Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/I_eKE_M8cpCpeYEsU0a7nTalnD8.roa
File: I_eKE_M8cpCpeYEsU0a7nTalnD8.roa (raw, json)
Hash identifier: 49TsjK5g6LK8G6r5tZA5TAGifmQknh1WgXEpo24pSKY=
Subject key identifier: 23:F7:8A:13:F3:3C:72:90:A9:79:81:2C:53:46:BB:9D:36:A5:9C:3F
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 7520
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/I_eKE_M8cpCpeYEsU0a7nTalnD8.roa
Signing time: Wed 09 Jul 2025 15:45:08 +0000
ROA not before: Wed 09 Jul 2025 15:45:08 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29984 (0x7520)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jul 9 15:45:08 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=23F78A13F33C7290A979812C5346BB9D36A59C3F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f7:c3:06:c8:06:55:dc:c5:43:57:a9:b5:c0:
5b:05:cf:f9:d4:8b:1c:c6:ad:1f:92:f7:49:20:b1:
f7:c8:4b:85:80:1a:51:3e:8a:d6:bc:0e:6d:92:8a:
ce:1f:6e:7c:ab:42:c8:aa:36:49:7b:88:8e:35:2b:
85:54:49:fa:12:c1:5b:c2:28:e5:9e:aa:25:5f:9b:
98:5e:bd:23:16:23:68:a2:dd:34:b0:6e:b7:26:fd:
cf:c7:31:72:fb:8c:97:45:f6:ce:41:47:ba:fd:12:
d4:13:e4:e4:ad:4f:3e:a3:e2:d2:03:cd:63:19:22:
f2:1f:9a:9c:af:07:6d:6d:f5:89:ef:13:1c:41:52:
98:1c:58:7f:b5:d3:ad:05:76:5f:ab:ed:c8:09:6b:
6a:75:da:b6:7d:19:8c:96:c8:41:ce:9e:27:da:37:
d4:6e:fd:59:a4:e8:6f:b3:4e:f0:f7:5e:c7:2d:dc:
20:0a:09:74:00:00:b8:97:ca:c8:a0:56:65:40:05:
22:9d:2e:3e:bd:ee:34:22:25:bb:6b:64:82:b5:74:
fd:30:bb:e3:d5:fc:eb:85:12:2f:c3:79:ca:ba:ba:
e7:79:11:7b:fc:88:2b:ad:d8:f5:17:eb:df:c4:96:
ee:1a:60:90:a1:23:c2:e1:21:f7:8c:07:74:61:73:
99:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:F7:8A:13:F3:3C:72:90:A9:79:81:2C:53:46:BB:9D:36:A5:9C:3F
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/I_eKE_M8cpCpeYEsU0a7nTalnD8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
77:62:e9:a8:54:1d:90:4d:8f:7d:96:1f:bf:da:ab:45:82:2a:
50:3e:e2:30:bc:83:db:1a:7d:d7:85:64:77:40:aa:9e:49:a1:
64:ed:da:42:89:37:8d:b7:ef:83:6f:9e:46:3b:f1:0c:d9:8b:
09:d4:2f:98:37:3c:54:00:78:fc:26:b5:39:e4:fc:6a:53:a7:
ec:09:eb:01:d7:63:61:85:02:be:fc:32:b1:2b:8d:2c:b4:6e:
a9:05:7a:05:28:96:6b:2c:2d:46:39:d7:e0:8a:38:34:0d:1f:
78:91:5c:f3:38:4e:ef:e5:c9:9c:dc:10:f4:8e:db:ce:79:5a:
d4:4d:3d:ac:19:db:56:6d:47:95:56:30:13:6a:3e:54:e1:32:
bd:6c:c9:86:5a:a6:51:50:b0:e0:f5:ae:ed:a7:ee:88:4e:b5:
b7:4a:c3:b0:2e:b3:04:64:5b:6e:8f:b8:ac:ac:66:85:72:ce:
97:84:6b:61:6b:7a:27:e9:b6:6c:10:3f:98:69:04:61:2f:38:
cd:f1:16:11:c8:24:3d:18:02:18:43:ed:83:0e:b1:74:7f:1e:
2d:86:42:b5:89:dd:22:24:a1:94:0b:87:8b:e5:12:76:37:41:
d6:bf:74:8d:ec:6b:c8:07:ed:7a:c9:fc:e8:5e:13:87:2d:d6:
96:be:57:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:51:41 2025 by rpki-client