Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/Vgf5W-8XZwfMIxjzdwmlXb8Qazk.roa
File: Vgf5W-8XZwfMIxjzdwmlXb8Qazk.roa (raw, json)
Hash identifier: rgGucpUAjSjJ1NohlHJmTqY9EzrjO8F1nIL6TQhNR94=
Subject key identifier: 56:07:F9:5B:EF:17:67:07:CC:23:18:F3:77:09:A5:5D:BF:10:6B:39
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 6E0A
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/Vgf5W-8XZwfMIxjzdwmlXb8Qazk.roa
Signing time: Sat 21 Jun 2025 00:14:14 +0000
ROA not before: Sat 21 Jun 2025 00:14:14 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28170 (0x6e0a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jun 21 00:14:14 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=5607F95BEF176707CC2318F37709A55DBF106B39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e5:9d:d1:54:49:bf:cb:0e:0a:f9:11:84:b3:
44:25:cc:6c:dd:6b:64:c9:fc:b2:fc:ae:a4:0c:25:
a9:69:f9:ed:0a:5f:40:ac:30:47:89:b9:01:91:ac:
71:1d:32:e5:9b:46:ab:a0:16:9d:3b:7e:e4:e4:84:
e0:97:a3:2c:6a:30:ef:d2:22:c3:e4:ad:fd:e3:ad:
f9:f9:c4:20:6e:60:46:8b:3b:d1:ae:c4:4d:d4:40:
87:9c:16:90:a5:88:6f:3f:6c:4a:7d:89:ea:bf:f3:
79:ff:f4:a7:97:16:7a:01:05:08:2d:6a:e1:f0:d9:
e7:e4:97:2a:97:b2:b2:28:96:14:d7:de:18:08:ab:
68:92:36:6e:ba:17:d2:b8:8a:4f:c0:5c:c8:2f:e1:
f6:ce:7c:56:6f:df:97:dd:7f:b7:27:9f:b1:90:24:
e7:fe:ae:a4:a0:b9:d1:f5:e2:93:14:e7:6c:b2:36:
a7:37:2b:fe:4e:3d:4d:36:0d:3c:e4:d4:ec:b9:0f:
7b:a5:15:ac:2a:f6:93:ba:05:18:47:72:64:62:7d:
d5:ec:8c:c5:0c:e6:8b:6a:32:46:58:52:83:27:f9:
b0:d8:e0:ed:d5:7e:02:6d:0e:ea:b7:df:52:93:83:
ae:0c:46:5e:aa:72:a2:b8:d0:72:80:ca:e3:25:4d:
12:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:07:F9:5B:EF:17:67:07:CC:23:18:F3:77:09:A5:5D:BF:10:6B:39
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/Vgf5W-8XZwfMIxjzdwmlXb8Qazk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
50:89:67:6d:84:55:0d:12:2e:67:6c:68:5b:30:29:bc:8a:c9:
95:aa:c2:22:fc:f5:13:05:99:76:6c:b1:c3:23:f2:22:59:62:
0b:33:ef:b8:03:ce:f0:11:95:82:c6:a4:1b:7f:01:81:f3:7f:
61:c1:7d:a6:8b:40:dc:b9:58:51:de:09:10:b0:5f:42:f1:f5:
1c:ed:24:ac:98:46:7c:a8:a6:ef:f3:0d:a5:70:e3:a3:44:77:
8b:78:62:7e:c2:76:85:b0:c1:98:c7:9c:5c:0e:31:58:ce:e6:
19:e3:a2:e4:1f:62:66:4b:b5:51:1e:e5:4e:53:3d:d6:1a:fd:
90:60:45:bc:e2:53:95:5e:2e:7c:77:bf:9f:7d:2e:cc:2b:e2:
a3:d6:0a:bf:46:dc:b7:67:d1:34:5d:e8:00:c4:ca:ac:47:f8:
ea:63:e7:d1:7f:be:50:50:51:1d:34:94:dc:3c:4f:a1:d9:0f:
6f:64:12:4c:cc:42:92:b2:4a:56:34:e1:bc:e5:ad:c5:80:e5:
53:97:0e:b9:ed:2b:73:e2:98:c1:ec:22:38:0c:a5:26:28:dc:
c5:59:c8:27:10:a2:4d:20:c8:84:b4:a3:39:e5:7d:e3:07:86:
81:32:c7:b1:41:c0:b7:7f:f0:9c:76:bb:d0:68:26:ac:40:52:
c0:a1:11:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:45:48 2025 by rpki-client