Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/AkZn1bPEDR5zyOI6ggQdLZhrd-8.roa
File: AkZn1bPEDR5zyOI6ggQdLZhrd-8.roa (raw, json)
Hash identifier: tLkRtPiCMmRpEbkb+yxt7i2tRpvrfHzAtTOFsWqwlMA=
Subject key identifier: 02:46:67:D5:B3:C4:0D:1E:73:C8:E2:3A:82:04:1D:2D:98:6B:77:EF
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 6D94
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/AkZn1bPEDR5zyOI6ggQdLZhrd-8.roa
Signing time: Thu 19 Jun 2025 13:41:44 +0000
ROA not before: Thu 19 Jun 2025 13:41:44 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28052 (0x6d94)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jun 19 13:41:44 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=024667D5B3C40D1E73C8E23A82041D2D986B77EF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:ef:c8:f5:7f:3c:a3:3c:34:1e:55:69:16:85:
dd:15:c7:da:a3:b3:d3:91:31:d2:2e:85:0f:ea:69:
32:9c:9f:fe:7f:29:a9:71:23:c7:ea:50:17:2a:18:
24:e6:46:e0:b8:d2:b2:d7:d7:2e:5f:3c:6a:d0:3b:
a4:a3:88:81:c1:46:31:b8:cb:b7:95:8c:de:c4:e5:
8c:b9:bc:8a:12:d2:20:5a:2f:e5:c6:df:dc:0a:43:
74:eb:d4:6a:4b:91:b4:6b:6f:ea:06:17:bb:bd:a1:
8c:44:ea:44:5a:c6:00:85:e7:65:24:f0:1b:e4:d7:
03:46:fd:cb:23:a2:e2:13:29:9b:f3:9b:6c:0d:a4:
e3:72:2c:4f:0b:56:de:0e:ea:8d:0d:81:c8:c1:00:
d5:bc:95:6a:98:b7:38:6d:2e:8e:0a:8d:38:82:f6:
39:a3:89:79:12:ab:95:97:e5:9a:85:5e:08:39:34:
ac:80:cc:c8:34:a4:7e:f7:bd:1c:d7:11:30:d5:65:
d5:da:cc:bd:b2:21:23:36:4f:8d:a3:5c:ed:51:eb:
93:1c:e6:53:0f:32:45:4c:4e:4d:0e:54:c1:1d:2e:
f1:e2:a0:33:4f:81:2c:a2:5d:55:53:aa:cf:97:26:
42:73:a7:da:f4:97:27:b4:5d:b0:8c:03:07:18:ef:
7f:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:46:67:D5:B3:C4:0D:1E:73:C8:E2:3A:82:04:1D:2D:98:6B:77:EF
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/AkZn1bPEDR5zyOI6ggQdLZhrd-8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
2b:b9:a9:61:f8:96:95:f6:84:0c:85:2c:4b:26:a9:f0:f5:5c:
3b:57:e2:47:d1:18:6f:9e:3f:86:36:40:fd:75:2c:9f:33:95:
02:82:e4:13:5a:c2:8a:0c:2a:fa:77:a4:8d:03:a3:a7:e4:ce:
d6:26:fa:bc:eb:21:a7:fa:ea:c7:3b:de:97:9e:34:93:74:c6:
f9:54:d2:0f:ed:71:9a:47:fe:07:b5:4f:5d:e5:ff:7d:bc:46:
4d:f7:9a:1a:45:79:2d:b1:9d:0e:5b:f8:21:a0:1e:2c:5e:64:
b6:de:c0:18:a1:ca:fe:f1:d6:17:9d:cc:ff:82:5d:11:54:58:
91:9d:f7:aa:2e:1a:db:67:00:1d:8c:71:79:5b:f1:2c:dc:60:
d9:ba:92:9b:8f:12:4f:7a:c4:07:46:42:3d:0a:f3:ea:17:8a:
34:a2:98:b5:5a:d3:6e:73:76:ed:b3:fa:c9:42:04:92:5e:99:
93:b5:5a:97:ca:2b:01:31:11:b1:83:b3:17:89:9a:42:ba:ad:
59:16:4a:91:70:c2:91:29:c0:68:c6:54:a8:71:05:ed:aa:e5:
ce:ff:be:a8:17:b7:e2:7b:86:8b:8c:c3:8b:5f:4a:f2:e2:66:
ac:ea:b3:83:2e:7e:0e:21:0f:fe:d6:80:a9:7e:63:da:77:44:
94:6a:0b:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:46:51 2025 by rpki-client