Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/C5PPr4RPZS0fA1AuXVeYgBmc6bo.roa
File: C5PPr4RPZS0fA1AuXVeYgBmc6bo.roa (raw, json)
Hash identifier: fs9MMxNgyCCgG6Q6IsQ9y8GVP1SiQM7uEQ9uaZ5Ok10=
Subject key identifier: 0B:93:CF:AF:84:4F:65:2D:1F:03:50:2E:5D:57:98:80:19:9C:E9:BA
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 732A
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/C5PPr4RPZS0fA1AuXVeYgBmc6bo.roa
Signing time: Fri 04 Jul 2025 10:18:13 +0000
ROA not before: Fri 04 Jul 2025 10:18:13 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29482 (0x732a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jul 4 10:18:13 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=0B93CFAF844F652D1F03502E5D579880199CE9BA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:7c:d7:b4:74:e8:9f:26:8c:7c:1c:f0:48:5f:
51:3f:3c:4d:e4:26:57:90:f5:de:f7:ef:0f:d5:e5:
34:d5:6c:6f:05:83:24:96:ed:85:60:ef:68:68:2f:
a7:a2:11:eb:4a:b2:e8:a8:e9:04:c2:a0:23:17:ce:
b3:99:bc:cb:02:f0:d9:24:5e:4e:27:1a:48:f4:da:
18:95:00:6b:a1:72:c8:04:28:1c:67:71:ef:f8:6f:
31:81:6d:95:db:c3:fa:c3:b9:bb:98:c5:8a:77:86:
5c:f8:95:c0:9e:ad:f2:86:a7:24:ed:7a:15:bc:b9:
40:2b:24:10:f1:10:dd:35:b3:b3:9f:1d:12:9b:7f:
6b:71:27:84:a6:48:9e:47:41:2f:2d:b5:d2:a9:30:
ae:37:93:8f:de:35:c2:8c:1d:73:f0:58:6c:35:c3:
8b:01:6a:a4:58:b7:87:e0:45:33:f9:ad:40:72:0a:
ce:41:6f:ec:41:aa:cf:ca:75:b6:63:6d:b2:ba:80:
1f:94:5c:e3:66:46:34:6a:8d:e1:a5:e5:0d:e7:10:
de:ea:68:7d:6f:e7:54:12:17:b7:ef:46:8f:a6:cb:
95:ad:23:28:2a:e1:6e:ff:5a:0a:3f:30:4c:0d:51:
1d:15:94:ff:db:39:14:78:7a:42:6b:75:ff:b1:b7:
ff:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:93:CF:AF:84:4F:65:2D:1F:03:50:2E:5D:57:98:80:19:9C:E9:BA
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/C5PPr4RPZS0fA1AuXVeYgBmc6bo.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
af:0a:c6:2a:41:59:6f:2d:1f:0b:2c:ce:23:fa:db:e6:ab:6c:
b7:93:c1:14:b1:ed:90:13:8e:e0:a5:5e:25:28:ce:cc:b9:7c:
56:8c:30:00:28:70:23:e7:9d:d4:b0:ca:08:65:a1:f6:12:50:
a4:7d:97:d4:b2:46:c0:d3:37:db:db:1c:d9:f5:26:c4:86:80:
2a:d7:85:a6:1a:d7:a8:bf:52:a2:77:01:60:9b:fc:54:be:40:
5a:3b:30:64:c9:2d:68:43:32:1e:ad:dd:30:41:59:40:55:d8:
35:5d:1e:a7:91:b4:06:99:05:f6:47:0f:3d:c5:d2:0f:e8:45:
af:83:13:a9:88:04:1d:02:b5:e9:be:5c:24:5b:27:a0:d1:05:
3a:b7:64:35:f9:7c:4f:41:38:30:f3:6c:8e:e0:47:83:01:17:
e0:f3:59:ab:72:42:7f:13:08:fa:cf:4d:20:af:e2:cf:f6:67:
cc:61:53:88:be:d3:24:fc:9e:74:5a:05:5f:de:39:09:93:9c:
43:d1:bc:9b:51:1a:a7:3c:37:56:be:33:da:78:74:d3:8b:d3:
5f:60:a1:52:76:c2:07:96:63:67:ad:8d:ac:34:84:2d:8b:9b:
66:02:02:28:95:02:25:c7:02:03:49:d1:58:9a:16:dc:73:7c:
be:1d:ea:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:37:02 2025 by rpki-client