Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/25eqgHeTJ_cSRAKQCQlld1JKS8Y.roa
File: 25eqgHeTJ_cSRAKQCQlld1JKS8Y.roa (raw, json)
Hash identifier: LnQvlabNue6onMYtAPkhhZOIJ9J424X+LHR4QAIVdTw=
Subject key identifier: DB:97:AA:80:77:93:27:F7:12:44:02:90:09:09:65:77:52:4A:4B:C6
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 72C2
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/25eqgHeTJ_cSRAKQCQlld1JKS8Y.roa
Signing time: Thu 03 Jul 2025 08:14:54 +0000
ROA not before: Thu 03 Jul 2025 08:14:54 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29378 (0x72c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jul 3 08:14:54 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=DB97AA80779327F71244029009096577524A4BC6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:28:51:8f:f7:7e:d9:1c:da:98:c1:74:5f:17:
04:90:d2:1a:06:b4:99:a4:6f:c1:75:cc:2c:29:2c:
c2:7c:fb:ce:34:9a:d7:a4:95:ee:46:52:37:01:7b:
62:2a:56:a6:f8:4d:e6:6c:16:ec:74:02:d9:34:7f:
e5:28:34:c4:2e:f0:5d:85:a8:4d:6d:bd:34:3d:c0:
b1:7f:89:bb:b0:2b:95:e7:f0:5f:bd:a2:4b:46:46:
56:67:67:41:32:b5:89:3b:13:d5:4e:2e:7b:c0:4a:
b4:5c:4e:e0:23:85:c0:7f:99:ef:31:ce:ca:51:f6:
b3:69:8e:ae:ad:b2:2a:50:b6:49:eb:e2:0d:69:30:
76:ba:1d:46:26:f8:40:e2:d4:bd:e7:b6:0a:fd:ea:
11:43:bb:bf:3f:93:38:d4:b3:ac:29:92:83:2c:5e:
64:3c:7a:d5:ec:3c:83:9c:b9:41:3e:86:16:9a:0e:
8e:4f:f4:b3:78:eb:4f:e7:10:93:62:a9:08:f1:88:
dc:01:25:1a:0b:04:ae:e1:19:44:44:e3:71:e6:f8:
73:9a:9f:22:d3:d6:e9:a7:df:9e:95:7e:06:55:d9:
8e:e1:0f:d4:16:bb:ff:04:35:90:42:dd:01:9b:0e:
1f:7a:81:89:0f:5f:ef:64:91:b7:fa:d7:98:d1:b1:
c5:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:97:AA:80:77:93:27:F7:12:44:02:90:09:09:65:77:52:4A:4B:C6
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/25eqgHeTJ_cSRAKQCQlld1JKS8Y.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
1e:26:be:b9:96:86:27:6a:0f:c0:94:54:44:cc:b9:27:a0:5b:
55:20:6e:8f:d5:f4:4f:7f:12:1b:04:c2:74:dc:af:e4:07:f8:
1f:78:8b:ca:4c:37:50:b1:ba:c2:7f:8c:43:3c:72:1e:59:fc:
80:db:4e:69:3b:83:e5:ac:bd:1a:b0:75:ea:cd:59:e6:76:38:
bd:d8:51:98:fe:5a:54:6b:0c:09:16:18:b1:be:4a:dc:a5:56:
fd:df:d3:9f:c1:ac:05:d9:18:87:08:f3:06:86:92:7c:e8:49:
0a:7f:14:8d:26:f2:33:d0:c4:be:d2:e6:eb:12:e3:15:35:8e:
c0:05:e0:de:18:fc:55:2f:10:3a:57:ec:69:ec:73:5f:61:2a:
62:48:cc:bf:ce:35:85:40:03:7d:8a:9c:ea:f0:7c:f5:47:0f:
b7:8a:cd:9e:52:0d:d0:33:11:d4:2f:aa:49:ee:9f:87:9b:94:
9e:80:e6:78:8a:f5:1e:12:fa:71:9f:9c:fd:83:ad:00:00:92:
67:16:23:87:d8:97:20:1c:63:f8:a8:cb:de:f5:e2:ca:dc:f7:
31:39:40:f5:0c:3b:fb:1f:51:0a:76:06:ea:94:b6:b2:c4:24:
99:c9:b6:37:13:c6:a2:d7:99:cc:ab:49:35:ab:6d:23:20:57:
aa:a3:ba:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:50:30 2025 by rpki-client