Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/4ywwj6GFrkjMx7Zh26jO_UUB91A.roa
File: 4ywwj6GFrkjMx7Zh26jO_UUB91A.roa (raw, json)
Hash identifier: auSVOU1nQ7jr3ovD1YV3JgjbshIhWY53lSeJ35Atyy0=
Subject key identifier: E3:2C:30:8F:A1:85:AE:48:CC:C7:B6:61:DB:A8:CE:FD:45:01:F7:50
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 77A6
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/4ywwj6GFrkjMx7Zh26jO_UUB91A.roa
Signing time: Wed 16 Jul 2025 09:42:21 +0000
ROA not before: Wed 16 Jul 2025 09:42:21 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30630 (0x77a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jul 16 09:42:21 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=E32C308FA185AE48CCC7B661DBA8CEFD4501F750
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:3f:c1:63:33:ee:90:1a:5a:2f:db:11:07:fc:
14:71:ee:df:23:07:da:17:f8:12:2b:ab:ac:5d:62:
67:fa:9a:65:0c:e5:88:ac:10:71:72:cc:c5:6a:3f:
6b:f3:1c:c1:11:29:6a:b8:50:1a:cd:12:eb:53:b6:
12:4b:ba:71:2a:8f:ae:09:33:4b:c8:d1:f8:0f:ee:
e2:9e:81:d6:fb:50:4a:aa:4b:5d:9b:79:be:fc:df:
50:da:2f:f0:60:6f:40:c3:1c:c6:51:83:30:a0:ca:
a6:2a:3c:c3:96:96:e0:a0:1a:a9:2b:f5:52:e6:78:
44:21:27:10:1c:32:fc:6f:cc:46:8e:c4:b2:37:65:
e2:25:b6:80:0d:7a:ca:e7:d6:ee:ab:a7:8b:a0:8a:
72:43:fb:31:65:41:07:19:ab:1b:8a:18:8b:d2:01:
4c:ff:56:50:ca:63:0a:ee:d0:d9:c8:36:81:ab:ca:
f6:cf:bb:df:d4:c0:00:c5:79:bf:8c:52:9f:1e:3a:
da:65:16:2c:c4:33:71:38:e1:44:40:1c:72:fb:d4:
21:67:b1:f2:07:fe:b9:d2:c9:aa:76:12:2d:24:da:
6d:da:25:f8:58:15:07:22:63:d8:32:8d:ea:df:bb:
fc:23:8f:c6:3a:0b:11:f3:76:8a:79:17:a3:a0:58:
3e:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:2C:30:8F:A1:85:AE:48:CC:C7:B6:61:DB:A8:CE:FD:45:01:F7:50
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/4ywwj6GFrkjMx7Zh26jO_UUB91A.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
95:f8:d6:08:00:e7:18:1a:ab:33:a8:eb:81:07:a4:9d:6e:e0:
91:ac:b7:98:64:0d:82:34:e9:2e:1c:0f:a8:90:51:85:53:74:
65:d1:e3:9e:57:e0:61:ac:ac:0b:db:2c:33:e2:0d:82:75:18:
a6:ca:98:7e:a8:49:ca:cb:13:89:e0:b4:ad:c7:2e:5c:3b:a2:
64:8e:89:4b:28:66:e0:3d:ae:de:ec:75:39:3d:63:2e:1c:f5:
48:24:87:bd:a1:62:19:7d:4b:e2:55:a1:d6:b7:81:38:b1:99:
57:9e:61:2d:45:9c:da:89:6b:3b:95:25:7e:fd:30:ff:82:36:
91:09:e9:76:8a:54:63:33:b1:f9:1d:2f:17:5a:05:ee:84:b0:
21:45:a7:ea:0b:44:8b:5d:e2:2f:1f:fb:8b:46:17:74:e4:92:
7b:71:7b:a5:be:df:ef:3b:1c:4d:2b:71:4a:1e:68:e4:e2:10:
ac:d2:d0:a9:7d:b7:e6:59:28:68:37:77:a4:73:73:8c:cb:f2:
3c:dd:1c:0a:13:dc:2a:aa:3f:bd:47:1a:0f:5b:05:bd:99:4e:
8d:0b:c6:4a:b9:fb:88:63:12:e4:87:4c:47:17:fc:03:aa:ca:
c7:17:55:cc:94:0e:07:15:e6:9c:c8:4c:99:1e:91:8a:4e:a2:
3b:19:b5:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:45:47 2025 by rpki-client