Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/JNdsraY7casHP0JsY92dmaUdr0U.roa
File: JNdsraY7casHP0JsY92dmaUdr0U.roa (raw, json)
Hash identifier: VOftgnAE6YCRQCo/Go/No9JGDeRl1p7rheTH4DsYbiQ=
Subject key identifier: 24:D7:6C:AD:A6:3B:71:AB:07:3F:42:6C:63:DD:9D:99:A5:1D:AF:45
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 76C2
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/JNdsraY7casHP0JsY92dmaUdr0U.roa
Signing time: Mon 14 Jul 2025 00:41:57 +0000
ROA not before: Mon 14 Jul 2025 00:41:57 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30402 (0x76c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jul 14 00:41:57 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=24D76CADA63B71AB073F426C63DD9D99A51DAF45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:8c:9c:75:2c:9f:89:38:db:c0:42:a2:aa:ff:
a1:94:a2:fd:6f:47:bd:2d:a9:7f:79:74:de:90:e5:
1d:6a:26:60:10:8f:98:a0:de:92:cb:fe:52:cc:26:
84:8b:61:df:e3:60:a4:53:21:4b:7a:71:21:32:c3:
b7:3c:84:13:0c:cb:c5:ca:22:90:b8:24:1a:81:f2:
ce:24:d2:64:0b:0b:8f:5e:da:16:b6:c1:bc:02:a2:
4d:4d:5c:51:35:7a:5a:4c:74:e3:b3:9b:94:0e:0e:
c2:db:b6:89:96:cc:02:83:dc:04:b0:e2:85:86:4c:
1b:a3:7d:3d:a7:15:3a:46:82:44:ff:a1:2a:70:06:
8c:de:59:2d:da:05:a1:81:e8:94:64:7c:d5:25:b7:
8d:85:f4:0f:6b:77:a6:1c:f4:c9:19:de:a7:a3:84:
6b:54:5f:17:b6:c8:f5:ad:0c:5a:aa:71:1a:f0:3e:
67:dd:f5:1b:7a:fc:d7:01:44:1e:fe:07:79:ad:9c:
e7:12:f3:ae:e8:a5:85:3b:05:fd:cc:15:1d:4f:6a:
2e:f2:78:85:16:ab:0e:55:71:32:30:ba:40:d1:70:
4a:b7:2e:c9:32:0b:0a:05:72:2e:cc:3d:63:99:cf:
22:d4:4f:f4:4c:25:20:22:75:33:f1:c9:48:d4:8e:
a7:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:D7:6C:AD:A6:3B:71:AB:07:3F:42:6C:63:DD:9D:99:A5:1D:AF:45
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/JNdsraY7casHP0JsY92dmaUdr0U.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
38:09:eb:a9:f1:a1:ba:aa:7f:6e:0c:c6:4b:31:ce:91:08:e8:
e8:75:a4:60:69:6c:1a:ce:4f:72:ba:22:e8:ed:93:1c:a3:27:
a6:88:a7:02:78:3f:73:e0:9e:c8:9f:ef:3e:fc:bd:83:ce:00:
e8:be:01:23:b7:aa:16:8a:a2:4b:7c:37:93:60:65:11:f7:e4:
74:c8:17:22:7f:9a:ae:1a:5f:21:95:94:2c:d8:ae:ba:fe:d0:
44:0b:87:19:dc:24:07:d6:a9:a9:01:33:99:7c:3b:08:ee:f5:
20:31:b1:77:6c:0f:2f:6c:a3:01:d5:3a:70:a5:f5:16:5a:a3:
45:3d:6b:44:a3:73:c9:44:78:9b:b7:25:9e:1e:72:9b:7c:38:
2d:00:5d:c6:dc:a1:ea:ae:63:de:01:db:27:fa:0c:82:66:70:
08:36:a5:57:ab:86:83:2c:39:5a:45:bb:e6:d6:7d:b7:ef:0d:
35:ed:bd:60:c5:de:96:68:8a:7a:5c:80:03:9f:a9:17:3f:e6:
4e:61:95:d3:16:b0:be:87:bd:c8:fe:53:e1:aa:f3:31:6a:cc:
a4:05:30:0e:05:85:db:e9:cb:f8:29:7c:18:82:0a:90:47:78:
34:3e:56:85:bd:d1:a5:e4:3c:93:b6:79:45:d7:7b:39:65:e9:
9e:93:a2:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:38:49 2025 by rpki-client