Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/DEq2xZUE13Z5KuFCZh9DSfAoO6I.roa
File: DEq2xZUE13Z5KuFCZh9DSfAoO6I.roa (raw, json)
Hash identifier: 6DuC3xGpNc2sIIPhAUnKkLITAc9uYvBqt6dnNglF0F4=
Subject key identifier: 0C:4A:B6:C5:95:04:D7:76:79:2A:E1:42:66:1F:43:49:F0:28:3B:A2
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 6EF4
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/DEq2xZUE13Z5KuFCZh9DSfAoO6I.roa
Signing time: Mon 23 Jun 2025 10:44:21 +0000
ROA not before: Mon 23 Jun 2025 10:44:21 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28404 (0x6ef4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jun 23 10:44:21 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=0C4AB6C59504D776792AE142661F4349F0283BA2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:39:a4:dd:28:14:64:be:7f:71:61:73:52:fd:
8d:27:a4:d1:9f:42:8a:83:0b:d7:dd:a7:01:39:4f:
b0:ff:c8:9a:a1:7e:f5:64:b2:09:ef:a0:2d:e3:b7:
59:eb:81:ee:66:eb:9b:e5:f4:71:4c:ec:09:93:b9:
10:da:25:88:a6:42:5d:ae:68:29:3d:c0:a6:52:bb:
85:f1:72:98:bc:ca:86:a3:7d:a0:93:23:ea:86:80:
e7:b0:d4:0f:a0:cb:f3:59:1a:c4:29:7e:f0:2d:35:
0d:4e:06:3e:65:ae:55:d8:a3:7c:8d:02:b0:ec:09:
21:a1:2c:de:07:28:05:95:a3:a4:71:cc:2b:fa:95:
c2:e6:9d:29:82:13:88:ee:11:50:d8:8d:85:55:5d:
80:81:01:90:a8:90:3b:0f:5b:6d:e8:ad:59:0a:c2:
e7:61:a9:39:c9:b6:39:f9:ca:b5:79:9b:4e:02:cf:
d6:25:9f:60:d5:82:57:2d:b0:46:d3:45:41:49:b0:
2e:2a:34:30:67:94:39:c4:26:f2:f1:c9:67:da:ab:
8e:a6:06:72:a7:57:e6:ab:33:71:38:90:a4:dc:3f:
3b:c2:8d:55:68:72:c0:fb:c1:86:4b:00:46:1a:ee:
47:7d:15:37:74:de:63:85:e3:d9:98:ab:3b:c1:d3:
16:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:4A:B6:C5:95:04:D7:76:79:2A:E1:42:66:1F:43:49:F0:28:3B:A2
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/DEq2xZUE13Z5KuFCZh9DSfAoO6I.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
ad:3b:10:a0:23:18:53:0e:a4:5c:0f:60:be:0e:9e:b4:55:00:
e8:89:6e:ed:8a:a9:67:46:7b:4b:e5:6b:66:9d:1e:d9:f8:c0:
4d:ef:dd:eb:60:e7:bf:74:3e:21:21:ab:ef:6a:16:8f:7b:e5:
5f:58:df:1f:95:11:0f:49:d7:cb:d7:d4:a0:de:49:fe:72:af:
87:52:ba:1d:82:14:a2:24:68:75:91:95:02:2b:81:79:bc:16:
c5:7c:fe:91:43:5d:2c:7b:1e:cc:a4:d5:5d:6f:ef:65:fe:2a:
10:41:4b:23:a6:b0:fd:30:09:02:42:e5:96:05:7d:13:c1:0c:
67:4a:bd:c9:5f:66:35:ed:18:8c:3d:2b:2b:db:76:02:3d:ad:
93:95:66:c4:f0:8f:d4:0a:15:a7:63:ae:14:6d:e9:2a:6b:24:
59:6d:ba:52:84:8e:47:f9:b8:7e:27:08:39:25:61:71:2e:52:
eb:23:2e:aa:67:aa:e4:31:5b:0d:21:f3:59:07:a3:31:99:86:
0f:91:a8:c6:b1:b0:e5:6a:da:b3:74:4e:25:99:76:2e:a4:dd:
ae:e0:19:3d:c8:ff:4a:d4:eb:da:93:6f:c5:37:1f:46:2f:9c:
37:f0:6f:1b:37:7f:97:32:1b:c9:7f:ea:e7:d6:32:4e:97:9a:
02:47:8f:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:51:22 2025 by rpki-client