Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/P9joqXqfkx4C4SIUhsKuqxhKF2I.roa
File: P9joqXqfkx4C4SIUhsKuqxhKF2I.roa (raw, json)
Hash identifier: iIE09QXAav/kZJVcb+cV83L7k0PsWf2zw0jN6Ti0j1A=
Subject key identifier: 3F:D8:E8:A9:7A:9F:93:1E:02:E1:22:14:86:C2:AE:AB:18:4A:17:62
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 7034
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/P9joqXqfkx4C4SIUhsKuqxhKF2I.roa
Signing time: Thu 26 Jun 2025 12:48:07 +0000
ROA not before: Thu 26 Jun 2025 12:48:07 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28724 (0x7034)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jun 26 12:48:07 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=3FD8E8A97A9F931E02E1221486C2AEAB184A1762
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a8:dc:86:06:67:7d:02:7f:bd:17:f8:96:df:
91:58:ac:fa:15:a6:4d:68:93:97:f7:12:09:e2:94:
5b:42:89:24:ab:28:7a:be:2f:10:c3:86:3d:44:2f:
b5:a5:ca:b4:5b:a7:3c:b7:ab:ce:05:ac:07:fe:ed:
b7:19:af:40:11:bd:58:bb:d9:e8:ed:71:68:ae:eb:
ec:dd:b8:22:71:e4:dc:12:52:35:51:ba:e8:87:f7:
79:dd:65:40:e5:2e:8e:2c:84:ba:ae:b3:21:20:1e:
00:49:f5:6f:1f:cf:8c:9f:88:75:bb:cc:9a:b4:84:
73:bf:1b:f4:57:f7:1d:b8:44:c3:38:81:e0:b3:95:
91:1e:b6:2f:77:9c:a6:1e:6a:52:65:85:4a:79:0b:
ad:25:71:21:5c:6e:91:3d:b4:44:da:3a:8f:6c:f4:
60:c5:fd:e5:5f:d8:f2:d7:1b:30:bf:91:85:b7:4a:
52:00:74:af:74:86:8a:01:92:5e:b0:bc:2a:45:d3:
a5:65:bb:ec:18:51:d6:e0:06:53:ea:da:bc:e9:00:
31:a7:db:14:95:e2:15:d0:cf:78:9a:8a:e4:df:c0:
87:84:66:a5:21:50:32:9f:47:d7:a3:25:9b:49:90:
9c:02:db:19:8e:a3:a3:3a:07:4c:f1:70:b5:80:e8:
8e:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:D8:E8:A9:7A:9F:93:1E:02:E1:22:14:86:C2:AE:AB:18:4A:17:62
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/P9joqXqfkx4C4SIUhsKuqxhKF2I.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
94:6f:04:e1:87:2d:3b:b7:d5:fd:f5:2c:c0:e7:e2:23:4e:dc:
2f:20:00:55:5c:6c:51:6c:39:30:9e:63:19:37:9a:0d:f0:9b:
5c:20:c9:0a:c6:7d:84:aa:0a:99:f7:37:6d:6a:5f:68:d0:71:
7e:f9:b3:bb:09:ee:48:1c:75:e7:f6:88:70:4c:d0:15:6c:60:
4c:69:92:75:dd:c8:7e:bb:92:bf:b7:70:d1:a3:c8:5a:30:8b:
58:6b:af:91:85:ac:9f:f9:ee:8c:ec:8d:90:73:b0:78:36:e9:
0b:e5:8c:84:04:36:55:3a:0c:8b:5f:a3:29:27:35:5e:75:b6:
d4:75:4d:72:6f:10:55:08:85:d7:59:bf:a4:9e:8a:4c:97:5b:
78:3d:ad:f6:ab:97:53:17:a7:4c:56:85:50:eb:89:1e:fd:41:
6a:53:f8:02:27:2c:22:e5:7f:82:2c:44:75:74:c3:f0:87:22:
1b:e6:6a:72:c1:8b:5d:c3:c3:61:a1:a5:57:cd:fa:ed:83:1b:
15:8e:24:8e:fc:b7:0f:e7:32:61:f6:71:4a:b6:b1:94:d4:72:
4a:79:f2:8d:b0:eb:70:73:05:26:76:f2:18:fc:e7:3a:b7:5a:
78:b2:08:fe:8d:4b:1b:3f:08:63:be:b6:87:f2:db:e8:b2:c8:
b1:94:52:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:54:34 2025 by rpki-client