Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/RsCvxLWF1zPVKHvHWt4HrEzH4As.roa
File: RsCvxLWF1zPVKHvHWt4HrEzH4As.roa (raw, json)
Hash identifier: 912oR7g+QyV0BFlzqUTxCj5BQegwcwtV/AxItkdYtII=
Subject key identifier: 46:C0:AF:C4:B5:85:D7:33:D5:28:7B:C7:5A:DE:07:AC:4C:C7:E0:0B
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 71F2
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/RsCvxLWF1zPVKHvHWt4HrEzH4As.roa
Signing time: Tue 01 Jul 2025 04:18:11 +0000
ROA not before: Tue 01 Jul 2025 04:18:11 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29170 (0x71f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jul 1 04:18:11 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=46C0AFC4B585D733D5287BC75ADE07AC4CC7E00B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:e1:11:3d:82:01:ac:35:2d:65:f5:37:c7:f7:
92:24:a8:b7:30:51:61:e9:4e:3e:47:e6:04:47:f5:
99:e6:0f:7f:83:0b:c8:9c:69:ba:49:11:07:d0:1a:
a1:ee:3b:b9:b6:41:8b:bb:5c:e8:6f:e5:44:b7:ab:
dd:d1:c1:5f:95:f6:90:b3:df:a3:d1:9e:11:14:13:
da:87:60:a9:64:2b:f8:b2:49:a6:49:72:a6:1b:21:
8a:8e:7e:66:99:ac:5e:ff:7c:0a:1b:ca:61:b6:90:
b2:8c:22:1f:47:7d:0a:2c:cb:fb:9b:49:7c:b6:00:
7a:20:9c:b6:3b:64:5b:64:3a:0c:ab:43:5c:d3:c6:
a8:9e:04:c9:15:c1:15:ec:9d:d5:36:3d:da:2a:da:
ba:51:4e:1d:81:b3:a3:7f:97:6b:7f:4a:e4:1f:c2:
03:09:06:9b:5a:77:f1:ec:c1:42:37:7f:62:ff:3e:
b7:3a:72:76:17:11:2e:1e:46:9f:51:db:7c:49:a1:
c6:be:e5:08:9f:89:d7:67:8e:45:db:e1:f6:11:08:
c0:c3:1e:c9:5c:b4:c1:fd:e7:9d:52:30:57:7b:52:
0d:c4:21:01:34:98:60:75:2f:de:9f:5d:d1:b3:ef:
0d:e6:8b:e2:2f:0b:c4:be:53:90:5a:01:c1:8a:40:
cd:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:C0:AF:C4:B5:85:D7:33:D5:28:7B:C7:5A:DE:07:AC:4C:C7:E0:0B
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/RsCvxLWF1zPVKHvHWt4HrEzH4As.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
b4:88:13:3e:1f:33:fe:94:df:30:c8:63:93:e3:2e:77:8b:1c:
08:30:3c:f3:dc:40:0f:5d:31:59:2e:91:64:dd:7a:f7:ca:52:
ef:01:d5:56:92:6a:bc:ef:e7:1f:cb:42:bb:30:85:85:ff:cf:
9d:c1:35:ba:a9:c8:f4:68:ba:50:d0:ae:fa:30:22:d6:f3:96:
0b:b9:64:bf:9e:e6:65:b8:7c:7f:56:00:2b:fe:7f:57:ce:76:
21:a6:eb:7a:c9:ea:78:8a:a0:69:8e:01:ad:1b:4d:d8:9d:7a:
12:ef:ab:60:d2:2a:37:4b:4d:22:02:43:6d:56:33:1e:9f:4f:
f7:0f:cd:7a:25:27:64:47:a2:15:50:5a:16:b3:c6:c7:45:5e:
c1:63:73:59:7d:c7:de:77:05:eb:8e:ff:05:00:ff:a8:7e:e7:
89:ef:29:bf:87:c0:57:be:bd:3c:28:0c:de:5c:58:ed:b8:a0:
aa:5a:fd:23:e6:24:f8:ad:a4:1d:c6:64:20:74:5a:4e:d9:9b:
7a:f8:4a:41:3b:bc:f1:c0:e1:d5:7a:18:01:79:e4:f4:95:5a:
07:54:ca:5b:62:aa:ab:18:ee:1c:bc:55:c8:6f:c1:99:1e:2f:
72:92:67:87:16:00:36:33:10:64:29:98:fa:65:70:b1:71:76:
69:8a:7f:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:55:44 2025 by rpki-client