Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/PRLs7USJK5bsDUZZnWu-XdDqWRc.roa
File: PRLs7USJK5bsDUZZnWu-XdDqWRc.roa (raw, json)
Hash identifier: cEa6HYAY0rolees29Qv84xuwL9Pp0I/tOXWXy/VlqPc=
Subject key identifier: 3D:12:EC:ED:44:89:2B:96:EC:0D:46:59:9D:6B:BE:5D:D0:EA:59:17
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 7752
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/PRLs7USJK5bsDUZZnWu-XdDqWRc.roa
Signing time: Tue 15 Jul 2025 12:42:07 +0000
ROA not before: Tue 15 Jul 2025 12:42:07 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30546 (0x7752)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jul 15 12:42:07 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=3D12ECED44892B96EC0D46599D6BBE5DD0EA5917
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:78:ba:e4:a7:f0:27:d6:ba:f8:2d:6b:1e:f5:
5f:ef:7b:db:c3:76:bf:80:05:34:36:cc:81:85:fc:
38:ef:30:a0:5a:ed:68:ac:b6:bf:80:fc:15:69:9f:
48:15:21:a8:69:c3:a1:37:fe:fb:77:8d:0c:bd:65:
5c:d2:0b:39:1f:c2:e3:4d:61:14:a6:b4:20:91:64:
15:21:4a:3a:33:2e:dd:d0:fd:ff:db:63:60:cd:02:
f7:ac:da:22:ee:9a:27:95:3f:7f:cd:1f:5a:6f:45:
15:af:28:d7:e5:04:ec:67:a2:96:2e:07:60:bb:38:
8c:b6:71:08:68:85:db:aa:aa:1a:21:38:01:e8:13:
82:5f:b3:34:72:2e:6e:d5:a7:1c:3a:d2:c2:bb:90:
1f:c1:44:30:e0:07:19:23:b9:76:15:13:ea:44:3a:
a8:14:85:29:d5:5b:e7:7b:2c:cb:1e:57:e8:76:e5:
12:60:11:d6:6a:e2:da:c4:3a:14:8a:9c:71:1f:21:
19:2c:8f:22:8e:70:7b:c5:0a:3f:53:29:5a:91:53:
fe:1d:39:9d:78:96:37:45:d6:41:f8:7a:16:99:f4:
de:d7:0f:5d:4a:38:38:dc:30:3b:82:88:78:8a:5a:
c6:02:cc:99:dd:0c:62:4d:7a:b9:20:0a:5d:8d:63:
e8:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:12:EC:ED:44:89:2B:96:EC:0D:46:59:9D:6B:BE:5D:D0:EA:59:17
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/PRLs7USJK5bsDUZZnWu-XdDqWRc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
61:f0:7c:38:db:e6:c3:fe:ce:9d:65:47:59:d9:2b:d0:d0:9d:
51:24:01:bc:a8:64:2d:b2:5d:5d:4c:9d:b0:a5:9f:78:e5:48:
eb:24:bd:a0:f5:2a:60:37:79:2f:dd:b7:63:3d:c1:79:27:38:
94:e2:40:15:bd:95:bb:0f:04:cc:b3:58:77:a9:a8:63:fc:c0:
3f:2d:1d:3f:e3:67:c6:88:ab:fb:13:ec:5b:05:52:df:94:c0:
bf:ae:83:1f:16:b0:ba:70:67:c6:a1:30:4d:d9:df:5e:fd:46:
df:6f:af:d1:ff:cb:c1:bb:0e:98:fa:75:e5:69:8c:6e:f1:c2:
10:eb:7e:df:2c:49:b1:5f:8b:1a:98:f7:2f:01:09:65:78:3b:
55:61:e5:49:63:8f:5f:01:fc:10:b6:8d:1f:6a:a8:c6:86:c8:
b8:32:06:ed:3c:67:76:be:ba:04:87:4b:2d:c4:af:36:65:68:
5d:7c:09:3e:6f:9f:e0:45:e4:1e:09:61:94:0a:c3:97:66:4e:
9d:a4:0e:c8:8d:36:cd:60:3b:7a:1c:f4:5f:65:49:36:f5:48:
d7:20:d5:85:03:99:ff:88:d1:53:8e:9e:76:6f:68:de:6a:35:
89:7a:c0:ab:6c:6e:cf:11:b8:ef:cf:d5:6c:c4:fb:ee:2e:81:
d6:53:2b:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:45:32 2025 by rpki-client