Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/C2BRqtA0puo8VZxVtsERJZ7GIh4.roa
File: C2BRqtA0puo8VZxVtsERJZ7GIh4.roa (raw, json)
Hash identifier: rnAvNLTJNdpDyuTObZeWeNiyhUAjjXGC+b/bC/yhX0c=
Subject key identifier: 0B:60:51:AA:D0:34:A6:EA:3C:55:9C:55:B6:C1:11:25:9E:C6:22:1E
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 6D5E
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/C2BRqtA0puo8VZxVtsERJZ7GIh4.roa
Signing time: Wed 18 Jun 2025 18:37:10 +0000
ROA not before: Wed 18 Jun 2025 18:37:10 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27998 (0x6d5e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jun 18 18:37:10 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=0B6051AAD034A6EA3C559C55B6C111259EC6221E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ad:1a:2d:5b:88:0d:b7:cf:5f:2b:30:28:21:
7e:36:10:e1:fe:1e:8b:39:3d:a8:27:0c:97:20:5b:
74:ab:3d:d4:0a:4a:52:7f:71:d7:ec:4b:fc:03:7a:
cf:76:9e:a1:d8:27:1c:9f:af:86:24:52:d4:50:be:
66:c2:79:90:4c:3b:e5:ea:b2:a9:c4:d9:f9:2e:c0:
32:b8:73:fc:cd:bf:33:f1:ca:29:f5:65:bd:68:94:
10:42:73:2f:9f:4e:5f:56:ad:98:69:4d:54:a6:ab:
6d:e6:db:73:79:56:bf:3c:f7:ff:9a:ac:d9:e5:3b:
24:71:22:39:e7:01:3e:22:8f:49:9c:b2:f6:96:f9:
02:31:87:ea:ee:e1:47:cb:f6:4e:e8:78:42:3d:2c:
85:e4:18:36:b7:ed:c9:9b:0a:39:3d:6b:38:10:ef:
7d:5f:bd:20:3d:a2:e0:6e:9e:87:d1:9e:ff:83:f6:
e8:8f:2a:0d:de:ed:1a:53:9b:fa:d1:c0:41:35:88:
50:30:84:b7:bc:61:a9:84:ec:91:d2:71:51:d8:54:
a4:e9:03:69:c3:38:da:cf:34:c6:d2:43:15:6b:d6:
08:4b:a4:68:c6:d2:b6:22:81:51:37:bb:3c:71:a6:
cb:78:ef:8c:f8:12:cd:da:06:22:20:cb:6b:21:c2:
3e:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:60:51:AA:D0:34:A6:EA:3C:55:9C:55:B6:C1:11:25:9E:C6:22:1E
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/C2BRqtA0puo8VZxVtsERJZ7GIh4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
87:7f:a5:59:72:1c:ff:cc:52:bd:a2:08:65:86:a0:84:68:0e:
f4:b3:2d:3d:4c:19:ab:49:d5:c3:3a:67:c8:0c:da:ad:10:f3:
70:6d:26:75:64:99:00:51:01:1d:5f:aa:0d:dd:97:6e:ac:a8:
2f:ed:7c:ae:f3:2f:2d:36:c5:15:4a:50:2d:d1:e4:d8:33:00:
2f:25:07:21:da:44:97:2b:6a:89:da:0d:88:7a:dc:76:4e:dd:
4c:4f:41:64:99:c6:81:68:b3:c3:8f:16:c3:56:41:45:52:79:
1a:3e:37:ce:d9:bb:f4:96:09:30:de:2d:88:05:fb:70:4f:83:
b6:9e:9d:ad:a0:ed:a5:c7:69:8c:db:42:b3:50:5e:c0:cc:ad:
eb:d0:1c:a2:65:b8:52:7b:ce:88:d6:e7:98:34:41:c4:51:00:
e0:44:9d:79:32:a8:4a:9b:39:f4:de:f3:18:d9:06:60:12:e1:
47:8c:e9:3f:a7:a8:5c:7e:e4:d6:ce:06:10:7f:e3:a4:cb:a0:
1f:e3:9b:65:d4:e3:64:69:5c:68:5b:2a:40:a3:3d:24:cc:b0:
4e:f1:45:a2:ca:1c:66:15:f8:fd:4a:8b:72:0a:9e:31:45:b3:
78:84:70:8b:c5:bd:84:c8:83:47:a9:6e:4c:cc:59:1c:e2:17:
09:dd:88:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:47:42 2025 by rpki-client