Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/4KSlZLyiQsv4m1A2JBG-30kxMDU.roa
File: 4KSlZLyiQsv4m1A2JBG-30kxMDU.roa (raw, json)
Hash identifier: +lzSp06DBSO1VmC52I7EyQJX1mauGzgCZAAMHHSblx0=
Subject key identifier: E0:A4:A5:64:BC:A2:42:CB:F8:9B:50:36:24:11:BE:DF:49:31:30:35
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 76D6
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/4KSlZLyiQsv4m1A2JBG-30kxMDU.roa
Signing time: Mon 14 Jul 2025 05:42:29 +0000
ROA not before: Mon 14 Jul 2025 05:42:29 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30422 (0x76d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jul 14 05:42:29 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=E0A4A564BCA242CBF89B50362411BEDF49313035
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:2b:58:35:7a:f4:c5:a8:38:8f:46:95:26:95:
70:9e:6b:17:ac:1b:a3:02:89:8f:8a:ee:18:b6:8c:
25:7b:68:37:8c:45:a5:a4:e0:38:f0:a2:70:67:89:
df:09:c8:f3:d4:e4:b3:78:48:00:08:cd:4d:3f:d3:
b9:0b:2c:3d:9c:84:68:8f:a0:73:30:bb:5d:c4:81:
1d:77:d4:af:c1:4a:15:65:c0:49:02:c8:3d:6f:b9:
ba:f8:c2:a6:42:a0:a2:b9:e2:c5:27:54:e2:86:75:
47:27:04:06:6f:5e:03:f3:ec:96:36:e0:fd:52:a5:
d1:9b:fc:8a:f3:b1:1c:71:80:8e:af:e7:70:17:27:
52:b7:3d:83:ca:ce:4b:81:a6:a4:df:e0:bd:7e:16:
62:cc:ce:d3:55:ea:86:f4:03:ec:0f:1a:98:1f:87:
3e:ab:1f:5a:47:85:f9:f8:31:7c:ca:cf:70:7b:f0:
69:09:8c:68:2a:d9:e8:bd:ef:f4:71:68:f0:ee:53:
0e:4b:07:aa:1a:07:59:4a:8a:54:db:65:b9:fc:6e:
03:48:f8:c7:f9:44:49:4a:3a:5e:9a:9a:7e:66:86:
62:ce:4e:9f:36:78:1f:5c:15:3e:8c:9a:27:2e:59:
fe:ab:be:a9:a3:68:99:b8:14:89:d2:35:ae:ff:e5:
66:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:A4:A5:64:BC:A2:42:CB:F8:9B:50:36:24:11:BE:DF:49:31:30:35
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/4KSlZLyiQsv4m1A2JBG-30kxMDU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
b4:9c:1a:54:38:de:15:07:be:c0:c0:f0:d8:16:fe:ce:2f:18:
76:06:fc:4b:35:6b:22:aa:31:74:fe:29:c7:12:a0:45:a2:6d:
5f:0e:2b:e2:6c:3a:26:47:83:3c:44:88:46:cb:41:14:f4:36:
12:23:ef:ae:37:a0:31:b3:19:bf:d5:e0:ab:15:52:67:b0:25:
a3:04:19:a0:4d:2b:85:94:6d:4c:f9:6b:01:6d:b8:a8:77:3e:
47:55:6f:a3:0d:6f:0e:0e:7a:5b:7b:ce:13:28:f5:4b:10:a4:
6e:71:e0:a0:67:76:d6:1c:df:6d:46:20:b6:ea:20:a7:7c:3e:
88:ad:c4:52:a6:74:fb:86:6c:a6:94:c9:61:1f:e9:26:f4:24:
1e:17:b2:f8:f9:ec:e6:05:19:9a:c4:46:10:e8:04:e5:0a:ee:
b1:8b:71:b0:ea:70:fd:c0:b7:9c:18:da:38:1b:0d:d3:34:fa:
35:ff:1a:cd:68:b4:98:cb:d7:9f:fc:e6:96:2b:b6:64:36:e7:
a1:fc:cd:97:3c:e1:4f:1a:67:4a:bc:89:b9:92:b7:fa:09:f6:
79:2e:0b:35:3a:10:48:33:b2:b7:00:1e:f5:a4:d8:09:de:ef:
aa:02:0a:06:99:10:13:cc:5e:a0:c9:a7:fd:35:1f:81:1c:1c:
d6:1d:b2:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:46:43 2025 by rpki-client