Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/QpfGjZ6r01YnITcL9N7YmfYRCp4.roa
File: QpfGjZ6r01YnITcL9N7YmfYRCp4.roa (raw, json)
Hash identifier: NQqw+H1eNdyqLrXMEUGweQlaVhAz3xs/vc50vv1bIpY=
Subject key identifier: 42:97:C6:8D:9E:AB:D3:56:27:21:37:0B:F4:DE:D8:99:F6:11:0A:9E
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 7122
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/QpfGjZ6r01YnITcL9N7YmfYRCp4.roa
Signing time: Sun 29 Jun 2025 00:14:39 +0000
ROA not before: Sun 29 Jun 2025 00:14:39 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28962 (0x7122)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jun 29 00:14:39 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=4297C68D9EABD3562721370BF4DED899F6110A9E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:6b:90:d6:0d:db:1b:81:31:23:f5:85:f7:7f:
54:67:d8:82:b9:26:f3:9f:47:4b:62:4b:61:60:41:
f8:e3:74:a6:cb:58:b3:cd:98:e8:db:e7:5f:83:b3:
1f:df:08:8e:5e:6d:e4:3e:93:2d:09:ed:d1:d5:3f:
71:e7:00:bd:2b:58:77:31:3d:4b:18:39:12:b6:b3:
25:66:1f:b3:d2:c0:ef:07:f4:e6:b4:40:76:5f:83:
42:a8:99:56:e4:9f:fb:09:79:9c:3b:23:d3:29:b9:
74:e9:b8:fa:21:34:9a:dd:f3:d1:6f:52:e8:36:e7:
61:20:b2:ea:c2:bd:33:c4:71:bf:5a:ee:52:95:80:
f8:5a:87:7f:45:e0:5c:19:77:0e:78:05:58:cb:7a:
ea:63:fd:3d:0f:3d:cb:c0:71:79:43:c1:a0:b5:6a:
bf:42:d8:73:82:1e:ff:5b:7f:be:07:22:3b:11:0a:
3b:ed:62:ff:37:38:57:8e:29:f9:06:a2:f7:ba:c4:
a0:0f:73:45:a2:e0:e9:0f:73:94:a5:e6:63:74:24:
83:c8:19:c4:32:87:ce:b8:b9:43:40:35:1e:b6:ec:
ac:7e:36:fa:f2:65:4a:ce:6a:9e:5d:06:64:8e:04:
8d:0f:53:86:59:69:64:86:d3:aa:15:2f:69:c8:3a:
60:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:97:C6:8D:9E:AB:D3:56:27:21:37:0B:F4:DE:D8:99:F6:11:0A:9E
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/QpfGjZ6r01YnITcL9N7YmfYRCp4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
6b:12:e6:ce:9e:b5:77:10:e2:5b:f7:56:d8:35:33:92:cd:c3:
9a:1e:f0:5f:ba:12:fc:95:8c:15:12:44:37:2b:1f:2c:2b:2e:
48:a8:9c:c6:09:72:17:40:ac:0d:16:1c:cb:e8:08:da:12:70:
21:49:e0:1f:ff:05:42:8b:4b:13:3a:c6:fe:f7:44:94:ab:22:
5e:6e:09:2c:66:45:0d:3d:47:54:ee:f4:c4:6e:c8:95:ec:3c:
c3:e9:2d:75:69:27:55:4a:88:04:5c:c5:c5:a1:b5:52:88:23:
39:55:73:a3:0b:4f:ef:db:8f:f5:3d:c9:d0:7e:45:c8:17:c9:
98:76:31:f6:5c:83:14:6a:80:f7:f5:f6:e8:a8:3e:27:21:77:
33:95:5c:5e:9d:65:80:02:8a:ad:86:84:0d:9f:6c:42:13:d4:
13:16:71:1b:cb:b1:f6:4f:04:fc:40:b3:45:54:e6:4b:ee:52:
d0:00:1a:cd:6b:87:69:9b:bd:62:39:b2:59:97:3d:b7:6d:23:
57:29:ca:14:bc:13:5c:00:6b:13:3c:cd:75:2c:a0:94:30:ac:
3f:0e:be:6c:80:10:87:99:ab:c0:6c:4a:51:76:a7:2e:7e:11:
69:03:77:ae:d0:fa:58:a7:e2:de:c6:5f:f3:8c:32:44:fa:72:
c4:48:c3:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:42:01 2025 by rpki-client