Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/B_ykZ70w9zxtT6FliHac6KwG01E.roa
File: B_ykZ70w9zxtT6FliHac6KwG01E.roa (raw, json)
Hash identifier: PjAAgAXUDzmzCTom6zZ34ZK+Tt8GjH206clEpLeTigk=
Subject key identifier: 07:FC:A4:67:BD:30:F7:3C:6D:4F:A1:65:88:76:9C:E8:AC:06:D3:51
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 78D0
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/B_ykZ70w9zxtT6FliHac6KwG01E.roa
Signing time: Sat 19 Jul 2025 12:12:15 +0000
ROA not before: Sat 19 Jul 2025 12:12:15 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30928 (0x78d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jul 19 12:12:15 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=07FCA467BD30F73C6D4FA16588769CE8AC06D351
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:6d:eb:fb:95:73:2d:a4:53:93:a3:97:4e:4b:
c2:ac:ed:22:9d:97:39:c3:39:9b:7d:14:cc:68:b9:
9b:93:b0:d1:bc:e2:c7:99:b2:29:bd:52:25:30:d6:
47:94:9e:56:5b:c6:67:f2:83:26:fc:d3:20:5b:89:
de:99:74:fe:4f:09:1f:82:a4:99:7d:44:20:4a:70:
ee:57:db:3e:bd:58:0f:4b:61:11:e3:ce:75:c4:00:
bb:47:40:84:1f:f8:b4:8a:8d:5f:e8:35:bb:a5:df:
a4:69:30:92:d5:2e:5f:bc:6b:7c:c8:8c:6f:8c:c9:
7e:ef:be:fb:44:04:ac:ad:d3:3f:d5:1b:a1:b3:d9:
25:4b:d6:d8:bb:4f:d1:37:94:41:5c:8c:51:9e:69:
db:54:8f:d3:99:63:e3:1d:e8:ad:24:ce:ca:6a:82:
eb:d0:aa:9e:c5:73:64:6f:ee:cc:f5:2b:e0:e2:22:
35:9c:be:e8:02:6e:27:d4:14:6a:e8:5e:2d:53:c8:
3d:d2:80:f9:9f:0a:d9:d7:64:66:dd:42:aa:6d:c7:
29:8e:e9:a7:6c:32:1f:f3:00:e7:bb:8d:77:99:fe:
83:7e:5f:38:b2:bd:56:bd:9d:b4:7d:b5:4e:7e:60:
33:0b:47:a9:66:54:dc:1c:c6:19:26:8f:67:c5:d3:
83:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:FC:A4:67:BD:30:F7:3C:6D:4F:A1:65:88:76:9C:E8:AC:06:D3:51
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/B_ykZ70w9zxtT6FliHac6KwG01E.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
1a:86:17:50:cd:24:e6:bb:e8:6b:df:4c:83:42:3b:f9:91:0f:
8a:cd:93:f8:d9:5f:a9:2d:1d:08:f2:55:e6:32:33:eb:ec:20:
4f:e5:bb:00:41:15:ae:2c:51:08:be:55:36:8a:43:72:0f:83:
e0:ad:ba:55:51:8c:11:4d:dd:01:01:8f:21:c6:79:4b:71:ab:
21:94:f2:46:ac:2e:ce:ac:c6:e6:c9:9b:f1:b0:53:b9:69:2e:
59:cc:b7:e4:c9:6e:ae:d2:9f:c7:3d:4a:8c:8b:bd:49:9d:cf:
5f:56:96:ef:d7:47:5c:9a:d5:69:3e:ce:32:82:6b:c7:6f:1e:
bb:f5:08:f0:02:8b:89:f3:25:12:ad:35:dc:76:bb:13:37:2f:
8f:ee:31:c8:3f:d3:da:ca:9b:64:47:01:fc:47:5d:44:05:f1:
d9:f9:90:bb:a2:f4:0a:c3:f1:fc:ac:5f:1d:74:9e:7d:49:3d:
b7:c5:95:cc:fa:3b:4a:00:68:7e:2b:d9:b9:5a:d2:30:bf:b3:
32:29:c5:fc:22:12:69:4d:91:3f:7a:a9:97:9a:08:6c:12:f0:
9e:65:8a:ef:5a:89:5e:34:4b:01:47:7c:1c:be:28:87:8b:6b:
80:19:2e:cd:6a:24:c9:8b:18:1e:2d:fe:fa:53:8c:8e:83:7b:
49:4c:01:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:42:13 2025 by rpki-client