Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/C4POiCNUQXqeiOQgRTlx7el6Zac.roa
File: C4POiCNUQXqeiOQgRTlx7el6Zac.roa (raw, json)
Hash identifier: 1VtW6rFBIhkGolHVG7im/T31/fzF8sUeI70Eqbxnf00=
Subject key identifier: 0B:83:CE:88:23:54:41:7A:9E:88:E4:20:45:39:71:ED:E9:7A:65:A7
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 73A0
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/C4POiCNUQXqeiOQgRTlx7el6Zac.roa
Signing time: Sat 05 Jul 2025 15:44:53 +0000
ROA not before: Sat 05 Jul 2025 15:44:53 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29600 (0x73a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jul 5 15:44:53 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=0B83CE882354417A9E88E420453971EDE97A65A7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:d3:78:a6:8d:33:52:54:ab:f1:3d:e4:ad:92:
85:65:18:5f:9e:88:b3:45:10:32:59:e7:03:ec:6e:
14:35:ce:ee:ed:a8:d8:c7:0c:9d:dd:ec:a8:2b:22:
26:80:1e:92:30:f3:a1:53:da:63:d6:a3:00:8d:18:
9f:12:e7:4d:2d:2a:bb:e4:fe:13:3b:af:e6:30:07:
33:49:6f:76:f6:30:d3:53:a6:7f:07:0d:b8:8f:bc:
82:8e:99:09:cb:d5:65:9c:15:9e:1e:e1:f4:f2:d3:
a5:86:4f:78:17:55:85:a3:ea:b3:79:05:a3:a2:a8:
45:13:ae:8a:31:0a:85:3b:79:0f:2c:6a:ca:ff:ab:
9d:2e:0d:56:4d:ae:92:ca:b2:67:24:e9:45:0b:41:
72:f4:a4:13:dd:81:97:fd:a0:5d:81:eb:08:00:c3:
35:54:3c:0d:3a:56:0b:b5:92:54:37:2f:c7:50:d9:
ca:55:11:4d:80:94:93:d4:89:11:e2:59:0b:cc:97:
74:31:12:fa:d1:5d:12:52:50:87:0d:c5:5d:e5:ac:
52:16:d2:22:02:b2:ee:f2:8c:18:c8:a6:a1:84:98:
73:4c:ec:eb:09:1a:cd:24:49:20:28:8d:d2:33:b6:
88:c7:3f:6a:e9:13:d7:93:be:0a:3f:e8:f0:42:bd:
2e:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:83:CE:88:23:54:41:7A:9E:88:E4:20:45:39:71:ED:E9:7A:65:A7
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/C4POiCNUQXqeiOQgRTlx7el6Zac.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
2c:18:c1:7f:f8:43:df:cf:c6:7f:84:70:51:23:70:20:fa:7e:
37:1d:8f:92:24:7b:b0:f2:d4:49:1e:b8:e1:77:97:d8:a8:69:
40:3b:9d:ad:4c:28:5d:49:9e:24:9c:fc:93:24:30:e0:1d:d5:
8d:79:69:61:60:18:8f:9b:cf:88:4e:98:65:21:f3:0d:8b:25:
12:7e:69:9d:d6:b8:ad:ea:1f:ef:99:48:0a:3f:03:f7:97:02:
f9:0b:73:90:92:1c:8a:26:28:cf:65:17:9c:16:57:94:54:51:
a2:dd:57:6a:6d:06:78:19:46:64:65:93:1d:11:9d:f6:fb:e6:
1a:e7:cc:22:c0:08:b3:d7:fd:82:65:97:79:30:e4:dc:11:b6:
6f:0b:11:ca:27:80:46:51:1d:df:43:4a:4d:0c:34:51:4f:38:
bc:09:19:b5:06:69:8b:d7:77:19:f3:c8:7c:f5:6a:33:44:9a:
a6:02:56:32:0e:4e:30:a7:9b:2d:f9:ab:6a:f6:5f:19:c0:11:
33:be:79:53:b0:3a:5d:17:4a:d5:47:85:09:21:53:39:a0:ff:
d7:f9:98:cf:a2:3b:91:5e:dd:ea:37:4d:41:0b:b5:1d:81:0f:
7c:1a:a5:fa:71:2b:3e:40:97:32:04:47:bb:c9:4f:f6:92:e7:
d0:85:49:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:35:49 2025 by rpki-client