Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/DPh_WWiVvla5vS4g9rHLMpvzrwo.roa
File: DPh_WWiVvla5vS4g9rHLMpvzrwo.roa (raw, json)
Hash identifier: 6/g0nlVJi7ArSk4ShUdsJuPFJXM3uC254Ln6Ry59gX8=
Subject key identifier: 0C:F8:7F:59:68:95:BE:56:B9:BD:2E:20:F6:B1:CB:32:9B:F3:AF:0A
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 6F5E
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/DPh_WWiVvla5vS4g9rHLMpvzrwo.roa
Signing time: Tue 24 Jun 2025 13:14:37 +0000
ROA not before: Tue 24 Jun 2025 13:14:37 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28510 (0x6f5e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jun 24 13:14:37 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=0CF87F596895BE56B9BD2E20F6B1CB329BF3AF0A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:5e:01:62:63:41:1a:0a:d3:4c:30:f8:20:62:
3e:5f:f4:24:63:2d:ab:5e:bb:21:4e:e0:52:b0:7c:
d2:32:85:2a:b5:2a:2a:d5:f7:bd:04:4a:26:a6:a8:
9a:ae:88:87:86:bd:ea:b9:d6:a2:d1:5c:3c:07:4b:
53:50:be:7f:3e:ee:99:87:c9:9a:01:03:cd:e6:bb:
69:3d:a2:52:3e:1d:11:de:d4:f6:17:60:ba:5e:b5:
35:ac:79:30:44:8b:76:f3:38:7e:a0:17:77:57:18:
93:20:b0:6b:ff:10:1d:09:1c:93:89:dc:1f:eb:23:
a5:33:b5:70:ee:b8:4d:50:4c:1e:91:a9:01:f5:a8:
88:6f:17:df:dc:4e:e0:72:aa:ae:a4:91:12:b7:64:
16:45:a0:b4:af:58:e4:f6:57:c5:e0:b5:07:44:c4:
1f:6a:d1:d4:6c:ae:a3:3e:0e:d5:5c:42:d2:c2:42:
dc:a0:9b:90:2f:3e:cb:b0:27:dd:8d:bb:e5:3a:60:
10:73:6f:aa:33:cd:4d:1e:47:ff:c0:ec:23:92:8d:
56:47:5b:8c:da:e7:d6:dd:da:c7:76:0c:b5:48:3e:
10:f1:72:a9:e8:62:52:f0:15:00:2b:59:c1:18:48:
fc:7e:22:15:02:e6:cd:ef:3e:43:18:5d:b7:87:34:
d7:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:F8:7F:59:68:95:BE:56:B9:BD:2E:20:F6:B1:CB:32:9B:F3:AF:0A
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/DPh_WWiVvla5vS4g9rHLMpvzrwo.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
64:bf:b5:09:1f:ad:c8:52:dd:37:6c:5c:2a:78:c7:aa:0a:61:
fd:27:c4:c0:6b:20:9b:2d:fb:ac:4f:c8:d8:93:56:dc:a2:cf:
8e:36:ca:91:01:62:60:fd:22:30:26:a9:55:0e:80:d8:0a:7a:
c7:52:d9:ef:cc:de:84:52:9b:91:0c:a7:6c:ba:f1:91:74:8d:
3a:00:a8:45:c2:a5:94:d1:15:73:b2:de:7e:56:13:4e:c1:cb:
8f:f9:fa:9f:ec:70:c8:4e:ef:38:de:1e:cd:21:49:64:98:b4:
63:01:8d:ba:a1:24:99:44:0c:ec:e3:61:df:5e:ff:9b:99:51:
4d:dc:92:20:1f:6b:04:e2:00:70:a1:4e:08:ae:d1:82:14:8c:
97:3f:00:cd:c7:29:cf:1d:d9:51:d5:57:51:99:f6:82:cc:a8:
46:a2:d0:40:ec:10:56:ea:1c:bb:be:a7:c4:5e:08:39:52:23:
95:c8:52:05:5a:9a:82:f1:65:2e:2f:e3:19:f7:52:bb:44:9f:
7d:c1:06:66:13:17:be:20:79:71:fe:8b:2b:f8:d6:d1:3d:65:
bb:48:a9:ab:16:4c:f9:d9:a6:71:88:fe:89:3f:bf:27:08:e2:
6e:6f:37:5d:49:78:71:34:b1:63:6c:fb:94:1f:dc:d1:fc:5d:
d0:81:4a:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:54:37 2025 by rpki-client