Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/WC8ytX6OtgnfRBP_6nfkV2S_wAI.roa
File: WC8ytX6OtgnfRBP_6nfkV2S_wAI.roa (raw, json)
Hash identifier: InwUlAFYcDHHz0fBRXL+ynJBlcE98FaHJxWxOigHqzk=
Subject key identifier: 58:2F:32:B5:7E:8E:B6:09:DF:44:13:FF:EA:77:E4:57:64:BF:C0:02
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 6F2C
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/WC8ytX6OtgnfRBP_6nfkV2S_wAI.roa
Signing time: Tue 24 Jun 2025 00:44:20 +0000
ROA not before: Tue 24 Jun 2025 00:44:20 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28460 (0x6f2c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jun 24 00:44:20 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=582F32B57E8EB609DF4413FFEA77E45764BFC002
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:4e:55:1b:d6:8b:0d:03:16:ed:84:27:8d:60:
fd:c2:e0:76:ed:da:1b:9f:38:fc:2f:20:ec:ce:49:
63:f5:d1:ff:c2:0e:7e:27:c5:ce:24:41:5a:98:ad:
bd:83:aa:f6:ac:c2:36:92:5d:d2:59:3f:55:d8:8d:
63:15:22:aa:a3:7b:88:0e:fe:1a:b4:a1:b3:a8:b5:
46:b1:36:17:df:b3:6b:be:8d:da:65:4d:52:ee:f2:
fd:5f:11:7c:2a:04:4d:76:fc:b2:66:0c:1b:8e:03:
7f:3f:fb:a1:3e:ad:d5:ab:35:d8:b7:6a:5e:a3:b2:
cc:35:d3:bd:d6:82:3e:87:04:1a:c3:f3:58:aa:e2:
4d:c5:44:5d:6d:51:09:52:bb:01:88:3f:51:b0:f9:
d0:5a:32:63:cc:7a:a9:4c:db:f1:e1:32:bb:08:ca:
f8:f1:d0:79:1a:03:c7:1d:cb:09:53:aa:c3:8a:5a:
0a:93:ba:17:60:a4:6a:b9:65:36:78:f6:55:ae:67:
8e:48:95:f2:3d:bc:1b:95:23:99:24:4f:75:0a:34:
2f:1c:63:a4:70:76:ed:38:72:ae:13:7e:0f:11:8a:
b8:63:e5:e8:79:91:f9:50:5c:1a:7f:1f:5d:3c:1f:
e8:3e:0f:f4:6d:e3:34:ef:13:a5:09:1d:35:8f:f1:
3a:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:2F:32:B5:7E:8E:B6:09:DF:44:13:FF:EA:77:E4:57:64:BF:C0:02
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/WC8ytX6OtgnfRBP_6nfkV2S_wAI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
72:02:43:6e:e4:d0:a4:01:8c:a3:d1:13:aa:08:d3:45:b9:6c:
a3:c7:f3:3e:7a:0d:96:36:98:51:39:9d:23:4c:07:50:d4:c7:
d7:5c:af:ce:1c:a8:aa:7e:e9:9d:42:6f:df:24:ed:93:f9:ff:
e1:8f:39:e2:da:04:ac:93:10:cd:20:44:25:57:95:d7:07:87:
a3:8a:5b:46:61:da:cb:4c:52:11:ce:65:aa:47:0a:52:e0:04:
df:0e:69:be:9d:25:df:00:2d:76:8f:97:a1:78:21:1e:2e:d0:
3e:e6:ac:b7:55:b9:0a:3d:4c:c9:3f:bc:e5:d6:bf:94:65:d4:
fe:c7:16:98:22:2e:7c:f7:11:36:55:89:b2:0a:28:45:ee:ed:
67:5f:ca:ec:b4:58:38:0e:56:77:21:d9:b1:80:ed:5e:da:1a:
8f:a6:f1:88:55:a6:e9:b8:22:ab:e1:5e:f7:e3:38:c0:59:ba:
6c:ca:6f:d3:29:05:0c:f3:83:41:35:9c:c1:a5:b8:2d:f0:54:
cc:fb:cc:d7:19:1f:9e:df:72:35:17:7b:00:c2:8f:1e:e0:c8:
a6:4c:86:66:28:e2:7c:8a:ab:94:6d:a9:6e:fd:24:c7:87:0f:
e7:b1:a6:c4:df:df:2a:03:50:d6:fd:f0:bb:ec:d7:14:41:aa:
68:07:a6:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:46:39 2025 by rpki-client