Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/2Cq-yH5yzUFPf6Wp4wfpJMBPm-0.roa
File: 2Cq-yH5yzUFPf6Wp4wfpJMBPm-0.roa (raw, json)
Hash identifier: /W/siQJ8Pd8e6MBYRQdJ91aYxGM9LElpwssNw5yYsO8=
Subject key identifier: D8:2A:BE:C8:7E:72:CD:41:4F:7F:A5:A9:E3:07:E9:24:C0:4F:9B:ED
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 6F1C
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/2Cq-yH5yzUFPf6Wp4wfpJMBPm-0.roa
Signing time: Mon 23 Jun 2025 20:44:27 +0000
ROA not before: Mon 23 Jun 2025 20:44:27 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28444 (0x6f1c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jun 23 20:44:27 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=D82ABEC87E72CD414F7FA5A9E307E924C04F9BED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d4:41:d5:cd:b1:bf:0c:a5:17:5f:0b:ec:d2:
f8:7e:ef:97:68:9f:ac:e5:cf:78:cf:af:80:34:d3:
cd:da:3b:ee:82:f5:7f:0e:2a:bc:ff:cc:81:65:6b:
e6:8a:9c:cf:bb:09:41:49:60:8a:ad:6c:15:50:21:
42:6f:d0:6e:d9:d7:8c:d5:66:f3:07:90:31:b6:5b:
df:3c:3a:93:7d:76:30:2c:7b:7b:54:c1:f1:b3:a4:
5f:92:a4:b1:79:eb:03:f4:21:7b:29:65:46:cd:ce:
dd:74:56:2e:22:27:cc:35:6f:d6:01:da:93:12:53:
6d:60:4f:17:f0:0a:2a:67:79:8c:22:e9:99:a4:49:
62:04:d7:83:39:38:de:fc:ed:46:66:3f:bc:e6:94:
74:69:a0:ad:a5:c1:7d:3a:19:bd:1a:67:16:e2:41:
fc:9a:a3:c2:26:72:16:9d:c2:28:15:f9:26:94:dc:
a6:d2:1e:15:a8:18:a7:26:59:46:f7:66:3e:71:86:
19:35:a5:56:1f:7a:4d:43:34:3c:ff:e1:06:ba:50:
ab:17:29:76:5e:88:5a:35:ea:1a:cf:3b:43:2f:4d:
1f:09:0a:99:63:e0:0e:5f:ab:84:51:e0:70:80:83:
ec:7b:9e:d1:9d:4d:b6:48:54:a5:1c:09:6e:e3:7a:
27:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:2A:BE:C8:7E:72:CD:41:4F:7F:A5:A9:E3:07:E9:24:C0:4F:9B:ED
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/2Cq-yH5yzUFPf6Wp4wfpJMBPm-0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
5c:a3:3b:a2:a7:f4:0d:42:18:5b:d4:6f:2c:9b:4f:ef:3b:24:
7a:44:ff:5a:9b:ad:16:25:ce:61:92:a4:f5:bf:42:d6:ab:81:
fd:bf:23:cc:69:9d:67:ad:41:96:f4:22:39:39:39:b0:2d:5f:
95:e2:63:f8:6c:f7:66:dc:c2:68:25:33:19:8c:d7:57:11:04:
1e:a6:d0:ec:b4:00:d3:3e:21:58:82:6c:b7:53:ca:40:7a:89:
0e:77:2e:2d:33:48:f2:b6:05:8b:9d:f7:02:4a:49:53:80:3b:
68:27:04:f6:76:7a:ad:62:d1:26:1c:ed:dc:d1:d6:37:9f:33:
7c:e3:5f:99:7e:e6:23:be:90:c2:9f:12:b0:66:88:be:7a:d0:
b4:48:90:3e:76:df:0c:79:e5:80:1a:24:fe:fa:87:09:1a:8a:
9f:32:44:9b:d4:dc:9e:4f:f9:33:8b:f5:e3:fa:5f:5e:85:03:
82:8c:80:3d:9d:a8:2c:57:67:83:df:61:3e:95:3c:40:c6:6e:
d3:a6:50:26:58:92:ae:ab:96:47:2f:ef:31:a5:b9:7a:8d:5c:
40:9f:6f:7b:b7:75:71:00:eb:b0:82:37:b2:fd:53:20:69:71:
bd:68:6e:95:cc:fe:7e:68:65:10:9c:7e:86:f6:0f:76:07:af:
20:15:90:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 16:37:12 2025 by rpki-client