Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/VGRM6DhCc9_-EZ0dV5K_QMIeXC0.roa
File: VGRM6DhCc9_-EZ0dV5K_QMIeXC0.roa (raw, json)
Hash identifier: Nr6/WEZ0Xd1qv0vRG3GSnObYBiV0mIGmiIfm61dzXaw=
Subject key identifier: 54:64:4C:E8:38:42:73:DF:FE:11:9D:1D:57:92:BF:40:C2:1E:5C:2D
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 78AE
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/VGRM6DhCc9_-EZ0dV5K_QMIeXC0.roa
Signing time: Sat 19 Jul 2025 03:43:38 +0000
ROA not before: Sat 19 Jul 2025 03:43:38 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30894 (0x78ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jul 19 03:43:38 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=54644CE8384273DFFE119D1D5792BF40C21E5C2D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:41:fe:f1:d8:27:45:af:70:b5:1c:18:3d:a3:
81:93:7b:b2:41:fe:d8:01:84:c8:6a:1b:c6:87:d6:
bc:d4:5c:15:a2:3f:bc:30:e3:ff:29:1b:84:f2:d6:
de:62:85:4c:b5:6d:65:a1:73:71:de:31:55:10:69:
4d:75:96:ed:61:62:1c:ed:10:3a:78:e5:b3:0c:2d:
40:3f:df:31:1b:38:8c:ee:59:be:e9:aa:d4:36:61:
ef:44:04:18:cf:b6:40:81:ca:8b:8f:4f:ec:6d:27:
64:1a:0d:63:67:b3:a3:70:ef:06:03:3c:b4:3d:f7:
00:12:7a:c9:04:4e:b6:29:94:e3:3c:1a:d1:ce:1f:
15:72:ca:ae:fe:c8:b8:50:27:e1:01:c8:87:04:fb:
5e:65:d8:6c:49:9e:1f:48:cf:fd:3d:0b:8e:b8:92:
7f:8b:1c:bd:9c:e4:fb:29:c4:78:80:4d:55:98:64:
02:35:d4:af:51:7d:13:af:3a:1c:3d:04:70:5e:bb:
02:23:bf:cd:2c:05:ce:e5:d8:a4:df:80:b8:a1:39:
1f:b3:c7:b0:38:38:4d:cf:8b:29:73:66:76:ed:a6:
08:09:d8:3d:d1:f1:20:ef:bc:15:34:16:b7:87:b4:
d4:be:cd:3c:d7:92:99:01:1a:f2:6f:98:fd:fe:0d:
71:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:64:4C:E8:38:42:73:DF:FE:11:9D:1D:57:92:BF:40:C2:1E:5C:2D
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/VGRM6DhCc9_-EZ0dV5K_QMIeXC0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
75:32:f7:5b:29:a2:d3:62:23:41:e0:db:57:cd:e9:5f:b2:19:
bd:7c:a5:32:52:b5:f7:63:8e:f1:9e:cb:46:9c:dc:67:08:b1:
ff:f0:71:86:e3:ba:08:4f:69:fc:e6:8b:1b:56:32:04:82:a0:
e5:ab:1c:29:6a:69:ce:56:80:36:7c:83:df:a5:57:c0:d1:bb:
01:ea:ff:d4:f5:8e:53:76:07:37:82:4f:4d:b1:26:7d:17:02:
40:92:c3:c7:2e:1c:1b:a0:f6:05:75:36:49:b0:18:ca:ce:31:
ca:c0:33:e2:ea:a6:00:fd:16:f3:7f:4b:28:87:80:c1:0a:33:
5a:bc:f1:b4:e3:6e:7a:c3:22:3d:79:41:51:78:af:a5:0b:89:
39:28:6f:7d:d5:a8:7e:5f:d4:7c:60:ab:61:7d:5d:f6:55:cb:
cb:fd:a7:91:49:51:5c:23:c2:94:95:8f:c7:dd:65:31:a5:67:
f0:94:ea:13:07:ea:bb:35:11:4e:dc:32:ba:bf:da:2d:ae:91:
f3:4b:b1:a7:f5:2e:7e:c5:d8:4e:e1:07:47:8e:7e:d6:a5:9d:
4a:25:78:5b:f8:0c:88:02:c3:9f:75:00:74:75:00:d6:85:cc:
d6:34:4e:ec:ac:e9:f4:76:76:94:3d:79:0c:69:14:d7:f6:04:
e0:d5:57:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 16:33:45 2025 by rpki-client