Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/IYjrIz0sFZw2kF--qP8_EP3gbmc.roa
File: IYjrIz0sFZw2kF--qP8_EP3gbmc.roa (raw, json)
Hash identifier: bDelxnoAIiyvQQJAQ6X2+ki8aWCHfYSHkF+BJdrFqVo=
Subject key identifier: 21:88:EB:23:3D:2C:15:9C:36:90:5F:BE:A8:FF:3F:10:FD:E0:6E:67
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 717C
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/IYjrIz0sFZw2kF--qP8_EP3gbmc.roa
Signing time: Sun 29 Jun 2025 22:44:40 +0000
ROA not before: Sun 29 Jun 2025 22:44:40 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29052 (0x717c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jun 29 22:44:40 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=2188EB233D2C159C36905FBEA8FF3F10FDE06E67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:bd:fa:cd:0b:bd:1f:06:fe:25:ad:7d:ac:a1:
f1:b6:d6:39:a3:a8:d6:a6:c5:bd:72:55:d1:2a:e9:
80:b1:5d:2a:2e:3a:17:bb:c0:ac:bf:9f:ca:d9:95:
78:7a:62:99:2c:8c:cf:71:05:17:e1:7d:08:7b:5c:
ad:4c:0a:39:80:43:70:08:b6:53:e6:35:7a:c5:7a:
e0:0a:72:64:d6:2e:a4:6b:30:8f:15:4e:92:e5:bb:
35:8f:b9:ec:53:63:17:78:7e:3a:d7:aa:f8:77:43:
fb:d9:7a:6b:bc:eb:f7:0d:eb:31:4e:ab:f3:af:05:
fb:4c:51:99:92:63:fb:2a:30:a3:f7:49:51:d5:95:
8d:26:aa:e6:21:2b:f5:d0:3d:f6:b4:b3:90:6c:fa:
54:e7:a9:7d:db:c3:b5:6c:7d:89:23:fc:eb:82:86:
c1:ed:44:dc:05:65:b9:0a:d2:12:dd:10:ad:04:00:
d1:11:72:6d:bd:5d:96:2d:33:b9:96:da:d7:c9:b7:
96:4e:cb:c4:b4:f7:49:ff:01:c4:b0:45:0f:b1:69:
8b:f6:b4:68:f6:d3:00:27:75:36:27:c9:ca:64:fd:
c2:97:0c:2d:8c:ce:bd:eb:74:e2:c0:51:c5:f0:c6:
cb:b4:dd:7b:75:50:6a:9c:d1:e9:09:55:2d:69:3b:
99:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:88:EB:23:3D:2C:15:9C:36:90:5F:BE:A8:FF:3F:10:FD:E0:6E:67
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/IYjrIz0sFZw2kF--qP8_EP3gbmc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
b3:71:3d:ff:55:ca:73:e4:b5:4c:37:4f:1b:24:40:c0:59:ec:
10:4a:76:aa:95:4a:f1:0b:8d:de:fa:93:3f:88:d3:51:c7:04:
c4:d4:cf:52:24:d5:43:1c:ee:77:be:58:a2:b7:13:95:d0:82:
8e:7c:c8:69:8f:2c:d1:81:b5:9c:26:f6:09:5f:f5:63:73:12:
63:44:ab:66:81:af:1b:ef:dc:23:fd:56:cb:e3:cb:28:bf:eb:
34:cb:3b:aa:e1:91:37:98:f8:be:7d:6a:0a:38:3e:85:e7:b6:
af:e6:04:17:b1:44:f8:b2:8b:b4:d2:af:b0:bb:f1:e2:be:fd:
86:df:1e:83:34:91:97:7b:ad:c9:7b:c2:8d:b0:ef:14:2d:07:
4d:3a:ad:f4:5c:61:91:5f:2e:fa:a3:9e:28:dd:eb:e1:36:08:
ac:f7:72:95:f3:94:65:24:db:b9:5f:9b:fe:f8:c2:7c:8b:23:
82:a8:12:45:75:ee:76:9d:e1:42:8f:69:40:e2:c1:b2:f7:56:
88:88:5a:02:ae:b3:95:06:39:c7:66:b1:49:98:b1:07:df:c5:
11:0c:13:2d:13:e3:ac:71:87:cb:96:85:91:96:a3:03:90:02:
9a:bb:ff:11:ac:3b:99:72:d1:68:a9:67:8b:4e:06:2c:9a:42:
c0:d5:dc:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 16:27:19 2025 by rpki-client