8:50:d1:a8:1d:94:55:69:7d:4c:f8:87:8d:a3:07:86:50:
ff:ab:4e:b0:e5:a0:46:d8:db:62:73:71:e7:d9:cc:71:ea:5f:
0a:a9:42:1f:6d:d0:f6:f0:21:7f:89:c8:4d:10:1a:6a:90:7a:
f6:08:dc:43:64:cc:0b:c4:16:07:5d:19:e6:cd:7c:0c:d7:72:
03:f3:95:b0:f6:57:ce:dd:bc:90:77:19:8f:67:f9:d5:0d:18:
76:3a:6d:c2:a1:b7:ea:61:e1:66:70:d2:97:5f:2b:e9:26:a0:
56:66:99:fd:0b:4a:97:db:3e:44:29:3c:ce:ba:41:88:fa:07:
61:95:95:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:54:40 2025 by rpki-client