Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/MBrf-Ra-8GqTfKXgVOKKlLejPTk.roa
File: MBrf-Ra-8GqTfKXgVOKKlLejPTk.roa (raw, json)
Hash identifier: VlQJDHF7ZrNwDZij5RhmMZgKeyrL1hcEd72psmKcI/A=
Subject key identifier: 30:1A:DF:F9:16:BE:F0:6A:93:7C:A5:E0:54:E2:8A:94:B7:A3:3D:39
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 7508
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/MBrf-Ra-8GqTfKXgVOKKlLejPTk.roa
Signing time: Wed 09 Jul 2025 09:45:49 +0000
ROA not before: Wed 09 Jul 2025 09:45:49 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29960 (0x7508)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jul 9 09:45:49 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=301ADFF916BEF06A937CA5E054E28A94B7A33D39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:2d:3a:7e:f8:09:f4:16:5f:ce:77:f5:1c:8f:
b4:65:41:9c:4a:e2:9a:1a:b5:b6:98:e9:c6:3c:0f:
e5:28:fb:7c:f1:ca:01:20:55:aa:2d:d9:09:67:98:
23:c8:36:98:05:37:2f:1f:68:c4:ce:32:27:9b:34:
d5:4e:21:d5:90:95:c1:56:2b:ea:94:2a:1e:2d:b1:
0f:78:4a:31:f8:1b:ff:eb:68:a3:5b:67:f4:63:38:
78:13:8e:96:71:07:17:da:6b:02:e7:6d:69:7e:fd:
98:6d:d8:d0:01:ed:f8:a0:21:7f:ae:6f:9c:80:54:
d0:7e:f0:d6:b0:34:fc:ce:11:16:0e:4b:48:9e:89:
b5:b6:a1:1d:e7:48:1c:01:a9:b4:02:a5:0f:52:29:
bc:3c:d6:63:3f:94:31:65:de:44:4f:1e:84:8d:45:
b1:6c:14:c6:0b:81:fd:77:17:49:c9:60:40:96:f0:
0b:bd:48:ca:b0:c7:be:13:8a:8c:5d:01:ff:37:4e:
d2:09:0d:a1:85:e1:83:11:26:df:4f:8e:55:dc:26:
d5:6e:70:76:1a:c6:8c:21:4f:1d:f6:46:58:bb:0b:
ca:21:13:62:b1:19:39:d0:91:4f:c5:9f:20:c9:25:
82:28:01:ec:20:c6:36:19:95:14:26:a7:53:20:f9:
83:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:1A:DF:F9:16:BE:F0:6A:93:7C:A5:E0:54:E2:8A:94:B7:A3:3D:39
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/MBrf-Ra-8GqTfKXgVOKKlLejPTk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
8c:de:56:ba:ef:b7:fc:5f:41:66:e8:a8:d2:f9:5e:7c:3f:f0:
86:e0:23:17:75:5b:3f:97:bb:2c:8a:0e:22:20:11:31:36:c3:
b6:ed:17:49:fb:d4:0e:e7:e2:9d:f5:c0:36:2c:9b:b0:de:87:
4b:52:66:4e:2b:f8:f3:9f:5a:33:3a:4b:e5:62:0a:71:8e:ba:
ea:2e:e1:ff:07:4c:4c:6e:f7:56:c7:59:0a:84:81:78:5c:f2:
87:83:73:7c:63:5e:95:f1:ff:02:6f:ea:99:91:0d:fa:40:21:
32:be:7d:9a:ec:65:8c:c2:6d:f0:fb:57:44:14:dc:6a:6f:13:
94:d6:30:55:a8:2e:ca:e9:6d:65:ed:4c:bf:1d:cf:dc:d1:70:
43:1c:58:be:6f:59:47:42:97:40:dd:9b:0a:8f:d0:8c:c8:8e:
50:7b:63:74:66:a4:c9:a5:1c:8b:68:da:b8:ac:9d:d2:f9:f2:
65:00:14:1d:7b:e6:e0:62:a4:3f:1c:8a:e5:e3:34:d0:64:df:
fa:82:ba:3c:96:7d:59:9a:a9:8d:e4:1f:ee:56:f9:db:df:ed:
6d:b2:bb:54:e0:a5:e2:58:8f:21:51:f6:e7:0b:6e:d7:4f:ce:
98:9b:96:22:e3:30:d3:58:d1:e4:ed:50:13:d9:3f:65:2c:fc:
23:52:25:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:55:41 2025 by rpki-client