Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/JkAhRETtlIepfa3ndzHOv5yNRZo.roa
File: JkAhRETtlIepfa3ndzHOv5yNRZo.roa (raw, json)
Hash identifier: 1SsBafIFbWCG0SQgeRt8YwsgjwAneEeiG+pMRAjXnnk=
Subject key identifier: 26:40:21:44:44:ED:94:87:A9:7D:AD:E7:77:31:CE:BF:9C:8D:45:9A
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 7650
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/JkAhRETtlIepfa3ndzHOv5yNRZo.roa
Signing time: Sat 12 Jul 2025 20:12:33 +0000
ROA not before: Sat 12 Jul 2025 20:12:33 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30288 (0x7650)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jul 12 20:12:33 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=2640214444ED9487A97DADE77731CEBF9C8D459A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:d6:f2:86:fb:e7:51:2f:70:94:ce:59:eb:53:
ad:4d:16:f8:a1:57:f6:ca:e3:35:22:c2:4f:83:68:
f5:69:32:42:00:e3:b9:2c:ad:7c:c5:90:e4:90:06:
7d:97:d4:00:d9:8a:40:48:e4:61:48:7c:0b:32:bc:
d5:a3:86:60:82:49:f1:1f:99:21:f3:16:f0:87:e4:
d9:dd:4e:8a:3b:fd:1b:42:84:e8:31:80:d2:de:94:
d1:8e:c2:60:b2:b9:5f:66:6c:5b:23:01:62:83:5c:
c9:b0:5e:b1:e0:12:e4:7f:bb:a3:85:d0:46:08:eb:
cf:11:25:fd:af:78:29:67:4b:3d:96:6d:41:c1:b7:
42:1b:09:a6:67:7e:78:fc:e9:02:2f:0f:b7:17:2c:
c4:5d:ad:38:2f:d6:30:7f:ed:3f:2b:6a:1d:60:b7:
ff:78:f3:12:6a:42:20:3e:65:d9:ca:fc:e2:f7:84:
f9:ae:37:41:78:8e:e6:ab:47:05:ef:c6:3a:41:fa:
34:59:ea:81:ad:bb:b2:c3:ed:12:5e:5e:87:2a:b1:
11:c2:b7:92:3f:92:96:c0:93:56:22:aa:fb:05:5b:
ec:9e:90:88:23:10:32:0c:8d:6e:28:d3:bf:73:75:
ff:fe:32:ea:65:1d:24:99:c8:b8:7c:87:7b:0b:99:
b2:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:40:21:44:44:ED:94:87:A9:7D:AD:E7:77:31:CE:BF:9C:8D:45:9A
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/JkAhRETtlIepfa3ndzHOv5yNRZo.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
53:95:bd:b7:b1:5b:96:1c:3a:7d:ee:e4:85:4a:44:7e:bb:6e:
8f:bf:46:13:e1:e3:19:60:7e:68:e0:12:42:2c:22:0d:b2:16:
e7:86:23:68:bc:ad:83:fb:91:95:11:5c:04:a0:c8:5d:12:a6:
8b:77:39:45:6e:f3:5f:e6:5e:bb:f3:b4:41:65:7b:4d:23:9e:
3a:27:83:be:e7:03:ee:e7:0b:6f:d1:00:46:3c:d4:0b:c2:c3:
71:41:b3:48:3e:c6:46:74:2b:27:ef:ad:7c:39:60:39:68:53:
f0:d2:5f:7c:42:1e:e8:4b:8d:29:5c:47:69:97:2a:2e:0a:7a:
4b:04:65:3b:57:b5:f7:87:be:33:55:7e:f1:4d:31:b5:81:21:
d3:e3:28:7e:9d:1d:82:88:43:db:ed:1c:b7:d2:6a:40:86:56:
bf:ef:eb:39:bf:84:0a:14:52:12:a5:48:3d:29:37:46:3d:b5:
9c:32:05:e3:dd:d4:3d:f5:a7:9a:44:43:31:c7:61:c6:8d:6e:
0e:97:05:6c:e5:7d:f9:9b:d3:bc:82:04:e6:1d:a3:02:23:05:
97:4f:5a:c1:e0:b8:77:6d:66:04:0f:89:f0:9a:e8:2a:67:2b:
1f:36:f6:96:64:cc:bf:71:8f:a3:e5:9b:7c:74:4b:b3:4f:7f:
0b:11:8e:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:46:48 2025 by rpki-client