Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/7fqenHtO1cPJlk2rNLH2AxGcSR4.roa
File: 7fqenHtO1cPJlk2rNLH2AxGcSR4.roa (raw, json)
Hash identifier: c4slmaNyT7Y9yG8dWF/olfU1J64A12BV89bjrIqM37Q=
Subject key identifier: ED:FA:9E:9C:7B:4E:D5:C3:C9:96:4D:AB:34:B1:F6:03:11:9C:49:1E
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 6F62
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/7fqenHtO1cPJlk2rNLH2AxGcSR4.roa
Signing time: Tue 24 Jun 2025 14:14:23 +0000
ROA not before: Tue 24 Jun 2025 14:14:23 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28514 (0x6f62)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jun 24 14:14:23 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=EDFA9E9C7B4ED5C3C9964DAB34B1F603119C491E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:68:0b:ff:64:8f:88:9b:c7:3d:de:31:72:1e:
2d:42:25:dc:7d:25:5c:b0:38:74:7e:c0:b5:8b:8a:
91:1f:42:25:b7:98:86:9a:05:07:8c:d8:eb:b6:e0:
1a:a5:8e:9e:80:af:0c:f8:e3:bb:09:df:73:5e:2f:
c7:00:20:ca:81:63:8c:10:87:87:26:29:54:6b:58:
d1:04:16:34:05:65:39:99:c6:af:30:67:3c:6d:df:
67:f1:8c:a4:8e:25:97:f6:5e:d8:0d:27:04:bc:eb:
9c:02:34:de:2b:db:f8:93:db:95:d1:76:cb:dd:07:
a5:26:55:dd:1f:e5:75:a7:5b:af:d0:26:c3:bf:ad:
b5:bf:a7:61:2a:0c:c0:09:ad:9f:d8:1f:03:96:15:
ee:83:a8:55:ff:02:8c:12:c2:51:ec:9f:1b:19:70:
86:87:d2:41:aa:b5:65:68:d0:e8:d0:07:60:2d:85:
9a:03:6e:53:ff:8c:1f:f5:2a:a0:31:ec:b5:e5:4e:
8d:99:0a:d5:a4:af:bf:f2:3c:6b:76:f7:e3:11:8e:
58:ff:99:24:3b:75:73:4b:d8:54:23:57:70:84:a4:
59:55:98:55:9c:97:1a:92:67:c9:32:d0:88:4b:bb:
7c:fd:0b:e7:61:bb:00:b5:31:78:77:1f:82:9a:12:
1d:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:FA:9E:9C:7B:4E:D5:C3:C9:96:4D:AB:34:B1:F6:03:11:9C:49:1E
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/7fqenHtO1cPJlk2rNLH2AxGcSR4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
37:e8:aa:03:fa:d8:09:17:b9:af:23:62:e5:af:1f:06:db:82:
0b:95:d3:84:a1:82:da:33:fa:46:0c:29:35:8d:df:79:77:56:
82:ea:93:e3:0a:ae:09:82:cd:da:ca:b3:22:8b:04:db:be:30:
e4:e5:f8:ec:a8:08:20:01:45:dc:a3:8d:1f:e4:76:50:76:ec:
fb:26:bd:07:f3:56:11:4d:37:8a:c9:96:b8:38:68:dd:86:c8:
af:3a:0c:3c:20:3e:45:83:d0:3f:ca:d1:5d:16:59:f8:e6:bb:
68:63:f0:41:63:10:d1:da:d0:d5:c4:58:33:7b:98:43:18:a1:
ae:ad:13:4d:9a:2a:90:81:e3:ca:34:10:69:7b:fc:ba:cf:86:
66:60:e6:89:10:ed:95:41:6d:54:34:fe:9e:d7:e1:f0:f6:49:
b6:cd:08:93:9d:9c:3a:e3:4d:81:5f:3b:e8:5a:c1:7f:1f:6f:
d4:c3:9d:62:fa:22:74:1d:96:f4:e3:32:a5:ef:28:75:06:3f:
ef:4c:d0:6d:8d:f4:ac:26:5b:37:ae:e4:9f:40:fa:3b:32:f8:
ed:f9:6c:cf:cb:20:b1:8f:ab:bf:7a:8f:dc:91:16:86:5b:f6:
6e:91:f9:d4:cc:a8:09:c9:fb:c5:a8:07:2d:8f:e6:b6:30:f4:
6c:0a:9f:e3
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgICb2IwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNTA2MjQx
NDE0MjNaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKEVERkE5RTlDN0I0RUQ1
QzNDOTk2NERBQjM0QjFGNjAzMTE5QzQ5MUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDPaAv/ZI+Im8c93jFyHi1CJdx9JVywOHR+wLWLipEfQiW3mIaa
BQeM2Ou24Bqljp6Arwz447sJ33NeL8cAIMqBY4wQh4cmKVRrWNEEFjQFZTmZxq8w
Zzxt32fxjKSOJZf2XtgNJwS865wCNN4r2/iT25XRdsvdB6UmVd0f5XWnW6/QJsO/
rbW/p2EqDMAJrZ/YHwOWFe6DqFX/AowSwlHsnxsZcIaH0kGqtWVo0OjQB2AthZoD
blP/jB/1KqAx7LXlTo2ZCtWkr7/yPGt29+MRjlj/mSQ7dXNL2FQjV3CEpFlVmFWc
lxqSZ8ky0IhLu3z9C+dhuwC1MXh3H4KaEh3VAgMBAAGjggI0MIICMDAdBgNVHQ4E
FgQU7fqenHtO1cPJlk2rNLH2AxGcSR4wHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3LzdmcWVuSHRPMWNQSmxr
MnJOTEgyQXhHY1NSNC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwYgYIKwYBBQUHAQcBAf8EUzBRME8EAgABMEkD
BAIr7zADBAMr9gAwDAMEAiv2DAMEBCv2IDAMAwQCK/Y0AwQCK/ZgAwQCZyMwMAsD
AwJn7AMEA2fsEDAMAwQCZ+wcAwQCZ+xgMA0GCSqGSIb3DQEBCwUAA4IBAQA36KoD
+tgJF7mvI2Llrx8G24ILldOEoYLaM/pGDCk1jd95d1aC6pPjCq4Jgs3ayrMiiwTb
vjDk5fjsqAggAUXco40f5HZQduz7Jr0H81YRTTeKyZa4OGjdhsivOgw8ID5Fg9A/
ytFdFln45rtoY/BBYxDR2tDVxFgze5hDGKGurRNNmiqQgePKNBBpe/y6z4ZmYOaJ
EO2VQW1UNP6e1+Hw9km2zQiTnZw6402BXzvoWsF/H2/Uw51i+iJ0HZb04zKl7yh1
Bj/vTNBtjfSsJls3ruSfQPo7Mvjt+WzPyyCxj6u/eo/ckRaGW/ZukfnUzKgJyfvF
qActj+a2MPRsCp/j
-----END CERTIFICATE-----
Generated at Sun Jul 20 12:43:05 2025 by rpki-client