Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/BQaNGWOgLf9W4ASJoCNk51rz4m4.roa
File: BQaNGWOgLf9W4ASJoCNk51rz4m4.roa (raw, json)
Hash identifier: 3MrOPPQy/n/bgSWZJbb4gIt/fvOlLCmc2ni3Pmcb3Cw=
Subject key identifier: 05:06:8D:19:63:A0:2D:FF:56:E0:04:89:A0:23:64:E7:5A:F3:E2:6E
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 7824
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/BQaNGWOgLf9W4ASJoCNk51rz4m4.roa
Signing time: Thu 17 Jul 2025 17:12:05 +0000
ROA not before: Thu 17 Jul 2025 17:12:05 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30756 (0x7824)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jul 17 17:12:05 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=05068D1963A02DFF56E00489A02364E75AF3E26E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b0:67:9a:20:c6:1c:0c:aa:99:5b:85:a2:0a:
65:15:d8:7c:1a:22:8a:17:4c:a6:51:fd:32:b1:5e:
2d:ad:84:e0:39:0b:43:4b:8b:d8:85:32:be:77:c7:
c9:d6:78:bf:af:8c:c5:0b:a8:ed:97:c4:c8:f6:03:
a6:e1:31:00:76:23:43:55:c5:d0:f6:22:56:bf:ea:
d5:68:8f:ab:0c:43:29:e8:3c:97:00:f7:c7:9d:f4:
8b:35:51:12:33:b4:69:5f:7d:a3:01:ec:c5:53:92:
5d:98:93:07:35:05:37:4e:4b:fd:33:93:e7:3a:34:
9a:6e:55:9b:2d:af:a3:16:a4:31:69:7d:2f:20:03:
6f:d4:78:25:1a:0e:8e:35:0e:1a:1b:fa:90:08:b6:
74:75:79:aa:9f:77:30:83:94:27:8d:98:c6:e4:46:
7d:68:d1:c1:be:c8:51:22:03:7d:31:55:df:b9:f8:
31:a7:9b:39:2a:13:48:d8:b2:83:2c:be:9a:50:e2:
07:1b:50:5f:ba:8e:49:15:49:e0:b9:b8:c1:61:c6:
9b:3c:9e:f3:54:0d:8c:ca:2d:fa:5a:b9:45:0f:de:
d6:14:64:ba:77:42:77:d0:a3:91:61:61:8e:15:1f:
e5:e9:2d:5a:66:00:39:c6:ff:ae:ca:e8:8e:47:fd:
21:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:06:8D:19:63:A0:2D:FF:56:E0:04:89:A0:23:64:E7:5A:F3:E2:6E
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/BQaNGWOgLf9W4ASJoCNk51rz4m4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
2e:38:24:c4:e5:bf:82:6f:22:5f:e5:5f:53:65:2c:34:1f:2a:
25:a8:e8:01:dc:01:d5:af:e1:2c:0a:ab:70:8b:f4:05:76:b0:
14:61:61:d8:c5:8c:05:8b:cb:a4:9e:5e:3c:e8:fb:15:5a:23:
f3:0e:92:23:e5:4c:20:55:60:c0:38:f8:d4:90:c5:c3:85:b7:
cd:03:0f:ef:3a:40:30:9d:10:5d:d1:79:f5:6f:93:f9:4e:52:
0b:b3:ac:1f:c5:f8:34:98:20:bb:47:95:e7:14:59:97:a2:78:
93:6a:b0:8c:55:c6:2a:9f:9c:f7:0a:04:50:2f:af:cc:94:d1:
e7:38:f2:9a:8a:09:40:9e:dc:b8:ae:58:82:48:61:21:f7:c9:
6b:cd:9e:31:15:d8:e0:f6:10:f6:5b:c1:ea:c1:a0:84:95:cb:
ae:ae:de:d5:25:3c:85:65:0c:41:07:03:15:a1:cd:5b:3f:51:
b8:dc:a5:3c:6c:23:7d:35:21:e4:32:02:34:31:a5:29:b4:04:
e7:01:87:15:c0:29:6c:70:83:b5:06:94:4a:ae:b4:f3:51:c9:
53:69:4d:96:58:6c:3e:20:01:bc:3a:d5:65:33:21:ba:84:b0:
a0:55:bf:57:2f:9c:b3:81:2e:26:60:12:b0:3e:ec:9b:c7:93:
64:f9:92:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:47:32 2025 by rpki-client