Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/3m8uAkqzu1QhNnFN347gnvD8V_g.roa
File: 3m8uAkqzu1QhNnFN347gnvD8V_g.roa (raw, json)
Hash identifier: zVx7h3goWoLr0oYR7O/BtjlCrvqf0fIx6s284Q1N1m4=
Subject key identifier: DE:6F:2E:02:4A:B3:BB:54:21:36:71:4D:DF:8E:E0:9E:F0:FC:57:F8
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 7464
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/3m8uAkqzu1QhNnFN347gnvD8V_g.roa
Signing time: Mon 07 Jul 2025 16:44:52 +0000
ROA not before: Mon 07 Jul 2025 16:44:52 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29796 (0x7464)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jul 7 16:44:52 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=DE6F2E024AB3BB542136714DDF8EE09EF0FC57F8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:1c:d3:7d:00:2a:79:62:97:d7:2e:f1:68:aa:
22:7d:77:fc:97:e4:64:10:29:43:88:f5:c7:a2:47:
4b:28:53:5e:c1:95:90:3b:65:f8:a1:55:7c:1a:d0:
82:6e:51:bb:05:08:57:60:d5:45:55:47:83:aa:59:
bd:5a:5b:0d:f3:a4:25:fd:8f:e1:1f:d8:12:42:1d:
13:64:02:17:97:26:f2:08:19:ab:37:f4:29:5a:f4:
c8:12:52:3d:8c:f9:2b:93:2f:73:57:88:87:aa:8b:
61:96:6a:22:85:8d:30:dd:b8:42:e7:e4:45:ff:8a:
e8:78:00:8d:3d:5e:6a:11:d7:05:23:80:f5:82:40:
e2:0b:69:9d:e1:24:1f:2b:72:80:ad:45:6f:73:cc:
9f:1b:f6:e3:67:06:a4:2c:70:f2:bd:0c:5c:13:11:
bd:8f:6f:1d:52:06:ed:a3:78:c9:96:83:51:b2:b3:
86:79:18:13:bb:67:0a:82:c0:b5:86:1c:5c:de:c3:
56:f5:cf:25:c7:c3:a3:5b:25:00:b2:36:2a:24:1c:
9c:ba:00:e5:ce:7f:ae:8a:99:87:c6:9b:e3:8b:49:
3e:aa:6c:9b:e5:56:2c:5c:6f:e6:a4:8b:4c:69:c7:
b8:a9:0b:57:f6:a2:97:52:63:f5:c2:dc:de:44:b3:
65:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:6F:2E:02:4A:B3:BB:54:21:36:71:4D:DF:8E:E0:9E:F0:FC:57:F8
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/3m8uAkqzu1QhNnFN347gnvD8V_g.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
a5:d4:8e:78:17:91:06:8e:22:95:ed:97:91:e4:a2:ce:7c:f3:
85:d2:62:ef:c7:1b:10:68:a1:bb:b2:e9:c2:66:e7:63:c6:72:
69:7d:45:d0:73:ed:59:e8:99:bf:56:6e:41:05:43:91:81:73:
49:92:d5:65:f7:86:f0:be:0e:62:b9:75:4c:d7:1c:ba:11:29:
ed:8b:59:38:b1:75:b7:6a:2d:26:f5:73:22:7b:a3:04:60:51:
40:0d:a4:b5:50:bb:6b:88:2a:21:6c:87:c6:87:ba:10:c4:61:
c3:32:8c:3b:4b:fa:43:be:c9:8c:7d:97:50:5d:68:41:a6:fb:
0e:33:be:f4:6b:1c:d3:2a:a0:84:f0:77:d9:77:01:f3:f7:0a:
89:2c:1d:b3:bc:3e:e6:18:cc:61:3a:4f:01:75:60:40:2c:f7:
4b:5a:b6:53:a5:c5:a8:96:0c:38:80:c5:38:17:42:37:14:3e:
51:31:5f:54:47:45:1e:f0:f1:e4:53:86:3c:6b:72:72:1f:b6:
54:38:8a:81:34:31:d1:e4:5d:69:dc:81:a6:19:78:5b:fb:22:
17:d1:a1:28:45:61:fb:ee:44:f8:b6:9a:ea:fa:20:24:91:d0:
c6:8d:c4:7f:f3:a7:e1:f8:60:3e:9b:dc:99:b6:16:ca:9e:42:
70:2f:08:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:40:14 2025 by rpki-client