Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/S-Ix4QbxeHy6c6GEF5qsWfoJJBc.roa
File: S-Ix4QbxeHy6c6GEF5qsWfoJJBc.roa (raw, json)
Hash identifier: 8AT2KqA2siB8Oxv3Eu5lm77yzMn3YCq2tUxRDaxR2UY=
Subject key identifier: 4B:E2:31:E1:06:F1:78:7C:BA:73:A1:84:17:9A:AC:59:FA:09:24:17
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 6ECC
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/S-Ix4QbxeHy6c6GEF5qsWfoJJBc.roa
Signing time: Mon 23 Jun 2025 00:44:23 +0000
ROA not before: Mon 23 Jun 2025 00:44:23 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28364 (0x6ecc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jun 23 00:44:23 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=4BE231E106F1787CBA73A184179AAC59FA092417
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:6d:3a:d8:a6:06:97:83:ea:e0:3a:d0:82:93:
16:f2:fd:88:dc:0f:91:0b:34:4f:69:fe:a7:b0:5e:
fb:9a:0f:08:26:c3:7c:1a:cf:b6:39:e9:0d:05:33:
07:3b:25:ae:d7:e9:be:5a:66:15:74:ee:d4:42:d2:
e0:c1:b3:44:f3:a9:91:05:c8:ea:aa:30:41:6f:29:
38:5f:3b:42:7d:61:15:e8:77:e3:e2:92:5b:7e:67:
f1:de:12:b3:55:7a:43:cf:f9:27:b3:fe:1c:8d:27:
55:82:f3:fb:67:28:fd:ad:eb:0e:68:5e:89:04:80:
04:73:be:b4:46:cd:d7:59:1c:e9:ad:46:04:75:3d:
f5:24:99:6b:e7:54:c2:3a:0b:70:e6:48:c9:8e:03:
41:9e:61:c3:34:5f:e1:a7:b5:f3:6b:7b:6d:4e:10:
5f:fd:b0:9e:c5:4d:8a:a9:4b:07:81:f0:c3:2c:54:
66:86:cd:5c:b4:45:24:c4:a2:b5:13:d0:55:88:57:
0f:2e:0e:56:9f:d7:57:0e:59:00:c9:3c:10:89:04:
14:a2:d0:9f:32:ad:88:9f:30:70:ec:bb:90:04:8f:
c5:c2:50:87:9c:1c:6e:c0:31:9b:df:1e:97:dc:95:
b6:0a:91:30:df:bc:90:5e:16:c5:e7:13:ed:50:eb:
9c:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:E2:31:E1:06:F1:78:7C:BA:73:A1:84:17:9A:AC:59:FA:09:24:17
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/S-Ix4QbxeHy6c6GEF5qsWfoJJBc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
81:d7:cc:82:27:40:e9:61:df:30:b6:3e:d4:15:6f:f3:21:55:
90:97:07:93:a1:11:93:2b:fc:dd:ab:c6:f9:dd:43:ab:94:2a:
4c:7a:9b:23:10:a2:d3:92:d3:d5:ae:cd:78:8c:62:01:48:21:
84:cf:c3:7f:88:62:2d:d2:8d:1e:8e:d4:1d:18:1a:b3:7f:e9:
d4:c0:39:2f:81:0c:0f:64:3f:f2:42:5b:1a:6c:d2:3b:1f:22:
af:8c:95:c8:a1:b0:41:56:f9:0c:e8:70:96:1f:ae:a3:76:5f:
a9:61:08:ed:32:4d:c7:8d:d6:e3:dd:04:46:43:22:a8:2f:5c:
e7:38:7f:85:d9:c0:ea:f6:f2:63:4f:65:ec:ce:c3:04:1a:89:
e6:d7:4a:83:8a:ad:5e:a9:f0:68:95:f5:b8:4e:61:ca:2f:05:
44:ee:2f:e8:19:ae:8e:db:6c:f8:f0:35:f9:63:12:15:a3:9c:
cd:d0:13:de:30:90:08:bd:8a:af:45:33:a6:8d:50:e6:9f:f3:
cc:aa:de:90:33:67:fb:fb:a9:f0:bb:7f:74:72:b4:cd:04:8e:
8c:43:f2:e8:23:1d:72:05:43:ab:68:2a:47:c7:80:7c:98:8f:
de:82:87:be:ce:af:e6:c5:85:ef:ca:61:b7:06:d1:7a:2c:55:
56:18:a9:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:44:20 2025 by rpki-client