Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/E-dxLmwoRa4kSQki99FALjNXLrI.roa
File: E-dxLmwoRa4kSQki99FALjNXLrI.roa (raw, json)
Hash identifier: mUIK6FJOc2rBJCLFCrr2m542P9vToHabEcBI8JDAuu0=
Subject key identifier: 13:E7:71:2E:6C:28:45:AE:24:49:09:22:F7:D1:40:2E:33:57:2E:B2
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 794C
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/E-dxLmwoRa4kSQki99FALjNXLrI.roa
Signing time: Sun 20 Jul 2025 19:12:13 +0000
ROA not before: Sun 20 Jul 2025 19:12:13 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 31052 (0x794c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jul 20 19:12:13 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=13E7712E6C2845AE24490922F7D1402E33572EB2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f9:df:f4:9f:15:45:2a:04:8a:5e:fe:c6:5c:
cd:b0:f4:dd:85:ea:42:8c:34:01:d1:1a:d4:b3:91:
79:73:49:56:7a:d4:24:21:19:d7:cb:e9:61:0f:f3:
58:dd:5a:fc:1a:02:c9:38:c5:48:d0:f9:fc:db:86:
00:ab:a9:02:04:11:08:9d:e3:4d:6a:13:a5:71:56:
4b:2f:85:9d:c3:e9:c4:37:89:e3:41:20:72:59:d9:
ba:64:53:78:b3:6a:26:b7:1c:eb:d6:6a:c9:36:0b:
a0:4a:56:8b:96:b4:ae:58:ee:20:28:48:80:23:a2:
f9:06:85:44:a1:84:d4:4d:88:c6:15:0f:b6:34:db:
2a:22:f7:2c:1c:db:e3:0b:55:84:18:8a:50:f1:14:
6d:ac:05:af:7a:3e:38:d0:df:26:36:b0:ed:fa:6d:
09:e4:58:bf:66:7c:fa:ab:59:58:cb:83:9d:be:da:
e3:05:9c:59:48:ad:fa:be:12:33:09:15:95:a7:a8:
e1:a6:91:c8:04:f7:92:99:b6:29:ab:90:89:8b:a1:
2f:23:e8:de:17:46:e6:1b:b2:6f:b6:e2:03:4e:8f:
ec:9a:78:44:4a:40:82:28:9c:58:0a:82:85:87:6f:
88:51:e1:cc:64:de:a6:f7:8a:c8:ff:92:1a:41:11:
2a:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:E7:71:2E:6C:28:45:AE:24:49:09:22:F7:D1:40:2E:33:57:2E:B2
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/E-dxLmwoRa4kSQki99FALjNXLrI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
5c:99:c0:37:35:1f:5c:a3:1c:05:c8:a6:c3:09:e9:db:da:f2:
5a:f0:cf:f6:1e:a9:da:2b:b1:4e:5e:5a:c4:69:83:2a:f2:90:
89:db:80:62:b3:61:7f:1a:ca:32:e3:59:ad:46:34:08:0f:f5:
43:93:cf:63:cf:d9:83:23:69:ad:03:26:69:40:c2:e0:b4:1c:
7e:8f:8e:1d:54:3c:a6:61:44:62:e1:b4:e3:bd:c7:f6:7b:2e:
aa:cd:81:8a:14:2e:5f:6b:93:94:5b:1a:8d:b6:c7:f0:51:bf:
d5:cb:c4:a9:66:f4:64:5f:36:26:b6:60:ca:f8:85:12:b2:16:
47:27:48:a5:55:95:19:eb:b8:69:4d:2d:92:c7:07:97:bb:a0:
a0:49:9c:b5:c0:35:8d:c7:ba:7d:05:e9:a3:6e:b7:7d:6b:3c:
62:df:f1:f8:7e:b1:0a:45:a3:b3:40:e8:5b:7b:e5:4b:8a:9d:
7b:62:93:a3:68:94:f1:f6:c0:55:02:7a:62:f6:16:15:e2:74:
bd:ae:2e:78:78:e8:fa:9a:49:69:34:64:75:60:3d:f1:5d:56:
fc:a4:4f:60:cb:39:f5:25:b8:86:7d:a3:be:da:e0:ca:15:b6:
75:28:af:5f:3c:38:34:13:a0:02:7e:bf:8e:59:07:bf:cb:fd:
e9:cb:88:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 02:03:50 2025 by rpki-client