Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/KfgT66FK0Cq6e92eh5bEjmN-RYc.roa
File: KfgT66FK0Cq6e92eh5bEjmN-RYc.roa (raw, json)
Hash identifier: jREC0lZYmWIR5VaLD5InOOTrGp31DtViYqe/7go5j1o=
Subject key identifier: 29:F8:13:EB:A1:4A:D0:2A:BA:7B:DD:9E:87:96:C4:8E:63:7E:45:87
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 64EA
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/KfgT66FK0Cq6e92eh5bEjmN-RYc.roa
Signing time: Tue 27 May 2025 04:41:16 +0000
ROA not before: Tue 27 May 2025 04:41:16 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25834 (0x64ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 27 04:41:16 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=29F813EBA14AD02ABA7BDD9E8796C48E637E4587
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:43:7d:21:c1:b1:07:c5:70:58:6c:0d:77:12:
03:e9:b2:65:2f:57:1c:13:da:44:9b:5b:43:88:22:
02:f5:a9:20:a2:b8:60:32:fc:95:d4:99:42:5d:ca:
40:99:bc:2c:10:5c:b1:1a:77:65:ce:ce:29:f2:b0:
f6:79:e5:36:ed:84:c4:3f:87:fe:2c:b5:9a:b6:af:
28:e5:4d:57:fc:61:8b:27:1e:4e:c4:bb:ab:fd:e2:
0c:d8:1a:ec:29:44:47:85:bc:66:88:64:a7:17:c8:
8e:b6:b3:78:92:dd:a7:a8:ae:87:8b:c1:ce:71:8a:
56:bf:ad:49:82:37:ea:bc:15:7f:8c:ce:de:fc:de:
91:d6:ce:c9:7b:31:f9:44:f2:c3:89:3f:86:ed:fd:
41:f3:c8:e1:bb:b8:97:c4:2d:b2:c6:a0:e9:dd:17:
da:22:b8:be:93:fb:9d:95:6f:51:d1:ae:94:dc:aa:
08:f9:d9:68:a6:7a:e4:c0:83:30:40:67:42:26:50:
9e:b9:f9:3c:42:37:1f:e5:00:c8:a3:c7:9d:48:00:
89:40:bc:7e:44:1f:24:05:fa:da:34:38:22:82:d4:
93:aa:ad:60:ad:46:a9:5d:09:7c:df:d7:b4:aa:a4:
e5:12:d2:0b:1b:0d:88:0d:2c:cc:e0:78:df:a6:15:
d5:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:F8:13:EB:A1:4A:D0:2A:BA:7B:DD:9E:87:96:C4:8E:63:7E:45:87
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/KfgT66FK0Cq6e92eh5bEjmN-RYc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
85:23:80:7c:21:aa:62:84:b0:d7:91:fa:ea:f9:ec:8a:cc:2b:
de:a1:4a:60:3c:91:bb:37:b7:22:ab:2a:e0:59:fc:8c:10:3e:
32:ac:9f:88:a3:9a:1e:b9:b5:38:a9:f1:e0:01:d1:ae:fb:12:
2d:e6:83:3f:8b:7a:06:63:e5:d3:0a:30:a7:61:97:3b:5b:96:
61:99:16:67:19:3e:ea:5b:4a:37:f9:75:2b:a8:90:99:10:26:
54:c9:50:75:75:47:f3:0b:c9:62:d9:5c:97:9d:7a:e9:6b:6b:
ac:ba:3e:0e:39:29:e9:2d:c9:11:4b:00:e6:68:d4:23:20:43:
2e:b2:51:c0:ee:90:ee:6a:97:9f:a0:e1:c4:4d:c6:03:b0:b7:
5b:18:8a:8e:9f:43:78:97:d8:c4:57:d4:ab:ee:66:f5:ee:25:
11:fa:5c:0f:13:e1:e4:88:15:4c:99:0b:44:0c:47:f1:65:8b:
2f:10:db:84:20:a3:91:7f:8b:7d:02:9a:d8:a1:d4:93:b1:f8:
96:5b:ec:af:a8:5d:7d:b1:c7:9b:48:8e:19:27:38:49:62:bb:
8e:e6:23:ac:6c:66:44:6d:5c:8c:cf:f9:30:85:58:3a:39:23:
4c:6c:c6:3d:f9:34:25:73:ae:06:c6:81:74:70:41:d6:3d:d6:
e2:fd:71:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 01:26:49 2025 by rpki-client