Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/3gE_MDk-btfIDHPR6Oh7ENqJ3dc.roa
File: 3gE_MDk-btfIDHPR6Oh7ENqJ3dc.roa (raw, json)
Hash identifier: RKEH5vVPlgMx1zFqoJCKtLEkKbUGuq1F5FUr6sq5MYM=
Subject key identifier: DE:01:3F:30:39:3E:6E:D7:C8:0C:73:D1:E8:E8:7B:10:DA:89:DD:D7
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 6C0A
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/3gE_MDk-btfIDHPR6Oh7ENqJ3dc.roa
Signing time: Sun 15 Jun 2025 04:42:37 +0000
ROA not before: Sun 15 Jun 2025 04:42:37 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27658 (0x6c0a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jun 15 04:42:37 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=DE013F30393E6ED7C80C73D1E8E87B10DA89DDD7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:63:2d:75:5c:a7:5a:1b:68:27:73:10:d7:2c:
97:97:7f:47:6a:d6:fc:f8:a0:97:61:91:93:af:31:
e0:24:54:07:54:3e:3c:6e:b2:9a:7c:16:91:db:8a:
c6:0b:67:9f:2e:86:0c:79:26:65:df:3a:e8:38:0c:
f9:f0:79:d0:fc:ed:99:d5:e7:22:08:ea:6c:5e:54:
3f:de:d3:4e:cc:5a:59:cf:93:75:59:23:5a:55:11:
82:97:ac:b1:ef:e2:a5:d1:06:d5:16:58:9b:ce:ba:
55:82:00:88:ab:57:f7:b0:bd:40:32:c2:c3:81:e2:
b9:45:f5:dd:67:de:4b:7f:14:2c:8f:13:e9:84:9a:
1a:47:2b:89:9f:12:ad:43:ad:4f:dd:f2:ff:76:43:
90:17:83:08:e4:1a:af:48:ae:0a:3a:39:2b:71:4d:
33:e3:c6:b5:9c:0a:4d:a4:60:68:57:3a:84:81:f1:
2d:12:56:3f:0a:c9:da:67:f2:3c:da:fe:32:ab:4b:
ca:51:5f:86:b7:b6:91:68:90:f8:55:bb:5d:cc:e1:
ad:25:d5:76:e9:ef:66:17:ba:19:c1:ca:08:91:a6:
a4:4a:9d:85:5d:a7:73:ae:45:37:54:c0:61:50:9a:
c6:52:c7:47:a1:9f:0f:6c:a4:cd:d5:3e:a4:3d:1a:
de:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:01:3F:30:39:3E:6E:D7:C8:0C:73:D1:E8:E8:7B:10:DA:89:DD:D7
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/3gE_MDk-btfIDHPR6Oh7ENqJ3dc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
3d:b3:18:95:b3:61:cb:d6:05:bb:20:01:9e:ad:0b:35:fb:83:
a8:31:1a:40:82:86:b0:5b:b7:08:67:1e:8a:65:cd:4c:33:96:
f1:26:4a:9f:ed:a8:94:15:dc:45:c6:93:bf:a4:b9:25:96:d0:
21:8e:dd:4b:9d:03:50:fd:e5:af:0d:77:fd:b2:fe:fd:2a:56:
65:97:29:5a:a7:d8:31:a8:f9:34:28:82:ff:38:72:41:a2:0e:
13:5a:66:ca:be:88:26:cc:fd:bd:de:66:61:d1:0b:3b:3b:5a:
e8:a0:30:7f:b2:58:10:2b:c3:09:89:a5:0e:b0:d6:96:d2:d1:
64:58:0c:37:e9:73:a1:15:d8:2b:4c:75:fa:45:bd:4a:a7:a3:
48:81:6c:73:9e:88:79:29:0f:82:3a:2a:77:d7:28:76:f2:1a:
f9:1e:ce:28:24:21:4f:2b:3d:8b:c5:cd:0d:d0:a6:cc:fe:b6:
52:20:8b:c8:36:99:f6:ec:76:e8:94:66:a5:27:50:a9:7f:00:
7a:7f:2a:1d:03:00:9a:83:dc:0d:c9:d1:bb:62:4b:1c:0f:ed:
0c:75:fb:38:80:dd:db:47:8e:69:cf:14:07:a3:01:a5:46:15:
16:05:ac:77:fb:4d:1d:94:af:d0:d5:ca:40:9d:b0:67:80:c9:
c2:08:22:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:39:15 2025 by rpki-client