Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/I899Z7SzPyevFt8pv-JL2HBN_sI.roa
File: I899Z7SzPyevFt8pv-JL2HBN_sI.roa (raw, json)
Hash identifier: JsjsyrB4UqrOZeTBeKTgQnXI3lQWesygleFob7H1BOo=
Subject key identifier: 23:CF:7D:67:B4:B3:3F:27:AF:16:DF:29:BF:E2:4B:D8:70:4D:FE:C2
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 6C60
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/I899Z7SzPyevFt8pv-JL2HBN_sI.roa
Signing time: Mon 16 Jun 2025 02:27:59 +0000
ROA not before: Mon 16 Jun 2025 02:27:59 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27744 (0x6c60)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jun 16 02:27:59 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=23CF7D67B4B33F27AF16DF29BFE24BD8704DFEC2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:33:7a:05:29:45:e8:73:90:47:06:02:a6:f3:
93:8e:38:3f:52:5a:29:75:00:d5:8c:91:f0:c4:a2:
86:41:f9:ae:19:4f:e4:20:58:76:60:4f:5b:5b:e0:
c2:45:17:15:e5:95:e4:65:d3:3d:bb:85:9e:16:0d:
e9:54:d6:8a:75:fe:79:0d:e1:37:d5:d3:cc:fa:19:
50:ba:5e:9e:b6:fc:63:74:e3:8c:b8:ca:c5:f3:bc:
be:94:88:8f:ce:60:74:1a:d2:7e:1f:58:52:75:88:
57:92:68:89:06:44:6d:a9:35:23:97:8f:59:1c:6c:
18:d0:76:17:5b:14:fb:35:08:d0:86:a8:df:4f:5f:
09:eb:d0:54:88:20:47:10:e6:e8:11:14:89:54:95:
7a:df:3e:62:16:1a:e7:86:aa:bf:36:12:30:78:e2:
30:0a:39:e4:68:42:7c:82:01:a9:1c:a8:af:2a:5e:
51:87:11:94:8d:e6:50:51:63:ad:06:17:70:84:35:
13:39:1b:2c:8d:6d:20:b7:49:c2:f1:73:06:43:27:
0b:58:f3:1f:ff:f8:7d:0e:c3:08:a9:06:18:a8:02:
a6:03:03:cb:de:b7:0a:fc:b1:6e:e3:20:e9:06:0e:
5e:17:dc:7b:ba:b9:ec:e3:d8:da:3d:e1:9c:b0:db:
6f:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:CF:7D:67:B4:B3:3F:27:AF:16:DF:29:BF:E2:4B:D8:70:4D:FE:C2
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/I899Z7SzPyevFt8pv-JL2HBN_sI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
13:3b:ec:64:11:3c:04:62:fd:0f:3c:2a:3b:a4:f0:db:0b:e8:
1e:4e:70:41:e8:62:45:a3:27:dd:41:38:38:cb:65:43:5d:67:
f4:8a:98:cf:22:38:a4:13:08:50:d5:f7:3a:9e:2e:50:1d:49:
21:67:8f:9d:a3:7d:9e:82:ff:c2:c2:22:88:76:5d:e5:bc:71:
61:49:7b:d6:78:27:c7:f4:17:1e:29:bb:b5:04:69:e2:13:32:
03:e9:d3:71:72:67:ab:95:2b:e9:25:2e:ef:ff:dd:0a:a8:ce:
5b:f6:f5:f0:2e:60:40:be:99:0c:94:2a:fe:e1:2c:12:02:d6:
8f:73:8c:62:6f:40:72:ea:70:5f:72:e0:13:9d:2c:8c:45:03:
56:8f:22:3d:26:87:ab:6e:50:fe:d4:b0:60:59:01:f4:03:1b:
a1:61:0d:bd:8e:15:02:21:75:a9:a3:e4:1a:a0:e5:4a:9a:e4:
a2:4d:a3:78:7c:cf:a9:a6:c6:5f:aa:ee:17:14:eb:08:02:6f:
49:6e:df:4a:33:91:39:3c:75:a2:cd:87:ed:aa:19:fc:1f:e4:
12:f9:d0:c0:41:3a:7c:72:f9:de:07:6a:e2:94:9d:42:f3:a7:
a2:09:ab:45:61:1a:65:2d:66:7b:3f:a2:08:6a:4e:86:dd:a8:
40:ef:a2:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:32:04 2025 by rpki-client