Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/C_IeDOUFRn_j-cBakSRbHopKcQg.roa
File: C_IeDOUFRn_j-cBakSRbHopKcQg.roa (raw, json)
Hash identifier: B7YCDFFaI0H9nCsekc1jPChGdoWTj450thxCykOUqIo=
Subject key identifier: 0B:F2:1E:0C:E5:05:46:7F:E3:F9:C0:5A:91:24:5B:1E:8A:4A:71:08
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 7504
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/C_IeDOUFRn_j-cBakSRbHopKcQg.roa
Signing time: Wed 09 Jul 2025 08:45:11 +0000
ROA not before: Wed 09 Jul 2025 08:45:11 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29956 (0x7504)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jul 9 08:45:11 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=0BF21E0CE505467FE3F9C05A91245B1E8A4A7108
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b5:2f:89:13:0c:12:2e:e2:95:2a:21:3b:5d:
51:70:32:dc:e8:a4:64:b6:4c:fd:66:6f:4b:49:8f:
e1:5d:5f:46:b1:93:ed:a3:77:65:6b:62:db:03:c3:
a8:75:02:31:80:41:70:43:d3:7f:52:09:ac:0b:6a:
94:ee:ce:89:dc:22:3f:d7:72:7c:46:99:4e:7f:0f:
5f:cd:ee:68:ee:c6:de:d8:09:b2:36:a9:db:e4:9b:
ef:cb:0a:58:eb:24:94:6e:ad:ee:8e:2b:58:3e:5b:
87:6a:83:a9:f7:32:79:5f:c3:5f:9f:a9:6b:83:32:
32:ed:d3:2a:4d:eb:ad:69:8d:d8:54:a8:3c:11:6f:
a5:f1:30:61:03:0b:38:57:38:16:df:90:7b:46:7c:
b4:e9:86:fa:fb:4e:a5:85:68:02:bb:d2:76:d0:d2:
aa:a4:8e:c2:64:f1:d7:ff:70:57:c3:83:64:0f:9d:
6d:7b:fc:8a:32:5d:47:35:d6:83:47:11:80:4d:1e:
94:c5:30:31:f4:af:c4:9a:e3:8e:e9:db:cd:14:5f:
68:66:52:84:ff:46:aa:c0:52:eb:6c:54:71:54:f6:
45:dc:fb:8a:f4:0b:7c:20:59:6d:d7:74:07:aa:3a:
fd:c1:23:1b:7b:e7:56:a0:dd:b6:f6:0c:8e:08:6e:
23:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:F2:1E:0C:E5:05:46:7F:E3:F9:C0:5A:91:24:5B:1E:8A:4A:71:08
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/C_IeDOUFRn_j-cBakSRbHopKcQg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
a2:1b:3c:fd:44:76:e9:33:9f:78:5a:3d:6b:dc:1c:f1:e9:f1:
e1:d4:f5:93:67:27:cc:9a:3a:19:00:35:ff:90:9b:d4:a2:a4:
0b:7a:5c:77:06:5d:34:04:f9:d0:cf:82:c8:e7:8e:40:2d:9e:
84:18:03:12:67:01:f6:ee:4c:96:36:88:e8:64:fa:18:62:a4:
2e:5a:fb:78:af:98:8f:f0:53:48:eb:50:1e:8a:00:dd:9d:d8:
b9:42:62:28:6e:0d:18:4e:0d:28:13:3d:1e:f9:46:a2:80:d0:
61:01:4e:92:25:04:b2:81:09:21:a6:03:c3:d4:fe:66:7a:c5:
e7:99:78:0e:81:73:73:bc:6c:07:e0:6e:d1:70:6e:5b:03:b8:
78:53:2b:fc:97:96:75:fc:37:ee:17:09:4a:45:a9:46:5d:7f:
37:18:3e:87:ac:02:92:22:f9:58:6f:5a:da:ae:9f:45:66:e4:
f0:b6:a8:54:dd:c7:59:cb:92:1c:26:45:1b:87:dc:62:06:c4:
61:eb:74:f2:8d:88:ac:21:d2:43:b7:99:e4:a3:a5:ff:9f:85:
94:35:33:b4:46:7b:c1:6a:ea:36:91:c2:b8:a0:e8:27:b2:8c:
e2:bb:b5:3f:58:40:bc:61:b9:3b:ed:ee:32:ce:1d:cc:bc:2e:
54:e6:52:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:30:49 2025 by rpki-client