Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/GK9SfyXIYSwlWU2NFR0QMfXFZIY.roa
File: GK9SfyXIYSwlWU2NFR0QMfXFZIY.roa (raw, json)
Hash identifier: 59mTr9/nhbyixh0irF/HLlNBp5WSTUJp0HARqF7OvlA=
Subject key identifier: 18:AF:52:7F:25:C8:61:2C:25:59:4D:8D:15:1D:10:31:F5:C5:64:86
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 7670
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/GK9SfyXIYSwlWU2NFR0QMfXFZIY.roa
Signing time: Sun 13 Jul 2025 04:14:56 +0000
ROA not before: Sun 13 Jul 2025 04:14:56 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30320 (0x7670)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jul 13 04:14:56 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=18AF527F25C8612C25594D8D151D1031F5C56486
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:1a:af:99:20:d8:ad:e7:94:bf:70:5a:34:80:
2b:86:42:6c:61:0d:1c:79:2f:9d:42:ee:66:5a:93:
82:1f:22:b3:86:34:df:bf:99:05:79:cb:7b:5c:ad:
3e:c8:95:8d:92:f4:1b:53:5a:a0:12:00:77:7c:68:
4d:a4:a7:0c:24:41:75:f4:7a:77:24:1f:3d:9f:97:
4d:b9:55:04:b9:97:d0:e7:88:e8:e0:82:11:66:83:
b1:07:8b:d3:0b:46:c8:47:86:00:fd:87:72:0d:d3:
a7:30:40:7e:47:7f:42:7e:ef:cf:e9:11:bc:ea:83:
95:fe:d7:fa:43:a5:e0:33:74:4f:e8:36:60:af:08:
b9:b1:6e:99:aa:da:c5:5e:7c:fc:76:d6:f6:d1:b1:
d6:8a:c1:26:0c:e6:f4:2e:74:f6:9e:22:97:46:15:
58:e2:18:30:dd:ab:b9:66:21:da:cd:5f:c3:70:ea:
16:2d:3e:11:c4:02:21:26:ff:57:ed:67:71:ea:63:
f5:af:bf:b8:0b:e5:49:ff:b2:b3:cb:9b:0e:fc:8b:
23:db:83:ed:67:38:c5:75:5c:5f:96:d9:b4:31:44:
bf:fd:ff:cb:9f:e7:64:a4:c1:44:6b:b7:97:25:b7:
2b:6a:31:28:e7:d3:75:6e:f4:c2:68:41:83:ba:d5:
d6:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:AF:52:7F:25:C8:61:2C:25:59:4D:8D:15:1D:10:31:F5:C5:64:86
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/GK9SfyXIYSwlWU2NFR0QMfXFZIY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
b4:8c:ee:d9:8d:e9:9f:dc:88:7e:9d:a6:a4:be:6a:83:fe:70:
d1:02:0c:68:e4:72:4d:42:a5:37:64:50:3d:33:82:cd:cf:b8:
da:84:73:28:1a:73:13:55:06:19:8d:a3:92:8c:4d:a7:68:70:
ae:45:f9:44:11:e7:06:a6:c3:02:7c:45:5e:a5:d0:f1:ab:d9:
6d:89:e7:e6:ac:9f:ab:64:04:6d:d0:16:d6:00:bc:ae:57:24:
74:88:d2:67:b2:b3:9d:0f:20:3b:bb:7c:ec:0f:42:3a:59:ab:
d0:b6:a1:41:3b:28:96:4e:f4:89:e0:4e:ea:31:31:6b:17:86:
de:37:fa:0d:7e:59:04:b4:9a:9b:74:57:8a:16:d6:d4:91:96:
52:ba:53:a2:f7:df:97:8d:38:8e:35:89:f5:5d:ae:b3:f1:46:
37:25:83:50:12:85:22:10:ad:f3:53:41:d7:95:22:a0:35:6b:
7c:a0:39:53:f1:80:44:67:3a:84:42:17:a2:98:3b:38:da:74:
df:c7:fd:ae:b5:8f:a4:6d:87:61:5c:cf:6d:72:18:17:b1:62:
6b:92:c2:7e:40:a4:f4:d3:09:22:f4:2f:6e:67:90:65:55:f8:
94:08:44:6f:1e:72:a3:7b:48:6c:63:69:b2:e3:67:d0:1f:78:
36:e6:fc:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:47:35 2025 by rpki-client