Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/IE7ZGPhcho9FRObGx3PKVSbK8EA.roa
File: IE7ZGPhcho9FRObGx3PKVSbK8EA.roa (raw, json)
Hash identifier: nHZ+U6+u4lbROj6OOE1D2/ByUKKxHE++U9ftJuVVMJ8=
Subject key identifier: 20:4E:D9:18:F8:5C:86:8F:45:44:E6:C6:C7:73:CA:55:26:CA:F0:40
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 67B6
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/IE7ZGPhcho9FRObGx3PKVSbK8EA.roa
Signing time: Tue 03 Jun 2025 15:41:41 +0000
ROA not before: Tue 03 Jun 2025 15:41:41 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26550 (0x67b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jun 3 15:41:41 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=204ED918F85C868F4544E6C6C773CA5526CAF040
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:2c:72:0e:a1:c9:06:e8:79:84:df:67:e1:20:
ac:e6:dc:32:6e:51:4d:c1:43:8e:30:7e:c3:3c:b0:
74:99:07:b2:21:57:81:95:42:6c:54:95:8b:9e:66:
a6:23:37:3c:cb:9d:eb:4a:5c:19:42:88:46:c5:7a:
ed:63:89:40:2b:18:38:b0:6d:64:6a:b8:2c:70:f4:
57:6a:a9:eb:b5:0c:8c:60:1b:c8:0a:54:ff:1e:3e:
a0:ad:5b:82:a1:c5:66:75:e1:62:e9:fc:66:7d:16:
f5:ea:cc:36:e1:04:2e:56:db:f7:fb:02:05:5e:57:
ff:8c:ac:08:08:6e:76:93:f4:73:b2:48:62:d3:21:
04:2f:00:ea:da:83:e5:ae:64:b9:b6:6e:45:3f:10:
2a:32:c8:76:b8:39:52:1e:cb:08:8a:fb:e0:00:63:
e2:31:98:05:a2:5e:06:92:f5:d1:7d:dc:aa:b3:50:
79:10:13:0e:95:70:3f:fd:e3:d2:fb:8a:6a:fa:b9:
57:82:f4:7c:63:eb:ad:bf:32:f2:8f:9b:4d:8d:c4:
ee:b1:7b:f9:62:5c:e6:9d:11:fe:ac:fb:4d:16:bc:
8a:6f:dd:7c:38:a7:6f:21:2c:64:29:0a:53:11:97:
82:58:27:a9:5f:55:5d:15:66:d1:7e:53:55:65:32:
0b:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:4E:D9:18:F8:5C:86:8F:45:44:E6:C6:C7:73:CA:55:26:CA:F0:40
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/IE7ZGPhcho9FRObGx3PKVSbK8EA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
a5:2a:6f:14:a2:5e:81:b9:49:48:46:5a:0c:d1:e1:e9:b1:e8:
d4:4a:3e:e9:54:5d:fa:68:52:cc:37:28:1f:d7:0e:cc:dd:80:
fc:8e:66:ba:11:ff:2a:c5:15:b8:28:2b:87:7f:5d:ca:38:bf:
98:8d:cf:50:5a:0d:71:1a:15:a3:90:d7:17:02:88:51:fa:d8:
bf:3c:d9:ee:11:dd:a8:53:53:56:19:b8:21:b6:35:b9:d1:af:
68:05:f0:26:84:38:97:1c:b4:7b:8e:d9:d6:ff:ae:9e:1f:56:
df:07:71:cb:90:c9:7e:e4:96:26:8c:fd:47:ae:d2:05:19:76:
28:32:44:e4:95:46:8e:aa:b8:7f:db:c3:48:45:0b:f8:bc:31:
74:b5:f6:a2:1b:9c:9d:7a:fa:08:ab:ad:cc:0c:db:d0:14:9d:
04:4a:ff:e1:a2:d3:ff:40:f5:ca:3c:84:a8:88:7e:2a:4d:04:
38:5b:cb:0a:d2:97:d6:5c:70:68:48:df:b4:5f:cf:70:cc:45:
65:eb:ea:78:61:2b:2e:2a:e2:01:81:59:96:ad:9d:15:b8:c4:
ec:e6:7c:54:af:e7:c1:15:a6:1b:8e:84:26:5f:41:69:6b:64:
ec:41:12:0a:fe:3f:c3:34:02:b5:d0:e9:fe:05:4d:8d:d0:99:
ce:57:70:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:45:31 2025 by rpki-client