Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/8QaHa5cdeap0hJhVMeRJDZ970xg.roa
File: 8QaHa5cdeap0hJhVMeRJDZ970xg.roa (raw, json)
Hash identifier: OZCU5o070K/ao00p8wqzWp/IVHTV5ObFE+u6VmIk8Fc=
Subject key identifier: F1:06:87:6B:97:1D:79:AA:74:84:98:55:31:E4:49:0D:9F:7B:D3:18
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 705C
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/8QaHa5cdeap0hJhVMeRJDZ970xg.roa
Signing time: Thu 26 Jun 2025 22:44:30 +0000
ROA not before: Thu 26 Jun 2025 22:44:30 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28764 (0x705c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jun 26 22:44:30 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=F106876B971D79AA7484985531E4490D9F7BD318
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:d4:79:a4:23:cd:cc:56:ad:42:87:f5:4d:24:
a1:33:9a:5d:38:41:23:fa:d7:11:d7:86:57:69:60:
b6:f7:4d:23:61:d5:14:de:69:e6:d1:42:ca:7a:46:
8b:8e:00:a1:bd:b9:49:46:17:cb:ff:66:90:38:1c:
be:5f:f4:d4:54:dc:88:54:ee:1b:fa:19:f4:ad:97:
2a:04:f5:a6:7f:be:ab:f6:15:55:7e:d4:c5:7f:92:
84:8b:97:f0:d1:7a:42:f6:8d:0e:8d:2f:ee:ef:bf:
02:d4:eb:f8:7c:6d:e9:62:4e:55:ac:bf:f8:3b:42:
af:b7:0c:30:c3:be:d3:b4:71:7a:64:24:f6:7f:17:
b6:6c:f7:0c:43:44:1e:f3:ac:c5:fe:37:00:56:ba:
15:73:50:1b:72:8f:6e:86:eb:c0:b3:0a:06:48:d8:
97:25:a5:81:03:11:44:16:6b:fa:c5:b8:53:56:bc:
e5:72:04:88:72:0e:80:c7:41:2e:f2:b5:20:29:9d:
60:ea:4a:f5:2f:11:d3:eb:f2:27:bc:b6:63:8b:60:
48:21:dd:dd:1f:31:92:9d:18:d2:e2:39:03:ab:df:
2a:fe:bd:3c:b2:c1:c5:8c:c6:63:72:79:7a:83:57:
35:ae:b6:7b:89:72:e5:88:e8:66:fa:e3:7c:df:95:
d5:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:06:87:6B:97:1D:79:AA:74:84:98:55:31:E4:49:0D:9F:7B:D3:18
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/8QaHa5cdeap0hJhVMeRJDZ970xg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
b7:a4:ff:36:3e:77:95:65:dc:98:27:ee:50:08:a6:b4:41:73:
02:6b:fb:83:41:c1:20:16:2e:73:78:ba:39:60:19:22:50:f6:
00:e1:24:24:40:2e:0f:f4:13:08:dd:15:62:a3:d1:22:86:7c:
b5:75:ff:6f:b0:5f:c3:f8:4c:2b:48:01:fc:30:52:f4:c2:f2:
74:98:19:00:6e:86:2c:ee:99:98:f2:97:12:64:96:8c:77:65:
52:0a:df:6c:3d:8a:ff:96:de:8d:d3:e7:a8:c2:25:5a:ed:72:
55:f0:e4:0c:b3:1f:9d:0f:49:58:38:19:a1:06:a1:b9:0a:7c:
04:68:81:31:f5:ff:ea:e2:ab:46:22:d2:3d:06:61:35:89:4e:
43:5d:8b:8c:49:a5:d8:3d:13:c5:77:6e:6b:1d:82:81:33:0c:
93:23:4a:5e:82:8d:1d:63:bf:43:ab:f7:11:fb:b0:05:80:82:
7b:02:06:18:13:70:4b:18:51:af:3d:46:c6:da:22:e1:e0:dc:
9e:a7:ec:7a:51:e3:75:4a:16:3f:03:cd:96:c7:05:96:b6:15:
79:89:9d:30:f3:56:8b:6d:09:77:c0:2e:10:4d:23:46:b0:8d:
81:66:32:2c:4e:22:f3:36:8a:42:66:63:3d:e5:d8:cb:47:c6:
87:97:5f:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:40:11 2025 by rpki-client