Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/MNQ4qMTag_WWa_sRxYqRuhxFBo8.roa
File: MNQ4qMTag_WWa_sRxYqRuhxFBo8.roa (raw, json)
Hash identifier: QhSWyq/cOMeECongv2dYlGo+C3ELhQDvwH+D7T5coJM=
Subject key identifier: 30:D4:38:A8:C4:DA:83:F5:96:6B:FB:11:C5:8A:91:BA:1C:45:06:8F
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 6D7E
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/MNQ4qMTag_WWa_sRxYqRuhxFBo8.roa
Signing time: Thu 19 Jun 2025 06:35:11 +0000
ROA not before: Thu 19 Jun 2025 06:35:11 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28030 (0x6d7e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jun 19 06:35:11 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=30D438A8C4DA83F5966BFB11C58A91BA1C45068F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:5c:67:44:b8:a9:57:ad:fc:dd:63:69:b9:4e:
48:53:62:89:76:76:34:bc:ca:7c:e9:c3:c2:9e:ba:
12:7e:d1:83:b1:8a:b6:ea:a3:69:14:3d:83:a2:ce:
40:c2:8d:11:b5:dd:54:57:b0:dc:13:8f:85:66:56:
28:89:62:10:ec:f7:a2:a7:27:78:9e:10:ff:ec:f9:
0a:7c:82:68:00:f1:1d:33:11:13:20:92:4c:08:6b:
0a:a7:32:b6:ce:b3:b7:6b:d8:16:98:77:cf:89:d6:
28:79:36:62:52:c9:12:64:33:df:62:f1:e9:26:cc:
c1:e8:2f:64:3a:e2:36:74:e3:49:33:98:21:5d:21:
06:f2:e7:81:c6:b8:4f:5c:79:ee:8a:c3:d3:13:61:
0f:0d:c9:c7:bf:d5:65:69:1b:11:83:50:26:0b:59:
c9:ce:4f:d1:93:44:3d:5e:9e:85:b3:3e:6f:bb:67:
89:ea:60:48:a0:c6:10:80:0f:61:f1:bf:84:a1:57:
e9:58:aa:f4:52:54:e8:c2:94:5e:9f:d0:fa:d6:8a:
55:6d:75:e5:c0:ad:0f:2e:2e:cb:c2:a1:16:2a:dc:
e7:d3:85:57:f5:d2:45:33:de:6c:54:f4:99:b5:38:
aa:88:9a:fa:ac:81:14:fa:0c:6f:df:cd:15:ef:77:
53:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:D4:38:A8:C4:DA:83:F5:96:6B:FB:11:C5:8A:91:BA:1C:45:06:8F
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/MNQ4qMTag_WWa_sRxYqRuhxFBo8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
26:38:c2:8d:7a:af:42:ca:b1:00:c2:86:01:69:6a:2d:b1:56:
f0:a8:fc:a8:1a:75:0e:ec:1d:7b:cb:7a:a4:55:2c:64:7f:66:
d2:35:13:9f:9d:1d:8c:9e:35:0c:0e:3b:d1:ab:c2:0d:8d:f9:
e9:65:72:12:25:ff:1f:41:fe:50:95:06:0d:eb:3a:87:73:b4:
2c:b0:6f:50:48:15:2e:b1:16:6c:c4:00:2d:12:68:61:32:dc:
13:ff:48:ee:bd:41:ad:91:2d:66:11:72:0b:2e:78:b6:34:19:
70:5e:1a:33:b7:2f:7a:8b:8e:3e:37:0e:44:e7:1e:98:2d:d7:
92:2f:d1:c9:18:e0:58:da:a0:e9:5c:28:df:3c:c5:2a:0c:f7:
22:ff:f0:69:15:83:47:86:cb:75:b7:69:26:d5:e1:63:84:c4:
37:54:78:93:ab:39:74:7d:b2:53:b3:9f:53:4f:5e:3e:9c:4d:
e5:b1:17:a4:ac:a4:55:32:44:80:e7:de:a5:24:b0:95:1d:d7:
cf:7b:69:e0:e5:45:f5:37:e1:95:f9:7a:f4:cf:d4:03:04:4c:
81:e6:b8:6c:0d:34:47:e6:82:28:32:62:d0:c3:15:d6:62:da:
a6:f5:c0:cc:2a:b6:b5:3e:09:e9:56:f6:dd:1c:16:ab:53:04:
04:b8:6d:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:49:44 2025 by rpki-client