Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/2zuc0yvu6gnd7whhG_YN1_WsCfo.roa
File: 2zuc0yvu6gnd7whhG_YN1_WsCfo.roa (raw, json)
Hash identifier: DLSPMI4dv/W24OS+mutTFu5XenJrmmEPtUZmm5/vt6M=
Subject key identifier: DB:3B:9C:D3:2B:EE:EA:09:DD:EF:08:61:1B:F6:0D:D7:F5:AC:09:FA
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 780C
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/2zuc0yvu6gnd7whhG_YN1_WsCfo.roa
Signing time: Thu 17 Jul 2025 11:12:00 +0000
ROA not before: Thu 17 Jul 2025 11:12:00 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30732 (0x780c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jul 17 11:12:00 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=DB3B9CD32BEEEA09DDEF08611BF60DD7F5AC09FA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:38:d7:44:ee:80:7a:99:61:66:2c:ae:49:31:
f6:89:9c:a0:ff:a4:85:74:6f:52:32:05:9b:c7:3e:
af:e0:4b:8f:8e:1c:93:fa:01:55:e6:69:14:62:b7:
2b:05:f4:d5:16:74:aa:6d:00:1d:02:5d:57:95:b0:
53:b9:1b:e0:a2:a1:fe:02:06:f0:c1:a9:bb:e8:d5:
f6:39:fa:19:98:17:44:51:1b:be:82:dc:03:3e:9f:
67:ce:21:b2:f0:a4:3f:ad:ac:10:20:0a:d8:06:b1:
e6:d9:f4:df:54:fa:42:8f:c5:a6:c4:7d:7b:a2:d6:
30:a4:84:22:26:d5:fc:65:e1:94:0c:93:4e:e1:25:
c4:7c:50:34:d7:e2:de:66:22:f6:a0:cc:7c:fa:70:
42:74:ca:91:8f:5f:b7:39:eb:a4:fd:b9:ba:69:5f:
87:8d:b3:6b:10:aa:32:fa:44:12:da:b2:28:d2:13:
ba:32:98:9f:5c:66:f5:db:7d:d9:84:ff:ae:0d:9b:
8b:99:a2:14:6f:99:b7:84:3b:6c:2b:06:62:7e:fd:
63:97:a7:f0:9f:3d:7d:3d:7f:bf:ce:3e:a5:69:be:
db:8d:f9:d4:47:7f:11:81:1a:d9:3a:e3:ce:a4:b5:
80:9b:03:27:a1:6d:eb:02:fc:24:81:ff:24:15:ae:
58:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:3B:9C:D3:2B:EE:EA:09:DD:EF:08:61:1B:F6:0D:D7:F5:AC:09:FA
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/2zuc0yvu6gnd7whhG_YN1_WsCfo.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
80:16:59:d4:06:07:7c:b1:22:2c:cf:12:8e:4a:86:be:c1:d2:
ba:0e:9c:e6:6a:17:1e:43:18:f3:02:c2:8b:c0:44:0c:38:f0:
27:5f:b3:bf:96:97:cb:5f:73:4f:39:65:7f:3d:04:6d:ca:1e:
a0:64:4d:8c:73:47:08:f1:6f:6f:63:4a:7e:b2:ad:3e:03:f7:
f8:e4:7c:04:e6:cb:da:58:dd:7b:e2:22:1b:fd:4c:7d:ab:79:
fa:be:dd:fd:5e:c3:e7:23:6a:35:96:3a:53:42:ac:9c:0b:a6:
18:84:66:61:76:c2:85:e9:18:58:9d:76:49:72:1b:5a:4d:2b:
59:2c:84:b7:1e:42:83:28:5a:74:12:62:6c:22:d4:4c:6b:df:
d8:be:7b:54:7c:03:5b:b6:76:8c:e7:44:1b:02:3c:79:2e:c5:
20:38:18:70:13:d6:42:ee:a9:9c:83:4d:59:0f:3d:29:73:e9:
82:1e:02:27:c7:6f:10:f3:5a:0a:4a:a0:c8:41:5f:d1:96:5e:
ec:20:38:5b:9f:31:14:e5:f6:cf:8b:ae:5a:2c:f3:6b:db:6f:
bb:41:74:f9:70:60:ce:7c:f5:23:6a:af:9e:f9:71:81:74:a0:
be:af:9c:c7:39:d3:60:9e:d0:a8:e0:b2:d4:96:56:3b:3c:9f:
e9:19:a9:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:42:20 2025 by rpki-client