Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/Ezr6EVlNoc67enO2_rKju9_BZMY.roa
File: Ezr6EVlNoc67enO2_rKju9_BZMY.roa (raw, json)
Hash identifier: iZnp8UcOVeVKvtB5tx16Of0ZPBvJgweAGCB2JG5Pquk=
Subject key identifier: 13:3A:FA:11:59:4D:A1:CE:BB:7A:73:B6:FE:B2:A3:BB:DF:C1:64:C6
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 7240
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/Ezr6EVlNoc67enO2_rKju9_BZMY.roa
Signing time: Tue 01 Jul 2025 23:44:49 +0000
ROA not before: Tue 01 Jul 2025 23:44:49 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29248 (0x7240)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jul 1 23:44:49 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=133AFA11594DA1CEBB7A73B6FEB2A3BBDFC164C6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:fd:f0:ba:4b:95:cf:04:57:11:d8:29:b0:b1:
16:90:3c:0d:a3:7e:52:86:15:73:7e:07:9d:f5:6d:
c5:d8:49:fe:56:e5:a7:97:14:1e:c1:6a:80:e4:5e:
5d:08:5e:cd:fd:c8:9b:30:40:fc:bb:54:1a:86:38:
2b:b3:11:76:58:dd:23:9c:e7:c8:ad:08:2b:78:c1:
3e:5e:fa:e4:94:24:26:a2:e8:4f:ce:99:eb:95:d6:
9f:d0:ad:b2:2e:02:d8:54:2a:e8:a3:5c:51:fe:8f:
04:5f:85:e3:6d:89:7f:06:f8:47:2e:b1:a6:d4:29:
c6:c0:fb:83:b4:b8:28:e4:30:a1:fb:2c:4e:74:80:
dc:f2:66:1e:04:38:dd:3f:f4:93:65:bf:9d:0e:c4:
1b:79:ba:73:34:b0:09:5d:0d:e2:92:9e:c7:dc:96:
7e:58:a1:4b:e6:57:1b:54:51:b4:62:22:d6:64:ad:
d8:d3:c7:a0:21:46:02:9f:6d:d6:3e:b8:58:fd:6d:
14:5e:79:61:f6:8d:8f:9f:ae:dd:fa:6e:a7:df:1d:
22:2c:9f:d9:18:ec:b8:ac:3c:4c:8a:e9:29:5e:e2:
44:c0:4a:1e:e2:af:89:8d:2f:57:ca:52:11:92:e5:
7a:bc:53:9b:1a:65:9c:be:eb:79:d1:bc:5f:9e:19:
38:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:3A:FA:11:59:4D:A1:CE:BB:7A:73:B6:FE:B2:A3:BB:DF:C1:64:C6
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/Ezr6EVlNoc67enO2_rKju9_BZMY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
20:e7:d0:26:e8:b9:21:5a:8a:71:fe:de:09:97:07:fe:70:ef:
e0:79:e9:52:cf:c6:cf:60:3d:48:1d:ec:22:38:97:c8:a8:3f:
23:d1:39:24:87:1b:4d:32:83:5c:57:67:fa:86:81:d4:74:75:
02:aa:3e:9b:d8:94:5e:fe:9e:c6:d6:2b:3e:b1:fd:12:50:16:
12:39:a7:47:c8:bf:2c:7c:c5:23:dc:9e:98:aa:de:35:7b:78:
93:2a:ae:58:81:50:24:f4:1a:a4:94:1f:c1:b2:07:cc:1e:f9:
73:02:f8:ce:13:e7:45:6d:49:67:fd:d2:b7:c6:a3:32:18:22:
6b:95:c6:53:fc:83:79:0d:e5:02:f9:78:19:cd:86:dd:08:f7:
5a:ed:b8:8e:b4:21:6c:ed:ae:b7:fb:65:16:eb:62:9d:7d:92:
ac:05:56:b8:61:43:a2:29:6e:db:6d:53:d0:05:a9:2f:bc:d7:
30:ef:4f:75:73:d0:18:49:00:6f:30:4d:6a:ac:2f:14:39:51:
f9:58:71:d1:94:21:31:c0:01:df:8e:d6:5f:40:15:b6:f7:51:
1a:64:41:eb:85:6b:54:ff:96:fc:55:bb:c3:85:ea:ee:51:f4:
5b:5f:54:45:66:23:6f:0d:7f:b6:0d:bb:05:3c:62:09:76:3b:
b7:c2:99:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:37:51 2025 by rpki-client