Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/QHsuu1wGN0AjWEzclItS4VTHeNU.roa
File: QHsuu1wGN0AjWEzclItS4VTHeNU.roa (raw, json)
Hash identifier: irLEbq97eY+3+1njqBus46HTb0hjZoVBhHpgl5IndO8=
Subject key identifier: 40:7B:2E:BB:5C:06:37:40:23:58:4C:DC:94:8B:52:E1:54:C7:78:D5
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 7100
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/QHsuu1wGN0AjWEzclItS4VTHeNU.roa
Signing time: Sat 28 Jun 2025 15:44:35 +0000
ROA not before: Sat 28 Jun 2025 15:44:35 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28928 (0x7100)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jun 28 15:44:35 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=407B2EBB5C06374023584CDC948B52E154C778D5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a5:c9:18:4f:aa:09:54:41:ae:82:73:d3:ec:
cf:f9:6f:fc:08:cf:34:9a:cb:93:99:65:30:25:14:
e9:9a:6c:e1:c8:c6:ca:c0:07:79:08:7a:14:0d:10:
7d:80:c0:fc:26:f3:38:76:65:d2:29:da:51:94:94:
dc:1a:36:32:06:ef:70:54:b5:f2:fb:93:7e:2c:2c:
05:89:b8:36:a8:64:26:aa:6c:48:5d:53:12:71:f4:
8c:a1:d4:6a:77:f7:65:dc:ff:2d:e7:6a:21:b4:84:
03:39:70:5f:16:86:71:6b:3e:8f:1f:66:ea:78:94:
f5:51:4b:52:bc:04:75:ca:9e:bd:37:3b:32:8e:01:
f2:bb:f1:25:09:be:5c:12:67:2f:b4:9c:c6:46:ee:
ed:07:d8:ce:37:45:e1:09:aa:20:0a:d4:c4:5c:e0:
78:d5:97:bb:4e:53:39:e8:85:59:78:f9:ea:01:55:
ef:5b:9a:a1:0f:25:79:f5:fc:aa:67:d1:f3:2f:d2:
58:d0:2d:e9:a9:7e:ac:93:6c:08:be:fe:55:8b:4c:
c0:7d:ff:62:cb:97:7d:71:94:5c:17:fb:3f:cd:9a:
75:ac:d0:e2:6b:7d:98:6a:ec:43:55:f7:50:ef:90:
ae:02:62:24:30:9e:55:00:02:e3:f5:8e:6d:06:ac:
65:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:7B:2E:BB:5C:06:37:40:23:58:4C:DC:94:8B:52:E1:54:C7:78:D5
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/QHsuu1wGN0AjWEzclItS4VTHeNU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
11:0e:00:8e:b0:ab:b8:92:9e:ec:eb:2b:aa:d7:eb:e6:9a:f5:
b8:fe:12:93:47:20:2f:81:be:1e:8a:89:2e:d4:c3:9f:f4:ff:
e7:27:54:77:bf:b8:aa:15:90:09:a4:1e:3c:ba:7c:41:ef:43:
a7:85:ea:bb:b1:be:18:69:92:60:0c:14:4f:57:8e:2a:0d:07:
e7:ea:c2:c0:3d:13:f0:37:9a:ee:31:36:86:76:91:20:9b:df:
08:a5:90:4b:9d:9a:31:a8:fc:a5:4c:9d:66:98:19:5c:cb:17:
5e:79:90:f5:fe:14:bd:2a:7a:b9:b2:8c:91:99:b8:bc:4b:1f:
59:01:9a:94:80:88:f5:db:bc:21:1a:fe:30:57:bb:97:b4:64:
a0:92:1b:12:c4:33:8a:26:2b:96:62:2e:83:ed:a8:3a:b0:63:
cf:d4:9b:74:4e:39:dd:00:77:d7:8e:16:f8:d3:39:20:c3:08:
7e:8e:99:b0:de:df:92:19:74:25:0c:36:f8:c2:ac:a6:cd:89:
a1:c7:d4:31:07:17:4e:48:12:53:0c:e2:c1:5e:35:21:66:d2:
a3:de:17:8c:99:7e:75:3c:7c:5a:24:cb:f0:df:0d:64:6b:18:
99:2b:b7:e9:d6:52:f1:6a:ad:a2:45:b7:2f:df:b5:a6:31:cf:
fa:b2:5c:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:40:00 2025 by rpki-client