Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/OOqIG7l9oP5TVldC-j0Zl6b-yP0.roa
File: OOqIG7l9oP5TVldC-j0Zl6b-yP0.roa (raw, json)
Hash identifier: qa/Uq+938k+nHqfIHF2G/7JuJ54LKqTDjvtod0LN2wQ=
Subject key identifier: 38:EA:88:1B:B9:7D:A0:FE:53:56:57:42:FA:3D:19:97:A6:FE:C8:FD
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 75DE
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/OOqIG7l9oP5TVldC-j0Zl6b-yP0.roa
Signing time: Fri 11 Jul 2025 15:41:32 +0000
ROA not before: Fri 11 Jul 2025 15:41:32 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30174 (0x75de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jul 11 15:41:32 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=38EA881BB97DA0FE53565742FA3D1997A6FEC8FD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:f8:3c:90:50:0e:a4:88:5f:39:7d:45:6f:ae:
8b:c1:25:a2:0a:4a:57:54:2b:e7:70:06:8b:01:6c:
92:1f:9b:54:c8:d4:a0:bc:0a:29:50:e3:be:3d:f0:
3e:ae:dd:ff:ca:c2:db:a9:3c:5a:12:c2:cb:14:0f:
ee:a0:38:3f:d1:ec:f1:f3:8d:56:83:b0:59:f1:88:
cb:99:58:03:b3:24:1a:4d:92:7f:ad:24:56:8d:11:
0f:ac:de:7a:8c:95:af:88:03:11:9a:e7:9f:dc:c5:
e2:57:a8:06:0a:54:a9:7a:ee:62:e1:16:2a:d6:a9:
c3:72:e0:61:be:5b:4c:fa:71:63:ca:8b:1f:e4:f3:
20:09:39:4e:82:6c:a6:38:7d:28:f4:cc:ab:b6:f1:
e3:35:a5:b0:09:7b:3c:d1:de:7a:af:a8:86:55:34:
aa:bc:03:f3:f0:11:e3:aa:1a:94:08:70:eb:52:ef:
db:3a:17:60:5a:e4:97:4f:4c:99:4b:6f:6d:11:eb:
e0:94:49:47:49:c5:f8:d5:ee:3e:30:10:f2:ca:dc:
b8:94:8a:6f:91:97:0f:90:bc:7f:11:c6:b0:a9:51:
3d:32:44:9f:bf:d3:90:c1:2f:eb:c0:2b:5d:36:57:
28:d2:06:84:fc:14:7a:b2:05:18:76:b0:ed:90:d1:
bc:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:EA:88:1B:B9:7D:A0:FE:53:56:57:42:FA:3D:19:97:A6:FE:C8:FD
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/OOqIG7l9oP5TVldC-j0Zl6b-yP0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
7f:d3:fa:53:f5:af:b7:54:f4:de:73:00:b4:c3:36:bb:b0:e9:
01:d2:ae:e8:0f:be:44:b7:eb:e9:d2:7f:5e:d4:a9:80:c5:8e:
df:e6:a9:ee:a2:dd:c3:56:18:e3:ce:ca:11:20:c3:ab:c2:56:
b5:1a:69:b7:63:26:cf:be:71:89:6c:13:02:da:1d:df:43:72:
08:45:cd:35:47:5c:40:81:ac:e1:ca:51:db:70:8c:f4:48:3e:
ae:7a:24:2d:63:e8:ee:59:5d:56:92:e4:f6:51:fa:1e:7f:0b:
71:66:42:08:4e:b1:3d:43:1b:81:20:b1:9d:08:75:27:a7:37:
e8:7d:47:ab:33:0b:4a:a7:a9:35:ae:f8:b2:32:f6:9b:31:67:
5c:28:42:32:24:16:6b:c9:3a:85:47:1b:1a:8a:bc:96:40:be:
8c:53:c1:01:2c:52:82:60:4b:35:9a:62:38:02:45:00:36:24:
f6:9b:62:35:6e:45:14:8d:c6:e4:d4:7f:fb:e7:c0:b7:e5:91:
8d:4d:29:21:eb:6a:99:a4:5f:1b:b9:56:c8:a7:7d:72:72:df:
9f:5b:e7:6a:ad:16:7a:1f:cf:eb:c6:11:09:88:5a:36:49:31:
95:89:86:18:92:23:81:29:22:47:6e:c3:33:6b:ea:8e:63:bd:
fd:8e:84:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:32:04 2025 by rpki-client