Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/Dm-tAooHRDCsQ6VF1CnFkiOhvVE.roa
File: Dm-tAooHRDCsQ6VF1CnFkiOhvVE.roa (raw, json)
Hash identifier: lNqUkiruq1v+uFVfHy2N0IlaJz02qfnP22G3wIjQvK4=
Subject key identifier: 0E:6F:AD:02:8A:07:44:30:AC:43:A5:45:D4:29:C5:92:23:A1:BD:51
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 6BA8
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/Dm-tAooHRDCsQ6VF1CnFkiOhvVE.roa
Signing time: Sat 14 Jun 2025 04:12:19 +0000
ROA not before: Sat 14 Jun 2025 04:12:19 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27560 (0x6ba8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jun 14 04:12:19 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=0E6FAD028A074430AC43A545D429C59223A1BD51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:66:7b:f4:8d:4c:45:cb:cf:2d:17:e9:57:bb:
8e:b1:c0:d2:53:12:c5:55:cc:e6:93:04:24:c9:51:
e3:d5:24:a3:95:8e:91:87:59:7d:06:13:92:3a:d5:
61:de:17:29:2f:24:13:ce:69:c2:ec:5b:08:67:89:
78:6e:8a:c0:ba:0a:b7:73:bc:0c:78:ca:86:65:8c:
d4:05:97:69:0a:24:06:6b:66:03:9f:d1:da:ef:d2:
e8:b3:1f:b2:91:cd:2f:36:e3:fa:fa:98:ac:ba:10:
62:97:17:1c:e6:55:d0:c5:df:4c:04:dd:94:9c:38:
78:37:89:eb:0a:f1:70:98:73:fb:0e:45:54:c8:0f:
ee:9f:33:19:ef:15:b9:26:50:fe:be:de:89:1c:3e:
1f:39:de:6a:4c:8b:8f:32:9e:06:3b:1e:7a:cf:b9:
a9:7e:2b:2b:3c:06:68:d5:ef:a9:fb:c4:e9:f3:69:
00:a3:4c:6e:2f:ee:e0:d0:ba:11:91:69:13:fe:ac:
d4:29:86:22:9d:3c:32:b2:7c:7f:8a:23:cd:d0:a1:
ee:41:50:ac:24:e9:7d:12:16:13:19:06:18:a5:3b:
13:64:9a:81:1b:a8:f6:38:12:75:bf:36:5f:bf:65:
05:3a:d6:1a:40:ef:6e:6d:6c:79:e8:4a:a5:4a:e5:
6e:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:6F:AD:02:8A:07:44:30:AC:43:A5:45:D4:29:C5:92:23:A1:BD:51
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/Dm-tAooHRDCsQ6VF1CnFkiOhvVE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
67:36:c6:82:c2:e0:4a:86:82:d9:51:24:c3:fc:4c:b4:ee:77:
4a:0a:7e:5d:c6:19:4b:fc:69:a5:c4:7f:fc:a8:e1:73:f4:3d:
24:52:9a:c8:b9:0d:e1:b8:a3:a6:6c:9f:78:1d:2e:5a:0f:b8:
59:4a:86:5f:93:26:aa:a3:17:1c:61:57:e2:a1:c8:1d:d5:5f:
9a:78:8e:9d:22:d3:35:f1:d9:1f:f4:5b:ee:76:86:b3:36:a8:
fa:30:4d:11:cc:09:37:c6:db:69:d3:e0:47:d4:e9:c5:9b:9c:
b0:20:04:0a:ec:43:4a:b7:4d:b6:5a:a0:b0:84:3e:13:b8:40:
12:56:87:48:9c:78:be:63:e6:ac:e9:d8:a4:a4:d5:56:c1:a6:
ef:2a:ed:39:8e:f4:71:1f:68:8b:33:5b:10:4d:56:3a:52:28:
87:10:28:49:4c:46:10:3d:4c:9e:fe:ca:67:57:a9:41:d4:f1:
3d:a9:81:fd:e4:ad:4b:bb:1e:38:4e:90:55:e5:72:6c:2f:82:
0d:38:33:a8:16:94:19:69:ec:ae:73:7f:9b:39:06:2a:d1:52:
7a:36:b0:23:ca:71:05:af:cd:1c:96:5a:32:f3:7e:8e:2f:f2:
7e:82:4b:a4:e8:c3:d7:7d:d4:25:c1:d7:e8:13:2b:08:27:ae:
6d:dd:c7:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:50:40 2025 by rpki-client