Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/2D11hz2d2JXVfasDFkyFDQDAZvY.roa
File: 2D11hz2d2JXVfasDFkyFDQDAZvY.roa (raw, json)
Hash identifier: 3VdmK0IYORn1VZY11sIYDbx4Q8i2d7hrbg3D+XXCUxU=
Subject key identifier: D8:3D:75:87:3D:9D:D8:95:D5:7D:AB:03:16:4C:85:0D:00:C0:66:F6
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 7804
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/2D11hz2d2JXVfasDFkyFDQDAZvY.roa
Signing time: Thu 17 Jul 2025 09:12:28 +0000
ROA not before: Thu 17 Jul 2025 09:12:28 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30724 (0x7804)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jul 17 09:12:28 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=D83D75873D9DD895D57DAB03164C850D00C066F6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:17:3e:5b:f2:57:d4:a2:37:bd:60:25:67:81:
c1:20:fa:d7:46:34:75:54:7e:81:6e:59:91:f3:1d:
f3:c4:d5:8d:70:0f:5c:1a:9f:16:8d:f6:73:46:5f:
18:88:cc:30:5c:d4:ac:29:dd:e8:89:c9:f7:5b:3b:
71:8e:dc:48:3c:48:54:63:75:1b:af:a5:9b:be:fd:
2f:ec:70:ee:dc:45:cd:1f:42:d4:02:87:fb:04:71:
b4:19:4f:32:fb:90:28:dd:c3:61:44:49:71:9f:68:
df:5b:8e:ad:78:69:c1:b1:5f:9e:e0:98:2e:db:b1:
24:9e:b5:4f:f9:cd:2c:1a:a6:08:45:a6:00:24:1b:
86:89:da:8c:2e:89:56:a5:59:7d:ca:06:0a:dc:5b:
82:ab:a5:dd:24:8f:34:0f:4b:03:21:8d:60:0c:09:
1a:c4:d6:5f:54:29:d0:d2:a9:1f:11:3a:9e:dc:73:
2c:ec:f1:9a:ac:ad:41:df:1d:c0:db:78:b6:58:77:
a8:b4:c1:7d:e9:62:89:33:70:9f:4c:c7:32:69:83:
67:68:36:a1:9c:4c:6e:44:0c:d1:62:65:d4:2c:e0:
63:a9:a8:02:44:c1:f7:0c:3b:56:b8:47:4a:f2:98:
26:4b:1e:f9:8a:8d:27:8c:da:95:40:4f:4a:ca:4c:
a3:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:3D:75:87:3D:9D:D8:95:D5:7D:AB:03:16:4C:85:0D:00:C0:66:F6
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/2D11hz2d2JXVfasDFkyFDQDAZvY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
a5:fd:84:21:1b:87:fd:4f:7c:62:db:8b:38:2e:74:80:a0:21:
bd:51:7b:2f:c8:3e:1f:5b:a2:e9:25:4f:f0:83:ee:ee:5a:14:
e0:6b:c6:bd:f1:1a:60:00:01:e3:36:c1:f9:48:ce:57:54:88:
f9:2f:5e:b9:bb:3f:db:b9:77:88:38:d5:a6:3f:61:e8:6e:03:
c0:50:68:dd:1c:8e:3f:bb:35:99:59:28:44:b2:4a:5f:97:b5:
7d:0c:cf:10:2e:31:87:3e:2e:4b:6e:dd:0d:64:8f:64:7f:a7:
83:32:10:06:a4:ac:5b:b5:50:ba:d4:a2:ed:20:a7:3d:a0:50:
3d:5c:c8:2e:f2:c4:84:b4:1a:0d:8f:39:f9:f2:3e:d0:e4:86:
dd:35:8e:88:9d:98:01:7a:26:9a:bb:0c:12:5c:d8:cf:1d:b1:
24:f2:a0:8c:b6:cd:ae:7d:15:81:8b:0a:41:37:e2:4c:32:03:
9b:17:db:c0:dd:b0:76:7a:f4:04:ad:0d:1f:5d:96:a9:c5:27:
04:d6:5d:2e:f2:ac:0d:7a:63:9a:0e:b2:05:b5:b6:6c:cf:68:
a9:1c:93:2c:72:ba:5d:e1:5d:fb:2b:48:07:b3:0e:ab:91:b5:
ad:0c:ed:f5:b5:18:b8:75:70:7c:c5:b4:32:e3:7d:1f:53:35:
b5:a4:fd:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:36:15 2025 by rpki-client