Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/O7gYPVzq288eWHScQCPDknc5lGE.roa
File: O7gYPVzq288eWHScQCPDknc5lGE.roa (raw, json)
Hash identifier: dikNxeY3EtqYEo7CTLxK5Leo2hnhWzWJ02OEOS+OAGg=
Subject key identifier: 3B:B8:18:3D:5C:EA:DB:CF:1E:58:74:9C:40:23:C3:92:77:39:94:61
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 728A
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/O7gYPVzq288eWHScQCPDknc5lGE.roa
Signing time: Wed 02 Jul 2025 18:14:47 +0000
ROA not before: Wed 02 Jul 2025 18:14:47 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29322 (0x728a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jul 2 18:14:47 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=3BB8183D5CEADBCF1E58749C4023C39277399461
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:fe:40:7f:c7:92:e4:69:1b:56:dc:ab:09:03:
f5:fe:1b:76:99:0b:94:7a:aa:08:c4:b3:9e:0b:b3:
84:2b:6c:5b:61:63:80:05:b2:75:89:2c:93:27:e5:
2f:43:67:fc:ab:bf:27:79:a7:d8:30:e0:0b:a0:07:
dd:8f:b3:73:1c:a5:63:cb:bb:a6:63:69:75:1a:0c:
b3:15:bb:72:82:59:21:16:6c:8f:26:8f:ff:66:01:
e4:89:dd:8c:cf:13:16:a8:29:82:08:57:54:f1:64:
2a:e6:bb:e6:50:7a:52:a0:c0:c6:d5:9c:a5:3a:4d:
69:9f:88:45:7b:43:9e:87:5e:89:d1:a0:9c:c8:71:
b3:ec:6c:0a:94:6e:a3:f3:09:01:9e:6c:b3:79:87:
d8:4f:4e:aa:b2:08:03:e8:ff:0d:81:22:99:f6:d2:
19:9e:06:84:2e:ee:88:56:a7:8e:b7:f7:91:ee:a1:
af:b5:81:85:fb:9c:c9:08:6d:80:03:80:b5:48:86:
ff:87:8f:6f:0f:f9:33:dc:c1:94:7f:c4:ee:46:6f:
3f:2e:d7:29:5c:00:7f:c9:54:8f:ed:cd:33:f9:16:
2d:fa:ec:6f:df:c8:71:4d:e8:29:b0:1c:85:dd:6e:
71:41:85:30:82:83:6d:86:dc:b1:d3:ac:a9:3e:2f:
6a:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:B8:18:3D:5C:EA:DB:CF:1E:58:74:9C:40:23:C3:92:77:39:94:61
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/O7gYPVzq288eWHScQCPDknc5lGE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
34:7f:bc:4a:1e:ad:af:65:92:c4:e5:ba:42:e2:99:51:48:44:
97:c6:59:5c:ae:69:b5:2e:4e:e6:ee:b2:14:25:74:b8:de:d0:
03:25:c7:39:da:34:8e:1b:01:b3:2d:ee:64:4d:f9:a2:16:56:
89:9c:ff:74:c6:28:50:08:ec:d8:8b:39:64:91:b3:46:48:aa:
f2:11:17:06:c5:ed:98:ff:50:5c:44:94:c4:9b:bb:ea:cf:d1:
5c:94:a2:61:00:54:93:e2:c8:c4:c5:79:89:0b:ff:47:02:61:
14:9f:83:a3:51:dd:cb:cb:ca:75:69:f7:49:5d:5c:0d:48:3e:
96:b3:ec:6c:c8:f8:12:e8:76:63:74:8b:34:a7:e0:61:c9:63:
be:f7:ce:97:d1:ed:1d:cd:56:0e:31:49:c2:53:79:78:4e:e6:
05:84:74:02:55:90:6c:08:24:ef:d9:b8:01:b7:76:f1:1f:90:
e6:58:a0:57:86:a0:a3:5c:97:f5:fa:5e:af:ed:50:5c:c1:d1:
bf:98:6d:69:a0:9f:db:f8:b4:7d:6c:30:be:19:af:23:04:67:
ed:fc:0d:9f:8a:3b:e9:e2:34:a0:f3:25:b4:14:2c:c2:66:8f:
69:5e:c6:cf:74:3f:90:b2:1c:9b:da:2e:2f:b1:ff:c2:d2:45:
da:f9:b5:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:37:06 2025 by rpki-client