Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/VwvchKayRaoHmMCFf9WM-mBhT_w.roa
File: VwvchKayRaoHmMCFf9WM-mBhT_w.roa (raw, json)
Hash identifier: iBtnCoJiuDXSNsz3RQ/3Da4QZciGbVE707s4K1+Z6To=
Subject key identifier: 57:0B:DC:84:A6:B2:45:AA:07:98:C0:85:7F:D5:8C:FA:60:61:4F:FC
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 7002
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/VwvchKayRaoHmMCFf9WM-mBhT_w.roa
Signing time: Thu 26 Jun 2025 00:14:28 +0000
ROA not before: Thu 26 Jun 2025 00:14:28 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28674 (0x7002)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jun 26 00:14:28 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=570BDC84A6B245AA0798C0857FD58CFA60614FFC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:dc:19:9c:b4:e3:9a:62:9c:f5:f7:3b:79:4b:
5a:db:53:b5:df:fa:3a:4a:46:da:6e:d1:db:f2:e7:
5e:10:87:33:f2:d3:ab:b4:49:d9:81:38:00:ea:70:
62:c7:00:ec:7b:c5:88:d1:f2:29:35:76:10:db:8d:
a4:22:cf:46:a8:67:78:c7:ad:38:0e:c7:b9:33:2c:
27:2d:90:c3:b8:a0:1e:20:cf:1c:ed:da:80:15:13:
df:29:aa:d6:fb:c9:19:12:8d:70:09:9a:9c:51:e9:
ff:57:ec:e3:03:71:76:c9:f1:d8:b7:e2:08:1d:ad:
44:07:78:6a:2a:94:40:17:00:73:80:48:74:9d:b4:
58:31:ce:2e:83:12:b1:fa:36:c0:8a:68:c8:78:cf:
3e:2d:f5:e1:cc:9f:ca:b6:74:cf:2d:ef:47:53:9b:
5f:e9:fe:f6:5f:fc:a7:36:5c:94:fa:bf:f1:92:5e:
69:a9:1e:d3:f2:86:54:c8:94:3f:ca:6d:a8:a5:3f:
e5:c8:a6:69:c7:cf:42:ca:53:0b:91:bd:a1:73:86:
40:ad:0e:2f:9c:f1:d3:89:7e:b9:81:af:c6:6f:69:
4b:5a:3b:2f:a6:ed:75:6e:b7:de:bf:ab:92:2d:1a:
8a:6f:f7:c3:fd:30:91:3f:41:40:26:f9:92:cb:d7:
cf:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:0B:DC:84:A6:B2:45:AA:07:98:C0:85:7F:D5:8C:FA:60:61:4F:FC
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/VwvchKayRaoHmMCFf9WM-mBhT_w.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
b2:ea:8b:da:0b:65:96:f4:5a:40:72:ab:ec:80:1b:02:eb:e4:
48:55:08:99:a9:ed:2f:7d:41:e3:54:c2:42:1d:85:02:a1:89:
23:3d:de:4a:b8:11:f5:8b:f3:bf:be:d8:4b:e3:c4:f9:69:48:
f9:e3:9b:81:7d:f7:27:3f:1b:66:3f:f1:15:98:86:a0:ba:76:
f0:01:a1:ff:8d:85:09:f8:0f:45:7f:4f:72:37:88:4e:62:b3:
6a:c7:90:2a:24:16:3c:5f:c7:e9:1c:f7:0b:46:8b:7f:c8:52:
5f:09:c9:5e:ec:53:f7:f5:a3:4a:7c:99:70:3d:ad:e3:b8:8c:
21:84:13:c6:bf:a7:b8:9f:fd:01:9b:7d:5b:46:3f:66:91:19:
c9:8b:33:5b:53:85:85:bb:3e:79:87:8e:87:a6:df:b9:e8:81:
3a:c4:10:ac:fb:f5:80:f0:a9:69:9b:d3:bd:d1:75:37:fb:4a:
8a:0d:bf:af:37:35:25:02:47:d5:86:28:33:1e:3b:aa:66:b8:
5a:25:15:6d:b8:dc:27:67:b4:e9:09:02:7d:dc:03:bf:0e:37:
2d:e1:69:15:12:c5:3a:c6:fc:99:28:4b:6d:92:64:76:07:f7:
e7:90:3e:08:c6:e4:f1:94:18:49:ef:f7:28:80:9b:00:b4:21:
1e:5c:39:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 16:33:40 2025 by rpki-client