Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/QtaDvXLYUW-TFd1h8AZa6eMOHJo.roa
File: QtaDvXLYUW-TFd1h8AZa6eMOHJo.roa (raw, json)
Hash identifier: htdHXf1rQK9AXQ0yHh07tLQGmHOX9JF4NQU8B3Xrf4s=
Subject key identifier: 42:D6:83:BD:72:D8:51:6F:93:15:DD:61:F0:06:5A:E9:E3:0E:1C:9A
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 65CC
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/QtaDvXLYUW-TFd1h8AZa6eMOHJo.roa
Signing time: Thu 29 May 2025 13:11:29 +0000
ROA not before: Thu 29 May 2025 13:11:29 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26060 (0x65cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 29 13:11:29 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=42D683BD72D8516F9315DD61F0065AE9E30E1C9A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:3b:3f:24:a7:0b:8c:c8:43:bc:06:15:29:bf:
3f:58:31:74:ac:98:62:a9:02:70:6e:8d:38:19:da:
df:e0:72:bc:ff:6a:f5:58:e4:7f:ab:71:27:bf:ab:
16:62:30:b9:31:47:39:8d:06:1c:10:ef:f3:66:0d:
77:14:34:5c:81:dd:49:1b:67:4c:72:49:df:c6:63:
32:bd:30:2a:09:e7:ed:34:a2:2a:09:81:cf:14:11:
d1:98:cb:14:73:e8:34:4f:33:27:9b:5d:d9:86:28:
c5:f9:78:d1:a8:7c:f1:6a:e6:e3:17:14:82:00:0b:
6d:0e:80:8e:ee:42:a6:f3:c0:f5:db:9a:2a:a7:99:
a5:65:41:3a:10:87:ae:d7:25:ad:5d:31:c0:b5:97:
61:8f:38:3a:2e:b6:95:67:88:18:79:69:5c:a2:bb:
d1:68:cf:d7:7f:b4:46:31:2c:24:5d:a6:c3:ca:39:
3b:17:2a:85:ba:cd:06:82:4c:ed:7e:67:48:77:4a:
0c:4a:8f:8b:59:0b:11:70:4b:10:6c:41:25:8f:e1:
6e:d1:07:6e:2c:7e:a7:20:b0:36:38:82:b6:34:0a:
49:ec:b4:b4:02:35:63:61:03:5b:47:cd:b3:a3:53:
dc:2a:f2:e6:27:ea:34:2d:bc:cc:98:af:ed:b2:da:
c5:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:D6:83:BD:72:D8:51:6F:93:15:DD:61:F0:06:5A:E9:E3:0E:1C:9A
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/QtaDvXLYUW-TFd1h8AZa6eMOHJo.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
33:e9:8d:08:9e:fe:1a:57:aa:b4:4e:17:e8:5d:b2:8d:9f:c0:
fc:96:7c:32:e6:54:1e:d5:fd:2f:b6:c6:30:12:d1:bd:e9:e0:
c4:a8:59:2d:a4:ff:53:ab:82:d8:21:22:a9:9d:ee:f0:ae:98:
56:2a:fa:8b:6e:76:9d:e5:fa:72:e7:52:0a:52:f8:28:8b:3a:
fc:43:2e:11:66:5d:32:70:50:12:27:71:cd:64:d5:56:68:33:
ed:61:93:6b:de:17:d3:e7:36:12:a2:58:e4:9b:47:fd:82:54:
54:2d:52:82:97:e8:17:b5:b3:f2:70:bb:b3:fa:2a:77:57:7d:
fa:c0:56:69:9e:d5:4c:ef:6d:6a:d8:9e:33:3c:0d:e1:0e:5d:
7b:ae:87:32:58:3f:cf:41:26:cf:09:fe:25:62:a1:f0:6f:99:
4f:1d:29:0f:6f:b0:bd:7a:e3:e7:8e:0e:8a:7f:28:14:35:bf:
fe:48:11:48:d9:c1:0a:d8:a7:27:c9:6a:6d:37:d0:0d:d7:86:
b9:5d:5b:99:79:4f:6b:4b:39:a4:0a:9d:e0:77:c3:51:e7:ba:
f4:48:e4:f4:6f:ee:11:de:f2:b0:98:76:dd:85:9d:bd:9b:ef:
54:dd:a0:ed:fb:2c:cd:46:eb:fa:01:6b:54:13:6e:55:c4:a8:
5b:68:c5:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 20:36:22 2025 by rpki-client