Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/1hmuDURv4EwyV1-SPLTDvnM3FHk.roa
File: 1hmuDURv4EwyV1-SPLTDvnM3FHk.roa (raw, json)
Hash identifier: iQyNRvvLsvvsZSNPbOWpeHGZ8q2MMHVk6eg1Ue3lRFU=
Subject key identifier: D6:19:AE:0D:44:6F:E0:4C:32:57:5F:92:3C:B4:C3:BE:73:37:14:79
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 78A8
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/1hmuDURv4EwyV1-SPLTDvnM3FHk.roa
Signing time: Sat 19 Jul 2025 02:12:07 +0000
ROA not before: Sat 19 Jul 2025 02:12:07 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30888 (0x78a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jul 19 02:12:07 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=D619AE0D446FE04C32575F923CB4C3BE73371479
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:07:f8:0c:9b:6c:5c:d7:42:ec:1e:3b:7f:e9:
2e:55:6d:95:41:8d:68:7e:c3:d8:9a:02:87:91:fc:
55:58:e3:ae:a8:38:04:f7:1f:15:3c:51:bd:e0:51:
3c:1a:0f:10:ff:46:e3:66:0f:d6:bf:77:6b:ce:e3:
a7:ee:f3:45:08:0f:77:d1:29:19:82:e4:e4:36:02:
be:5d:02:36:bf:d7:13:8f:72:1e:38:18:e0:49:2c:
da:3c:67:06:33:03:44:40:5e:58:3f:b6:60:f3:dc:
f3:42:bf:b4:70:b5:8f:65:3e:e0:03:60:c2:c7:cc:
0d:ba:f3:98:db:5f:8c:12:e4:b7:95:8b:b3:50:45:
88:2d:b9:a2:dd:27:68:dd:1a:79:28:3e:43:c9:ee:
d7:4e:fc:97:93:bc:10:de:e7:e2:0e:63:a1:97:55:
2c:1d:a0:60:dd:fe:43:f3:49:03:82:52:8e:d9:6e:
33:0d:10:76:5b:dd:83:78:1c:74:73:36:82:da:84:
63:43:56:83:94:63:35:81:73:a4:f0:a7:dc:24:dc:
f9:a0:21:c4:0b:c2:f5:ac:19:ce:d0:2c:dd:e4:b4:
ee:db:f6:a3:61:b1:01:a7:f9:a3:2d:3e:ef:eb:99:
35:38:eb:23:6e:02:20:d0:20:f7:dd:4b:fb:48:46:
ad:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:19:AE:0D:44:6F:E0:4C:32:57:5F:92:3C:B4:C3:BE:73:37:14:79
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/1hmuDURv4EwyV1-SPLTDvnM3FHk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
5a:bb:19:eb:bf:43:db:b3:03:42:ef:b6:9a:dc:84:26:aa:4a:
96:09:aa:1e:0e:ee:f7:6d:b5:3f:0b:4b:97:c3:42:a1:fc:03:
e6:4a:d9:bf:0f:00:91:93:05:88:f9:c0:af:85:11:51:8f:c4:
21:67:f6:5c:73:9a:f6:6f:ce:9d:1c:fa:8c:8a:cf:94:08:39:
d6:4f:0b:7a:ca:40:f8:3e:3e:59:97:e7:5a:38:06:85:e7:09:
43:f3:69:dd:6a:a1:84:22:de:47:2d:d9:ea:f4:0e:71:46:0c:
9e:27:a0:2c:47:cb:3c:86:53:5f:91:ae:ec:e0:a3:f0:fe:14:
7d:30:7d:a3:d1:87:b3:79:64:4d:5a:d2:ba:7c:66:0a:6f:94:
2e:ff:08:18:f2:41:e8:89:d8:fc:27:09:a3:a4:fb:05:18:52:
95:ee:f3:86:27:cb:fc:4b:f0:d4:5d:6a:c8:ad:24:10:b4:0c:
b2:af:6f:3d:33:9b:1d:38:d4:1c:48:69:53:f3:86:d1:04:1a:
c1:09:48:c5:f5:f3:81:af:4e:0b:5b:bc:a7:21:d6:f2:cb:6a:
82:05:cd:4f:be:dd:c2:39:12:1c:f9:ad:01:5e:df:af:22:0a:
ff:56:b1:5b:ae:32:99:7a:02:94:7d:9e:b9:e9:da:26:07:3f:
8f:60:9c:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:50:51 2025 by rpki-client