Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/3cyVzGRTzYyirnjeYV1oOON4hxI.roa
File: 3cyVzGRTzYyirnjeYV1oOON4hxI.roa (raw, json)
Hash identifier: v4xEZ+qzK8M0N9zp0wLGovX/z7MGkTxS/DJYPG9+yz4=
Subject key identifier: DD:CC:95:CC:64:53:CD:8C:A2:AE:78:DE:61:5D:68:38:E3:78:87:12
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 7616
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/3cyVzGRTzYyirnjeYV1oOON4hxI.roa
Signing time: Sat 12 Jul 2025 05:42:26 +0000
ROA not before: Sat 12 Jul 2025 05:42:26 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30230 (0x7616)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jul 12 05:42:26 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=DDCC95CC6453CD8CA2AE78DE615D6838E3788712
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:f1:c8:89:34:3d:c7:ec:f0:ce:83:fc:7e:eb:
fc:0f:ab:50:7a:67:b0:83:81:d9:83:b9:2a:49:43:
c9:ab:c1:d2:24:c3:02:1d:f6:a9:c8:fe:18:d6:2e:
64:d1:e9:d4:f9:11:04:a2:a2:e9:4b:81:2d:b0:10:
1e:59:e9:84:e7:29:0a:d3:24:4e:6f:80:f9:13:3a:
0a:a3:08:38:17:c9:73:dd:96:b4:8a:06:47:8a:37:
e2:76:98:7a:41:b7:43:9c:31:ee:85:96:36:18:1a:
45:12:b7:49:c9:3f:4b:7f:33:fb:2a:e1:8b:e2:5d:
9e:c5:0c:14:14:4f:cd:ab:e0:6f:0a:1d:4d:74:5d:
39:e2:ec:55:48:90:5d:bc:2f:69:84:47:38:d7:1c:
58:68:f0:c3:b5:e5:12:93:56:a2:7b:42:d1:6c:de:
a7:ce:ce:1e:7c:8d:1b:81:1e:d6:37:84:8e:47:bd:
06:30:83:03:9d:c5:6b:ac:48:b9:9c:11:e9:41:fc:
d4:b6:9c:bf:d4:5e:7e:1e:9e:56:42:4c:e9:be:01:
23:0d:1e:83:75:95:b3:78:df:cb:c0:15:9b:5e:13:
6c:73:a4:54:61:0e:65:15:ea:fe:36:6f:23:34:12:
3e:da:dd:9f:b0:bb:2c:44:43:fb:09:98:ef:74:42:
3b:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:CC:95:CC:64:53:CD:8C:A2:AE:78:DE:61:5D:68:38:E3:78:87:12
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/3cyVzGRTzYyirnjeYV1oOON4hxI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
a9:d3:d8:fd:b6:8a:06:a7:90:39:af:a7:01:c4:a2:05:94:4a:
22:7d:c4:aa:e6:59:f7:91:df:f3:bd:b9:a1:64:a2:a9:83:ce:
0e:1f:30:e3:2f:fb:21:4b:eb:12:db:eb:e2:d4:c0:9f:09:36:
55:b9:f9:b2:d6:62:73:c3:4e:e3:d3:96:49:7c:3b:e1:87:09:
0d:94:a1:cf:1b:65:db:87:5a:88:4a:1c:5a:20:3d:85:1a:66:
d6:a0:f0:12:45:96:db:67:cd:72:49:fa:6e:21:d2:b4:75:8b:
c6:26:f4:7b:0d:85:f9:bf:d7:c3:3d:df:65:3b:6d:e7:fc:3b:
2e:84:91:3e:03:3e:13:df:b5:81:bc:be:77:34:71:2a:e5:68:
d7:61:07:cb:82:8d:58:cf:87:86:04:05:96:ef:44:c9:56:66:
ba:e1:71:bf:22:4c:9d:30:4f:6a:f0:15:09:53:94:44:8e:ed:
0c:40:c5:6f:0e:7d:bf:96:00:ac:fb:f0:90:47:37:e8:f4:2d:
9a:0a:7e:b6:f0:59:5c:68:cc:2d:19:67:30:66:f1:f3:1c:ff:
5e:66:bc:b0:60:4a:d6:13:16:15:9a:85:7a:a8:97:0d:0d:1e:
61:fd:95:87:bb:8e:45:ba:21:b2:f4:2c:16:6d:be:23:09:80:
18:65:2b:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:54:32 2025 by rpki-client