Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/F-8ktoLTeLVrczoBc7I2vU0uU-E.roa
File: F-8ktoLTeLVrczoBc7I2vU0uU-E.roa (raw, json)
Hash identifier: h82o8+fL8caeHMX3fZYikQ/jxKfjkaD5DjpJkGmkaIk=
Subject key identifier: 17:EF:24:B6:82:D3:78:B5:6B:73:3A:01:73:B2:36:BD:4D:2E:53:E1
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 77FE
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/F-8ktoLTeLVrczoBc7I2vU0uU-E.roa
Signing time: Thu 17 Jul 2025 07:42:01 +0000
ROA not before: Thu 17 Jul 2025 07:42:01 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30718 (0x77fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jul 17 07:42:01 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=17EF24B682D378B56B733A0173B236BD4D2E53E1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:27:f8:10:de:81:78:9c:f3:65:38:72:2e:50:
61:77:04:11:52:08:19:eb:2d:83:60:91:11:16:8f:
7a:34:7d:a6:af:4b:8f:5f:79:78:ac:9b:59:a3:41:
d2:44:98:44:04:11:b3:e2:b0:bc:63:b0:1b:bd:3d:
7a:64:8c:dc:a5:9c:fa:59:68:e4:01:7d:a1:75:6d:
50:2a:63:86:96:60:21:56:ae:68:d4:3a:84:24:c0:
b6:aa:e2:41:0a:c2:6c:51:59:50:a1:09:9e:cb:0e:
6a:a0:5d:5e:c2:c7:3b:08:6a:a3:55:06:81:9a:e2:
ef:33:e8:b5:a9:de:7d:4f:8e:34:33:79:a9:bb:79:
4e:d5:b1:03:8b:78:01:e1:ae:a9:14:1e:bd:c6:16:
e3:23:34:ea:65:6a:f2:31:b2:33:d2:34:aa:a6:66:
73:e3:44:7c:b4:cf:a0:50:81:38:42:16:cd:c9:eb:
11:6a:ee:6b:1a:0a:a1:9c:60:7c:4d:a0:8f:92:7d:
f4:25:c9:d4:af:27:32:98:54:06:b6:5c:be:c6:19:
78:eb:c1:41:9b:69:ea:b9:ae:cc:9a:c7:75:f2:1f:
e4:04:04:f8:b4:36:00:a7:eb:b6:d6:bb:d9:29:0b:
ce:c6:55:a0:c6:9b:d5:0e:90:f4:1d:26:33:4b:d5:
d7:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:EF:24:B6:82:D3:78:B5:6B:73:3A:01:73:B2:36:BD:4D:2E:53:E1
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/F-8ktoLTeLVrczoBc7I2vU0uU-E.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
71:f5:06:da:ba:a4:57:73:b7:8e:95:bb:a8:16:a5:09:fe:ac:
7d:bf:ff:fc:81:ae:22:39:24:7a:42:5d:25:d3:67:1b:fc:eb:
73:d8:78:36:18:50:d6:06:e2:d8:56:60:e9:d8:21:3d:21:43:
28:00:df:a8:d7:81:c6:1e:16:37:a1:37:9c:e4:8c:c3:c8:41:
f2:63:b6:61:03:ae:e1:ba:a0:40:c5:40:ce:82:29:8e:da:5d:
80:57:ff:84:b5:40:ef:16:70:89:06:64:e0:dd:ef:38:f5:e1:
3a:ba:47:da:4b:9b:69:51:d6:ab:68:5e:45:e5:8d:7c:fb:48:
50:9d:26:32:b0:16:6f:32:0e:7e:9b:0f:8c:a3:ad:41:b4:ac:
eb:6d:37:c0:33:c1:62:3b:78:4d:73:ee:9e:14:03:46:af:0e:
76:86:6f:28:64:0c:c1:b1:27:90:56:1c:97:cb:61:20:b1:5e:
86:88:42:79:02:ea:67:a4:9f:91:af:de:ea:29:c5:f8:38:25:
07:b4:70:96:cc:b6:02:19:87:e5:5c:ae:82:8a:7a:18:fd:30:
c3:9b:37:3b:d7:d4:b7:54:f4:06:90:04:08:2b:80:7b:06:1e:
3c:fc:a0:f5:2e:c1:22:2f:55:81:ee:6b:51:6e:8a:f1:67:06:
37:2d:43:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:45:49 2025 by rpki-client