Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/1QYKBb349_vO2o7IBR7TqegFpH4.roa
File: 1QYKBb349_vO2o7IBR7TqegFpH4.roa (raw, json)
Hash identifier: 5ZEGsBhQskPdty/2sh8TXswHcccOc9L8co+YiM7rWUQ=
Subject key identifier: D5:06:0A:05:BD:F8:F7:FB:CE:DA:8E:C8:05:1E:D3:A9:E8:05:A4:7E
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 75D6
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/1QYKBb349_vO2o7IBR7TqegFpH4.roa
Signing time: Fri 11 Jul 2025 13:41:35 +0000
ROA not before: Fri 11 Jul 2025 13:41:35 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30166 (0x75d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jul 11 13:41:35 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=D5060A05BDF8F7FBCEDA8EC8051ED3A9E805A47E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:46:d2:c2:91:16:34:60:95:38:ae:8d:cb:0d:
b7:a1:98:04:80:98:78:72:23:88:7d:1c:fe:88:ca:
39:77:b0:89:02:af:11:cb:9f:67:1c:78:2e:ca:27:
db:1d:4b:41:39:34:ef:91:84:b0:74:d1:8c:81:dd:
e1:18:26:85:1a:b7:3c:c9:2c:c8:0a:d3:a2:4b:9b:
5a:67:fc:7a:3d:df:2f:e8:be:c1:e7:bd:db:be:cb:
c6:29:5f:7f:7e:d4:77:4e:ce:13:f4:76:22:17:9a:
c7:47:69:af:98:58:74:d7:3b:15:fe:31:69:af:57:
a0:84:a0:e9:21:8c:c7:75:6c:d9:c4:a2:90:ef:78:
fb:1a:0d:c0:2d:22:40:23:99:6a:15:5a:66:20:2f:
2b:49:34:40:b3:3a:cb:8b:76:ef:76:22:c2:ae:f2:
fe:d0:3f:ae:34:1c:08:57:c3:cc:71:d7:4d:8a:a7:
4d:5f:c7:d5:c7:c1:cc:6f:7e:d4:66:72:d0:2f:e9:
28:c6:f4:af:2d:87:d9:75:95:8e:00:cf:90:4b:b0:
6a:47:c2:25:de:6c:56:9a:e2:32:d0:98:ad:5b:68:
a6:14:29:15:40:b4:87:c7:2d:a0:23:8f:66:ef:5c:
ed:75:93:cf:0e:42:50:23:73:32:63:70:99:3a:a6:
38:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:06:0A:05:BD:F8:F7:FB:CE:DA:8E:C8:05:1E:D3:A9:E8:05:A4:7E
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/1QYKBb349_vO2o7IBR7TqegFpH4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
77:3d:2d:1d:82:2d:4a:a8:0d:f9:0b:52:4a:66:04:05:93:46:
8c:d5:3a:84:cf:cf:72:73:bd:6f:29:dd:ca:2e:32:78:dd:68:
7a:01:08:41:9d:2b:07:23:68:fe:2a:ae:2e:af:f5:e4:f2:9b:
97:14:8d:99:bb:77:43:1f:ec:ef:ac:64:c9:e1:e6:e4:d3:5f:
50:69:f4:3a:3f:56:60:fb:99:f7:e0:88:cf:e0:b6:6e:bb:55:
9d:19:30:af:c6:85:d3:a3:ca:2f:a5:41:64:47:35:13:49:88:
d0:cd:82:c2:81:37:b9:15:56:45:d1:90:d2:31:6a:85:4e:cc:
f3:f5:f2:50:57:62:f8:3f:da:27:16:0e:49:e5:24:6d:3a:52:
70:86:f1:40:c9:de:eb:0b:20:3d:06:2a:36:e8:10:c7:bd:f2:
12:06:cb:30:05:2b:6e:0e:57:bb:0b:da:2b:cf:ad:74:fc:7f:
80:9f:30:81:0b:94:8e:ed:39:5a:68:bd:18:30:61:c6:06:61:
1e:f0:39:c2:0c:e5:75:e9:26:ee:2e:73:10:af:26:08:60:d4:
0e:31:a7:39:71:b9:72:27:60:dd:2b:ac:42:e2:99:ed:ee:3f:
bc:4d:72:ae:9e:7d:74:1f:13:ac:31:c8:9a:58:f0:51:9a:01:
75:5b:3e:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 21:21:00 2025 by rpki-client