Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/M3OwCtebTcQbnCvVwlxW0TXV8mE.roa
File: M3OwCtebTcQbnCvVwlxW0TXV8mE.roa (raw, json)
Hash identifier: 39BRW+eMrVV5+BccNqgPFQbdcz0qPdXR1hjTeuVtCWg=
Subject key identifier: 33:73:B0:0A:D7:9B:4D:C4:1B:9C:2B:D5:C2:5C:56:D1:35:D5:F2:61
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 770E
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/M3OwCtebTcQbnCvVwlxW0TXV8mE.roa
Signing time: Mon 14 Jul 2025 19:41:46 +0000
ROA not before: Mon 14 Jul 2025 19:41:46 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30478 (0x770e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jul 14 19:41:46 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=3373B00AD79B4DC41B9C2BD5C25C56D135D5F261
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e0:02:69:68:5b:f2:1f:9a:aa:25:6b:3a:a6:
05:1f:ea:76:81:b1:f6:d4:b5:4a:14:25:c0:df:2e:
f4:ae:18:77:3d:1c:3b:bc:64:ee:5e:d7:ab:d3:49:
74:80:cb:42:68:d8:76:5c:ae:86:22:bd:b0:d8:36:
01:c2:e0:63:4b:5f:87:5c:bb:f4:6a:e3:c9:57:1c:
3e:e4:9c:34:a9:a1:c7:66:b1:f4:c3:9e:1b:a4:5c:
3e:95:1b:5a:0b:fe:d5:0a:5f:43:59:37:ee:1e:16:
f0:da:54:cb:8a:61:77:50:e6:82:2d:a6:e8:76:c2:
f0:56:96:95:98:5c:1a:df:34:c4:d8:5d:63:95:33:
e2:10:1b:c2:1d:f6:da:c4:e3:84:69:1c:b4:e0:47:
44:bd:f2:4c:b1:72:bc:45:f4:cf:3b:24:7b:66:22:
68:43:b3:f4:18:e1:0c:93:4d:2f:25:66:23:1b:4c:
07:d7:ca:7b:58:56:d1:9b:48:75:c7:2e:f9:9e:a2:
60:1f:11:aa:5a:af:af:a3:b3:76:7a:8c:cd:74:54:
cf:8a:88:9d:3a:a9:49:ab:16:71:b6:99:09:3b:98:
15:2f:f9:ac:5c:c3:61:0a:09:78:98:e1:33:1b:c2:
05:fa:51:bd:0c:f0:31:eb:e7:c2:b6:69:44:09:6b:
ce:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:73:B0:0A:D7:9B:4D:C4:1B:9C:2B:D5:C2:5C:56:D1:35:D5:F2:61
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/M3OwCtebTcQbnCvVwlxW0TXV8mE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
21:1e:a0:39:00:7e:c3:d5:54:fb:18:b8:70:67:7a:03:7c:33:
32:f9:d0:dd:a3:21:e3:cf:fb:5f:21:df:f2:ce:27:75:2e:2e:
53:87:0b:ad:36:df:a8:5d:48:86:29:3b:d8:2a:93:3f:d0:e9:
5f:43:0c:75:89:e8:eb:7a:5d:21:78:c6:10:d0:1c:a1:0f:e6:
12:53:ad:1e:21:6a:60:4c:32:94:75:ef:3f:1e:99:72:6b:b0:
78:24:92:71:52:dd:47:71:55:cc:dd:53:89:4f:4e:d1:3f:e1:
09:4e:0f:11:bb:a9:68:98:d8:39:5b:38:c6:f1:99:fd:b8:d5:
13:2d:37:78:49:8f:4a:f1:e2:34:ac:2d:e0:af:de:3e:42:8a:
cc:ea:a5:8f:62:b0:3e:9a:54:35:22:d1:1a:70:20:3f:f9:e0:
b0:c9:5a:04:ca:0c:e9:6d:01:87:54:b7:59:d0:bf:de:4e:9d:
4c:18:ac:92:4f:4e:d2:60:98:02:02:4f:09:03:35:10:30:37:
c5:c2:49:9c:f4:9c:74:78:d0:70:bc:85:db:8d:b3:8a:ca:3d:
5f:84:76:7e:51:b9:aa:06:e4:8a:00:64:25:a2:43:30:71:8b:
83:49:f8:e1:9d:6a:fa:5f:1e:43:a3:50:ba:c8:2f:91:2b:42:
d6:65:12:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 08:09:55 2025 by rpki-client