Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/9ERvlwsIyA7tneogtzzidS5dvjQ.roa
File: 9ERvlwsIyA7tneogtzzidS5dvjQ.roa (raw, json)
Hash identifier: WmY4Yxl6+G0RzFti864kV44NmvS9PgSgxGhSOst4vUY=
Subject key identifier: F4:44:6F:97:0B:08:C8:0E:ED:9D:EA:20:B7:3C:E2:75:2E:5D:BE:34
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 74FC
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/9ERvlwsIyA7tneogtzzidS5dvjQ.roa
Signing time: Wed 09 Jul 2025 06:48:00 +0000
ROA not before: Wed 09 Jul 2025 06:48:00 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29948 (0x74fc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jul 9 06:48:00 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=F4446F970B08C80EED9DEA20B73CE2752E5DBE34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:1a:2c:8f:e0:91:5f:22:db:96:02:fc:d1:43:
62:75:45:f8:87:af:ec:0a:45:44:f7:d6:bc:5e:ad:
c2:9b:f8:cd:7b:04:a4:1f:65:a6:ed:cf:fd:3b:41:
74:6b:5e:f3:d3:a5:90:cf:dc:ab:17:08:ca:0d:b8:
0f:2f:50:f7:25:df:b0:dc:82:21:1f:ff:0f:46:9c:
52:ee:75:d8:33:fd:6f:72:91:ab:d6:2c:92:8f:2a:
2f:6e:62:b5:a1:b0:3f:1a:ff:ed:39:2f:0e:a6:ce:
89:b0:a9:4e:5f:23:fa:66:e4:f7:39:cd:40:b5:8b:
67:e7:d4:ba:c2:49:5f:d5:ad:0a:a4:1a:fb:f1:58:
13:b3:91:ac:ce:15:36:7f:8f:cb:fc:cf:55:65:c9:
3f:12:d8:29:a1:02:7e:d5:b8:fb:8a:67:64:10:42:
af:aa:96:01:ef:48:7b:04:c5:29:2e:ba:c2:93:82:
8e:d1:db:15:60:37:37:33:70:42:b8:63:77:ff:83:
66:bf:76:e7:c8:27:de:0f:48:c0:c5:83:4e:57:92:
d1:eb:aa:c4:6f:11:96:73:9c:f3:05:48:ce:79:b9:
6f:db:ca:3f:ed:c0:05:03:a8:d0:8a:27:06:a5:9e:
d9:e9:5d:72:6f:01:53:73:dc:a1:78:8c:79:c7:71:
3d:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:44:6F:97:0B:08:C8:0E:ED:9D:EA:20:B7:3C:E2:75:2E:5D:BE:34
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/9ERvlwsIyA7tneogtzzidS5dvjQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
b0:51:0e:ed:57:91:79:aa:2b:b6:64:cc:92:73:8b:89:05:19:
5f:2e:6c:9b:7a:50:5a:20:08:01:97:9c:f2:a0:c3:31:f4:07:
e7:eb:60:f3:35:ae:6b:8e:7d:43:53:6d:f3:e6:fc:53:6f:08:
bc:f4:15:4e:db:99:04:b1:bd:bf:f2:cb:f1:90:cf:6e:ee:b9:
e2:9d:ca:1a:62:9c:5f:2c:78:cd:18:81:3c:69:fe:d7:ca:1f:
95:35:26:f2:7d:f7:37:52:6e:7e:0d:c0:9f:5b:76:a8:0c:77:
b9:e2:76:cd:93:33:2c:61:07:14:3e:4f:e7:1a:6e:8e:6c:28:
96:1f:13:51:85:87:f4:7a:10:3a:e3:7e:61:77:a5:76:f4:7f:
77:ac:29:ce:65:2b:8f:88:e3:4e:01:a6:76:f1:87:82:3a:e7:
8b:a6:fa:32:ed:23:2f:49:0e:f6:1d:db:eb:9d:8d:ad:94:92:
ff:79:2d:da:87:9d:ad:40:5e:3a:69:7d:32:f8:5e:88:29:73:
2d:43:70:fc:94:89:18:eb:81:d7:46:52:dd:93:ff:63:d5:a8:
b8:fc:b2:f2:da:fa:cd:11:a1:21:00:f0:96:c3:17:63:c9:bb:
b9:3b:b4:06:af:2a:d3:01:ea:2d:ee:ac:41:d1:f7:59:1d:c2:
99:e6:12:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:54:50 2025 by rpki-client