Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/OkPWKSifryaqgQfCavYZ_5DHI-g.roa
File: OkPWKSifryaqgQfCavYZ_5DHI-g.roa (raw, json)
Hash identifier: Dm1C97BU/iDAOLMScMtJ8STuiJ/zgkb9al0tnAeii2k=
Subject key identifier: 3A:43:D6:29:28:9F:AF:26:AA:81:07:C2:6A:F6:19:FF:90:C7:23:E8
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 6CA0
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/OkPWKSifryaqgQfCavYZ_5DHI-g.roa
Signing time: Mon 16 Jun 2025 18:16:14 +0000
ROA not before: Mon 16 Jun 2025 18:16:14 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27808 (0x6ca0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jun 16 18:16:14 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=3A43D629289FAF26AA8107C26AF619FF90C723E8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:8f:d7:d0:bf:f1:91:ab:be:a8:5d:78:8b:4d:
bf:fa:0d:b8:35:a3:82:9c:a3:bf:27:4f:c5:82:36:
64:73:87:85:33:bf:c2:fc:ea:2b:bb:71:4f:21:92:
50:a3:dc:3f:06:67:39:be:2c:93:a8:32:0b:2e:d1:
c4:ed:76:a8:ee:f3:ea:7a:98:6b:89:53:42:61:d8:
16:fe:ce:34:78:a4:f4:dd:3c:0e:5e:39:72:db:71:
90:c9:b7:4d:4e:82:cf:e0:c0:7f:70:06:55:e6:f1:
70:ca:bb:bc:26:41:b9:1e:21:6c:1c:6b:0a:06:cb:
65:d4:b1:0a:ea:43:d1:e9:bc:d5:e0:33:ee:b6:6b:
bf:2c:60:4c:03:96:2e:63:bb:99:df:a1:2b:f0:45:
7f:53:19:c5:aa:71:34:f8:df:39:ce:40:a2:48:b6:
7b:44:d6:35:dd:0b:37:ba:22:dc:48:df:3e:a1:21:
87:9d:71:6f:5b:5f:68:83:c7:20:c6:0b:b0:85:b4:
c4:2a:8d:98:99:05:96:6f:c1:db:bf:e5:82:4a:17:
cd:bb:c6:74:44:b1:70:78:e8:7b:d3:a7:44:e8:40:
cc:1f:7f:1a:df:9a:50:27:1b:e7:f1:24:fa:4d:d5:
6b:0b:91:3f:78:64:cf:03:3b:73:be:f5:8f:d0:3c:
ea:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:43:D6:29:28:9F:AF:26:AA:81:07:C2:6A:F6:19:FF:90:C7:23:E8
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/OkPWKSifryaqgQfCavYZ_5DHI-g.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
ad:70:84:cd:71:b6:fb:bb:5f:78:39:d9:d6:2d:41:a6:3e:5e:
3c:10:7b:fb:03:de:ef:ec:db:b1:a1:8d:11:62:66:d7:a8:33:
37:d0:b0:3c:2c:7d:0a:ff:a5:7e:a6:fd:f1:da:dc:77:c2:c1:
51:63:18:7e:c7:e0:9d:75:8b:21:30:34:5a:8e:61:9f:7c:70:
41:c8:a2:e3:aa:c9:d8:2d:8d:98:aa:22:4a:18:b7:21:4e:f1:
3a:76:b5:41:1d:04:69:ea:b2:64:46:d4:3a:38:de:75:80:ff:
62:ae:47:d4:cd:64:df:46:e3:b7:ad:3a:d4:d1:31:18:f7:88:
ea:12:f5:1f:a1:fd:35:1b:94:0f:73:83:28:71:42:cd:79:26:
9e:3f:ac:cc:fb:1c:e6:e4:e2:79:88:b9:09:65:c8:12:25:ec:
32:77:85:2b:e3:f7:fa:02:a8:f2:b1:6f:15:29:b1:74:f6:0c:
1f:bb:cd:ca:22:8b:76:27:ef:c8:2e:fd:0a:66:1d:f8:57:fb:
06:28:74:b1:92:e6:50:aa:e5:7b:cf:e6:0a:3e:04:a6:57:6a:
2c:07:03:38:53:1b:36:63:16:e4:0e:6a:55:4c:be:14:0e:14:
e7:a2:5e:f6:d2:76:f5:a2:23:fb:68:7c:3a:cc:70:d5:d6:7e:
c2:8b:9b:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:52:27 2025 by rpki-client