Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/IdNjx_80DQ7OvwYlvDcEKCeI4KM.roa
File: IdNjx_80DQ7OvwYlvDcEKCeI4KM.roa (raw, json)
Hash identifier: kR9hPI6FbL03JlPT8abDzaMwZE3tHHn1NlZQ7FfQdos=
Subject key identifier: 21:D3:63:C7:FF:34:0D:0E:CE:BF:06:25:BC:37:04:28:27:88:E0:A3
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 73A4
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/IdNjx_80DQ7OvwYlvDcEKCeI4KM.roa
Signing time: Sat 05 Jul 2025 16:45:05 +0000
ROA not before: Sat 05 Jul 2025 16:45:05 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29604 (0x73a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jul 5 16:45:05 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=21D363C7FF340D0ECEBF0625BC3704282788E0A3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:7e:c9:e0:a6:c9:ce:27:99:13:65:7b:21:6d:
0a:fb:56:75:75:ac:a1:ad:31:d1:25:4b:7a:aa:39:
c7:b7:e1:a5:0f:e0:cf:fe:b2:ea:4f:d9:60:72:98:
be:12:0c:24:00:24:7f:69:c2:33:f3:63:7d:aa:11:
dd:88:24:93:8b:53:39:a4:01:ce:2c:cd:42:38:1a:
44:d5:74:7e:06:3a:fd:2e:11:2a:e6:fa:2c:21:89:
fe:5b:13:88:6c:33:92:82:4b:6b:bf:35:50:b0:b1:
95:b0:a5:0d:c2:5f:66:97:ff:7f:5e:2d:db:19:08:
05:f6:f1:f1:5c:97:15:1f:54:92:25:bb:20:77:25:
61:7b:e0:83:07:3f:c9:39:7c:84:0b:b4:44:4e:54:
9d:a4:4f:a9:0b:78:04:47:8b:1a:aa:b8:6a:f4:a6:
d9:9e:27:a4:f2:9e:c8:9d:f5:9b:3e:6a:1f:db:ae:
4d:2d:4e:51:39:fc:58:75:89:80:62:9d:93:45:da:
a9:1e:47:4b:54:f0:3f:26:cf:67:b5:a2:be:c0:3c:
2f:76:61:ec:a5:06:ba:83:ed:7a:8c:87:f3:16:07:
b7:ea:e1:99:f9:ff:2c:ca:86:ea:b0:fb:61:ca:9a:
9d:a6:b5:7e:87:e7:e4:cf:89:bd:46:26:80:1f:d0:
70:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:D3:63:C7:FF:34:0D:0E:CE:BF:06:25:BC:37:04:28:27:88:E0:A3
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/IdNjx_80DQ7OvwYlvDcEKCeI4KM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
22:51:7a:7e:37:73:af:c5:dd:0f:66:cc:63:28:14:a4:68:46:
5c:9a:17:d0:99:69:11:67:3c:67:26:ac:17:e9:66:96:46:54:
07:a9:fa:03:46:e9:90:d4:31:0b:86:9b:f5:b8:47:5e:21:40:
a7:61:c3:17:81:7c:36:97:3e:3c:3c:40:8c:c3:dd:dc:1d:d3:
28:48:b4:00:ef:62:cd:96:4b:b4:88:ee:40:41:f6:6d:67:4b:
e3:1e:41:a8:cf:d1:46:40:ff:96:0d:56:db:02:29:1f:aa:7b:
99:70:34:53:14:ac:f3:a4:89:52:aa:be:08:8f:89:66:b9:0d:
89:f2:48:de:77:f3:f4:14:0c:db:cb:c2:17:a9:1a:95:e4:7d:
4b:38:92:d2:ee:17:76:a5:d7:45:fd:db:27:f6:5a:c8:9d:e0:
35:4d:0f:16:c3:e5:42:ce:d1:81:ed:31:ba:90:2b:22:f5:15:
3b:f6:84:aa:f4:ff:69:05:b6:0c:96:be:37:b8:aa:7a:07:c5:
ee:cc:59:f0:32:3f:9a:a1:33:f5:fa:d4:ea:5e:42:b2:40:aa:
dc:5c:ed:20:40:b8:3c:af:bc:7a:e6:14:1f:d1:7e:96:c1:68:
8b:04:f7:e5:2c:9f:a3:e9:be:54:96:5f:99:04:2a:c6:19:4d:
fc:19:58:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:57:41 2025 by rpki-client