Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/JxF_9NZ-xSYGjDsT0EUmxBqu2i4.roa
File: JxF_9NZ-xSYGjDsT0EUmxBqu2i4.roa (raw, json)
Hash identifier: +TlylGlD0T0Fadk2TVCQo5hJcQhhsyhaOa+/qoCjWfU=
Subject key identifier: 27:11:7F:F4:D6:7E:C5:26:06:8C:3B:13:D0:45:26:C4:1A:AE:DA:2E
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 790C
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/JxF_9NZ-xSYGjDsT0EUmxBqu2i4.roa
Signing time: Sun 20 Jul 2025 03:13:21 +0000
ROA not before: Sun 20 Jul 2025 03:13:21 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30988 (0x790c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jul 20 03:13:21 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=27117FF4D67EC526068C3B13D04526C41AAEDA2E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:7b:8d:34:d2:bb:33:ae:ed:df:91:a6:c3:97:
c0:ed:43:ba:d9:df:df:dd:71:75:91:e8:01:14:6d:
45:1c:95:0a:43:81:83:0f:b3:98:49:ce:4a:b7:7c:
ff:b1:65:d6:aa:e3:31:59:05:07:2e:e5:00:a6:2d:
cb:93:74:ad:5b:58:82:ab:52:1d:ba:a3:45:a4:9f:
2d:e5:5f:43:59:cd:27:4b:2c:56:57:7f:de:b1:9d:
55:df:4c:65:b2:11:80:20:06:67:1b:19:0d:87:55:
e9:08:d7:38:87:df:56:a7:28:f9:01:36:fa:38:45:
8d:e0:81:24:73:9d:ce:2f:96:f1:68:36:ce:dd:ed:
48:59:e8:76:81:28:3d:85:0c:52:17:5d:a0:11:c2:
d2:9e:92:5f:bf:10:59:39:0c:d2:a6:00:3d:82:99:
0d:18:24:be:a8:a9:c9:78:64:33:55:75:db:1f:96:
67:0b:b6:7e:34:b4:46:05:7a:30:95:58:0d:0e:73:
a6:ec:f6:5f:28:d9:d7:43:56:3a:80:ff:8d:b0:15:
d5:6f:35:88:ca:53:bc:c0:83:15:77:fc:a9:b8:48:
36:ee:fd:6d:69:81:41:bb:6d:25:25:3d:8d:9a:34:
c9:37:2e:b6:b5:34:92:de:dc:eb:70:eb:4a:23:16:
a8:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:11:7F:F4:D6:7E:C5:26:06:8C:3B:13:D0:45:26:C4:1A:AE:DA:2E
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/JxF_9NZ-xSYGjDsT0EUmxBqu2i4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
a2:01:d6:aa:74:bf:9b:c5:b4:60:c9:7d:7f:cf:6d:b0:ff:b3:
38:e1:14:1d:b4:91:59:cc:cf:d1:56:97:d2:0e:f9:4b:70:98:
50:2f:9a:7d:0d:ea:c8:bd:ae:08:5f:a8:a2:6d:b4:55:23:b1:
d3:5d:cb:32:4e:ce:67:5c:52:a8:a4:5f:30:cf:d4:6b:dc:a6:
13:e1:97:21:80:3c:84:c2:98:23:53:91:72:8b:c2:12:15:47:
23:c9:36:28:c0:74:3f:71:7a:66:66:8f:6f:18:bd:3f:8b:e6:
63:b7:f1:25:e0:57:fa:9b:73:e3:4b:46:1a:34:f5:83:b3:e2:
6c:c5:f9:47:ef:b1:46:b5:f2:43:78:14:f2:97:ee:4b:3e:0d:
ca:fb:4e:73:a9:96:16:5c:09:1a:b0:8b:08:7c:f7:28:a0:06:
f4:69:94:56:fb:21:c6:be:47:7a:1a:24:eb:5f:f0:5c:53:1a:
92:03:67:a3:69:f3:30:95:d2:d3:2c:01:f6:7a:3a:29:c4:28:
e7:fa:09:50:fb:6f:20:35:1e:c2:d1:a8:2f:cc:27:8a:be:94:
19:65:b2:b8:f2:f5:f9:b6:19:8f:ca:f1:23:8c:0d:35:6e:5d:
ae:d7:42:fd:bd:8d:02:18:bc:a5:fe:36:5e:c7:ae:fc:df:eb:
da:2f:e7:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:52:28 2025 by rpki-client