Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/7PdowpPORU2c9lwzg8IgfHixS_E.roa
File: 7PdowpPORU2c9lwzg8IgfHixS_E.roa (raw, json)
Hash identifier: qC7W8MmgLeuLrRLpXnfUX4N++sGGimZ6gvCAMvfOsV8=
Subject key identifier: EC:F7:68:C2:93:CE:45:4D:9C:F6:5C:33:83:C2:20:7C:78:B1:4B:F1
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 74C2
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/7PdowpPORU2c9lwzg8IgfHixS_E.roa
Signing time: Tue 08 Jul 2025 16:18:04 +0000
ROA not before: Tue 08 Jul 2025 16:18:04 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29890 (0x74c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jul 8 16:18:04 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=ECF768C293CE454D9CF65C3383C2207C78B14BF1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:63:0b:b0:b8:f5:9a:c3:b4:89:cd:ec:39:bb:
ad:78:4f:cf:87:6a:72:0b:fb:88:36:7b:48:2f:f9:
ad:1e:96:65:e1:7f:95:9f:56:67:8a:b2:1d:a3:d4:
bc:06:aa:70:78:1e:1c:c9:bc:7d:be:d0:d5:80:e7:
b9:ac:05:50:25:8f:ab:b8:5a:00:9e:b2:35:be:f2:
8f:55:b7:bf:62:db:c1:28:2b:3e:9e:1b:22:3d:35:
7b:93:5d:d7:1f:29:a9:9a:50:a8:40:6f:39:a7:c3:
07:38:89:f2:71:88:9a:21:bb:83:2d:58:3e:4f:f0:
bc:b2:8f:e1:14:9f:77:3f:14:b3:53:ba:c4:a8:f2:
91:4f:3f:aa:0f:b1:2d:cf:8e:2f:3b:89:9b:34:5f:
19:06:14:a8:80:cb:6a:b4:3f:61:42:c4:4a:11:de:
92:f8:34:cf:bc:f7:48:5e:61:14:5d:ba:49:be:95:
28:2b:40:87:1e:07:59:aa:8a:a4:75:e5:67:a8:1c:
20:ef:3e:ca:41:76:81:19:5e:bd:aa:40:68:07:66:
e9:7a:2c:d4:d4:69:5f:c3:42:7b:b2:a0:bd:c2:77:
8f:bf:00:b8:1a:1b:81:cc:0d:91:f9:53:e6:dc:72:
0b:f2:d0:22:17:ac:5b:f9:27:35:64:b9:6b:39:c8:
f9:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:F7:68:C2:93:CE:45:4D:9C:F6:5C:33:83:C2:20:7C:78:B1:4B:F1
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/7PdowpPORU2c9lwzg8IgfHixS_E.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
79:2d:f5:95:e9:f9:ca:6c:c1:85:08:a4:a1:ff:b8:3c:bd:59:
e2:dd:fa:bf:82:c7:16:cb:1a:16:6c:4f:21:ef:8e:99:66:a9:
7b:32:22:7a:0c:a3:69:6b:47:3d:57:61:dc:d7:fd:2f:e0:0b:
94:a0:6e:21:69:06:c3:12:a1:97:1e:8a:5e:70:a2:18:79:67:
10:b0:87:53:66:1a:8e:8b:34:d9:f4:02:c3:3d:4c:b7:71:bd:
ac:be:fb:11:02:a2:1e:36:ed:4a:83:47:8b:8d:f6:88:50:ed:
ae:28:3a:1d:22:ba:98:94:d6:b2:73:29:a8:26:31:ab:a2:93:
0a:a5:3a:b1:ae:33:48:ad:9a:54:75:aa:ea:b2:de:d8:e5:f2:
ce:ee:3c:53:be:45:03:73:69:39:9c:43:bf:83:3f:cf:cd:34:
5b:1c:c4:de:b9:37:1e:e1:6a:9d:e8:03:2b:19:20:33:f3:93:
d6:78:52:ff:42:04:54:69:b7:65:da:c2:1a:91:3d:db:a4:8b:
39:cd:73:44:d3:0d:62:cc:0a:54:c5:ff:89:ba:85:7d:ee:eb:
f5:1f:f1:25:18:61:22:11:43:b1:4f:6b:f6:25:e6:e7:99:6e:
50:e5:5c:e4:14:fb:26:cc:08:67:03:cd:39:7c:f4:46:cb:5d:
2d:34:49:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:37:04 2025 by rpki-client