Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/WHXUSVWTANe-fiJ_ZH5mbsJCB7U.roa
File: WHXUSVWTANe-fiJ_ZH5mbsJCB7U.roa (raw, json)
Hash identifier: Fza9fngCEC+2vGjElAz0NuzR+ZVFbqKYIKONrLYXYoU=
Subject key identifier: 58:75:D4:49:55:93:00:D7:BE:7E:22:7F:64:7E:66:6E:C2:42:07:B5
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 6EF0
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/WHXUSVWTANe-fiJ_ZH5mbsJCB7U.roa
Signing time: Mon 23 Jun 2025 09:44:21 +0000
ROA not before: Mon 23 Jun 2025 09:44:21 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28400 (0x6ef0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jun 23 09:44:21 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=5875D449559300D7BE7E227F647E666EC24207B5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:19:31:cb:ff:38:da:2a:ae:d2:f3:ce:7b:ab:
96:38:98:ed:5e:94:b6:f7:70:cd:97:50:b4:f6:ee:
b8:0a:50:9a:c3:b6:d7:85:bf:e6:2d:58:15:56:17:
d2:60:68:22:04:c4:ee:4e:0d:f9:3a:36:1c:a3:1f:
97:02:22:c7:5f:92:15:91:9f:40:6f:30:de:db:11:
b9:60:ea:38:1f:14:8b:27:b3:52:30:62:0b:05:5f:
81:99:d2:12:71:cc:63:29:19:f8:24:60:13:d9:b3:
68:41:40:6c:d2:b0:0e:6d:c2:62:49:4e:e3:e3:ee:
fd:fd:06:0c:67:1e:6c:81:5a:d3:53:16:69:94:f4:
00:57:c7:31:40:cc:96:35:cf:9d:e9:fd:03:a8:d5:
2b:da:c6:c8:7f:c0:00:9f:6e:77:63:76:75:81:d3:
c3:0a:ba:c8:5b:b8:40:67:6f:45:be:e5:32:bf:7d:
c3:5f:30:ba:7c:d3:a4:89:75:9a:99:fc:f4:a3:da:
e3:1e:26:3a:ec:9a:1f:35:f0:44:b0:ca:99:7c:e7:
e8:1f:6f:60:c6:c8:f6:13:33:10:38:f7:2a:b9:c1:
dd:03:ce:2f:82:6b:c1:69:0d:e4:28:a8:db:20:7d:
2f:b2:08:77:24:44:ae:0c:d9:ad:06:d7:34:a7:aa:
e5:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:75:D4:49:55:93:00:D7:BE:7E:22:7F:64:7E:66:6E:C2:42:07:B5
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/WHXUSVWTANe-fiJ_ZH5mbsJCB7U.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
35:df:96:ad:73:fe:ed:f0:11:0a:22:93:de:6b:76:ff:98:57:
98:25:e6:80:c1:52:22:aa:8c:15:d6:14:f6:16:5d:af:81:97:
f2:59:02:93:91:cf:e9:c1:f0:ac:be:4c:f3:4a:96:9c:2a:ac:
30:05:18:36:22:d5:aa:41:fe:56:be:05:ae:6d:91:14:f4:6c:
17:70:5b:39:fa:b0:7c:b5:87:85:0c:8e:9a:0e:8e:97:67:7b:
f3:c3:68:78:8d:11:99:64:e7:98:33:cd:eb:0b:24:e1:6e:c2:
65:93:74:10:6d:fc:5d:9c:0b:7d:63:66:b4:ce:18:a4:c8:b4:
d7:84:1c:24:fd:d3:21:ea:78:f1:0f:fa:e6:83:a9:38:51:8f:
c5:64:f7:07:e1:cd:82:aa:04:8f:6d:2d:30:04:32:bf:70:a6:
b2:d8:b6:01:89:9d:9d:72:ce:72:07:be:7e:26:07:c7:4d:ef:
7f:6f:44:aa:f2:8f:b9:3e:08:fb:0e:b7:57:af:8d:bf:47:12:
32:23:f5:1a:9c:d1:99:40:72:20:6e:a7:35:0a:3e:41:b9:83:
1a:6c:ec:16:c3:fc:10:d2:b2:64:4b:14:f8:2e:53:af:e0:13:
3a:15:c4:8f:32:fe:f4:b4:40:16:52:16:41:53:f6:94:8d:ae:
f2:a6:f4:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:44:14 2025 by rpki-client