Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/W7ijcqBPnU9rjw8yJOQ_i5LzeSI.roa
File: W7ijcqBPnU9rjw8yJOQ_i5LzeSI.roa (raw, json)
Hash identifier: HD8cUD+150KUvz3HExWubw/qPDzkw2hJ9UpWP+LxBJE=
Subject key identifier: 5B:B8:A3:72:A0:4F:9D:4F:6B:8F:0F:32:24:E4:3F:8B:92:F3:79:22
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 6E2E
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/W7ijcqBPnU9rjw8yJOQ_i5LzeSI.roa
Signing time: Sat 21 Jun 2025 09:14:18 +0000
ROA not before: Sat 21 Jun 2025 09:14:18 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28206 (0x6e2e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jun 21 09:14:18 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=5BB8A372A04F9D4F6B8F0F3224E43F8B92F37922
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:7e:25:80:b3:34:51:94:f3:de:8b:75:c3:3c:
f7:79:d2:fa:7b:d7:3a:8a:02:97:67:a9:b4:1f:34:
a2:0a:d7:e7:c4:2e:90:06:a4:ba:ef:4d:3a:09:8a:
53:6d:9e:65:3c:1c:01:2e:10:4c:2e:14:57:a6:07:
e6:9f:f5:80:65:51:fe:20:32:7e:6e:b2:9f:58:d5:
50:da:1a:dc:34:21:e1:d4:cc:fd:b4:ea:a0:08:9a:
fc:7e:6c:ba:ec:7d:2c:e9:6f:ac:8b:42:7b:f6:61:
05:8d:80:48:84:89:d1:1e:8a:e4:d7:02:ea:88:07:
fb:d4:e2:d3:24:0e:3b:bb:c5:e2:de:37:35:69:0b:
f1:a9:1d:aa:ec:5f:35:5d:6d:69:a5:22:f1:d4:51:
cc:6b:a0:e0:fc:ff:6d:89:1a:84:06:d5:dc:db:cf:
39:11:68:6f:ee:54:5c:62:94:13:ce:70:b5:9d:13:
6f:41:75:50:cc:2e:7b:c9:f1:cd:8d:0d:69:3e:29:
86:e3:0b:08:83:c8:5a:5e:db:59:2e:8d:41:f5:40:
87:8d:48:c6:c6:bd:cc:55:a2:5c:62:02:df:25:d3:
89:be:81:3a:e9:fb:c9:c1:7d:56:7a:eb:68:c0:22:
94:6d:5b:0a:79:7c:d8:22:e7:37:59:a4:c7:16:e2:
51:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:B8:A3:72:A0:4F:9D:4F:6B:8F:0F:32:24:E4:3F:8B:92:F3:79:22
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/W7ijcqBPnU9rjw8yJOQ_i5LzeSI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
39:4b:e1:1c:78:d9:24:4a:6a:60:ea:1b:9d:74:ff:8a:f6:37:
92:b9:4f:73:af:6c:2d:1c:b2:40:71:50:f7:7f:f4:71:36:47:
9c:2c:3f:10:ea:8e:20:52:66:5d:db:10:00:1e:16:c5:54:85:
13:66:e4:1c:61:66:1c:43:57:dc:6b:35:15:c8:df:c3:0b:f1:
91:dd:cc:4d:37:42:0c:30:fe:e6:68:82:63:55:78:17:4a:96:
f3:e7:8f:bf:de:5b:62:4a:99:78:23:59:d3:69:dc:c4:da:85:
02:14:81:ae:36:5c:48:79:cd:28:d0:6c:b9:4a:80:97:4e:79:
72:c3:f2:86:3e:53:a7:07:31:e4:b2:da:fb:d1:9d:2b:55:40:
14:ff:7c:76:d6:a5:7f:76:df:17:b5:d5:8c:d4:3c:64:25:67:
2c:52:e1:db:ce:da:6b:cd:8a:56:6b:27:65:9e:48:a3:91:5c:
d6:96:4d:6e:a0:54:22:02:a8:3a:cb:b6:de:6c:c3:50:dc:73:
3c:84:e3:ea:b6:6f:26:e4:92:f0:9a:92:09:01:9e:98:91:cb:
bb:0f:a9:c7:f1:44:2c:00:d2:99:27:1f:1f:d6:d2:a9:0b:38:
1a:c3:b0:6c:e1:77:06:1d:43:65:7d:8d:1c:d4:ba:78:e7:16:
37:d7:3a:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:50:47 2025 by rpki-client