Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/Gds199k9-VZlK8RtHJm56tgXiso.roa
File: Gds199k9-VZlK8RtHJm56tgXiso.roa (raw, json)
Hash identifier: CiT7XeH+djCuSrf+ebVDDOPy83rPfpHoX96mfG/CGDk=
Subject key identifier: 19:DB:35:F7:D9:3D:F9:56:65:2B:C4:6D:1C:99:B9:EA:D8:17:8A:CA
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 7586
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/Gds199k9-VZlK8RtHJm56tgXiso.roa
Signing time: Thu 10 Jul 2025 17:15:33 +0000
ROA not before: Thu 10 Jul 2025 17:15:33 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30086 (0x7586)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jul 10 17:15:33 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=19DB35F7D93DF956652BC46D1C99B9EAD8178ACA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:93:61:f4:73:a4:5a:c7:23:34:84:ad:34:d1:
de:64:7b:7b:49:cb:d9:1d:87:83:5a:4a:cf:be:f7:
30:76:89:30:a1:ce:c4:a1:b2:b1:3d:27:f1:76:d0:
d3:67:70:30:6d:76:23:59:f0:e6:ca:c6:d2:36:b1:
74:ed:0c:fa:a3:c0:2e:1c:62:7d:9d:f4:f2:42:f0:
2c:84:6b:c2:95:f8:b7:50:de:bc:b9:d6:38:f5:76:
5e:e0:58:65:60:59:1c:d3:73:f5:1b:01:87:c1:88:
f8:09:c5:66:1f:c2:19:ca:1a:ef:81:23:6e:83:04:
35:ac:47:77:01:6a:4a:40:1c:4e:77:8e:90:af:37:
20:30:f3:cc:fc:40:ea:fd:d8:6a:fb:7c:0d:8f:0a:
88:25:c6:46:80:5b:01:29:c6:4d:bf:41:66:60:eb:
2d:ad:c2:57:e9:41:7c:f2:5f:e7:a2:0b:c3:b2:50:
8c:4a:92:78:a6:59:b2:dc:c1:58:e8:6c:86:a1:5c:
ff:5f:9b:36:05:04:a4:a1:89:6b:bf:7a:17:60:3d:
0e:4e:27:78:0a:fb:91:ba:f3:dc:c8:95:8d:17:ef:
ae:af:da:41:8d:d4:d1:cc:09:e8:1f:14:ce:33:01:
e6:b6:83:2f:2b:11:db:3e:ce:e1:0d:84:d9:98:ce:
05:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:DB:35:F7:D9:3D:F9:56:65:2B:C4:6D:1C:99:B9:EA:D8:17:8A:CA
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/Gds199k9-VZlK8RtHJm56tgXiso.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
08:66:fe:04:02:a7:7b:17:ef:c8:16:db:f6:c0:a4:df:a4:2a:
c8:ca:dc:4d:55:ae:43:71:ec:6c:7d:be:10:30:13:51:4b:b9:
37:04:b3:52:5f:07:a8:ca:f9:6c:17:d6:ed:3c:af:1d:5c:f1:
87:a3:aa:e8:52:58:7b:84:d8:0a:e6:20:86:47:c1:50:09:0d:
f5:8f:8c:3e:ae:b2:c5:ec:49:3f:9d:54:a7:c8:55:d5:f1:f6:
66:b6:87:1e:80:3e:7d:0d:21:50:c7:67:cf:de:9b:2f:4b:f2:
15:21:68:d7:56:76:fe:ec:e5:a5:4e:b3:1d:4b:91:c3:7f:e7:
eb:90:7b:96:a2:09:40:97:c8:2b:41:0d:18:40:0c:1c:9d:41:
d3:65:df:a6:04:eb:80:a0:41:0e:81:68:64:4f:31:82:1c:15:
f9:55:7b:a6:30:a0:d4:47:39:78:21:22:b8:f9:0a:45:fa:ea:
62:8f:46:4c:e6:ac:7a:5f:56:f8:48:b8:64:16:41:8d:eb:11:
11:a2:c8:3f:08:24:0d:ce:4b:f8:a9:89:4d:88:0b:26:25:8f:
bb:c2:93:3f:e5:7a:0f:11:7b:78:41:7f:94:5e:ee:6b:be:6e:
e7:3e:38:60:bf:3e:b8:1d:0f:e0:d0:b5:a9:d5:dc:ff:fb:57:
65:11:8a:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:53:16 2025 by rpki-client