Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/2Q-LaCnxHMoXUEo2_NkU7bEm8nQ.roa
File: 2Q-LaCnxHMoXUEo2_NkU7bEm8nQ.roa (raw, json)
Hash identifier: MemrxyShwb+elAtxMW2hsmxQ9pHxUFCTQTzcbbxpQ48=
Subject key identifier: D9:0F:8B:68:29:F1:1C:CA:17:50:4A:36:FC:D9:14:ED:B1:26:F2:74
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 6CFE
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/2Q-LaCnxHMoXUEo2_NkU7bEm8nQ.roa
Signing time: Tue 17 Jun 2025 17:42:31 +0000
ROA not before: Tue 17 Jun 2025 17:42:31 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27902 (0x6cfe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jun 17 17:42:31 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=D90F8B6829F11CCA17504A36FCD914EDB126F274
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:1b:14:c8:e3:25:33:af:f8:0f:a1:67:5d:8a:
b0:e0:65:e7:1a:9e:5c:98:a2:e9:ed:28:fc:94:c5:
32:8c:65:9f:95:00:8f:8e:2e:e9:df:e3:a1:ea:ea:
ff:de:2a:9a:b0:41:72:a9:da:81:c8:80:85:d6:49:
c9:76:2b:ca:9f:38:c6:28:76:57:65:51:9f:8c:0c:
4d:24:f2:c3:db:81:40:a6:e3:5b:77:32:08:83:fd:
59:ec:eb:c7:e8:fb:37:8f:8d:65:1d:10:ea:3c:c7:
4b:bf:b2:d7:9c:87:09:f9:32:d2:4a:66:3b:39:e7:
43:86:40:33:0c:0c:67:99:ae:80:ea:e2:ab:b2:1e:
85:4e:73:5c:4b:c5:1f:9a:c8:41:59:63:5a:d2:92:
43:ef:1f:81:e7:be:c5:89:d2:f6:6d:33:4b:d4:41:
0b:f1:79:a0:c0:86:3b:80:c2:db:5b:6f:b2:16:2d:
8d:22:f2:e9:bd:79:7d:f2:46:fd:d8:43:9f:58:cb:
d2:fb:a3:0c:3b:3f:ae:48:9b:3a:9d:86:79:78:49:
67:e9:da:78:48:42:01:8d:0d:be:fa:76:92:ea:2e:
ea:49:1a:70:f4:be:28:36:8f:48:db:c1:7b:07:71:
ea:3f:b4:da:cd:6d:45:e9:b9:8c:6b:9d:21:d4:6f:
12:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:0F:8B:68:29:F1:1C:CA:17:50:4A:36:FC:D9:14:ED:B1:26:F2:74
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/2Q-LaCnxHMoXUEo2_NkU7bEm8nQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
0a:61:7e:89:21:15:a3:45:0e:44:a1:d4:a2:81:fa:6b:5e:80:
d4:05:75:10:1a:9f:59:6f:5e:bc:c9:b9:e6:60:5e:08:5d:dc:
01:33:51:ef:c5:b8:53:39:04:db:17:46:ed:f5:80:7a:89:6e:
5e:a8:53:6c:9f:9c:1e:77:33:ef:4b:fb:a0:6a:e9:81:12:e5:
ea:19:fd:5f:25:2f:f2:70:c7:bc:68:24:bc:33:f1:35:bd:64:
e4:e2:8d:8a:6d:c1:8b:78:76:40:af:e3:49:bc:e2:6d:ee:a5:
6e:78:c9:c5:3a:ff:22:8c:ff:12:15:91:03:3c:4e:dd:d1:f4:
52:0e:89:8d:17:a4:55:65:a0:1c:b3:a9:33:cc:14:f6:14:5b:
d1:2c:ca:28:fa:ac:92:11:bc:0c:85:ca:a0:0a:99:84:e1:27:
91:82:fb:3e:44:cd:2e:2d:e3:bb:1c:eb:cf:71:aa:ce:8b:10:
3f:24:93:91:39:ca:c5:96:33:9a:81:fa:84:f0:64:9c:e3:2d:
8f:c2:51:5d:e3:63:56:26:ca:74:10:ca:46:53:b3:bf:ee:b9:
16:e5:41:98:ca:59:31:e1:50:67:50:e2:a8:1e:1b:f5:65:f0:
d9:3d:56:bf:c3:04:d5:50:30:99:91:51:ca:a7:99:d3:eb:10:
da:76:67:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:34:26 2025 by rpki-client