Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/WPiCrpfyGW3zlyRaBgWlwvzGLDI.roa
File: WPiCrpfyGW3zlyRaBgWlwvzGLDI.roa (raw, json)
Hash identifier: aKyuKAAjshHvgz+FH3a4YVQAHIVAwBz8QhDwnrhF1Fo=
Subject key identifier: 58:F8:82:AE:97:F2:19:6D:F3:97:24:5A:06:05:A5:C2:FC:C6:2C:32
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 76DA
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/WPiCrpfyGW3zlyRaBgWlwvzGLDI.roa
Signing time: Mon 14 Jul 2025 06:41:49 +0000
ROA not before: Mon 14 Jul 2025 06:41:49 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30426 (0x76da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jul 14 06:41:49 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=58F882AE97F2196DF397245A0605A5C2FCC62C32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ca:78:c8:68:3f:8c:d3:e7:fb:ff:a3:63:8b:
64:bd:0b:48:7a:f1:89:82:a3:86:72:50:56:10:c2:
4e:c2:07:4a:f3:c0:d3:e6:1c:86:ff:16:b8:06:c9:
ed:82:d5:3a:a8:7e:a3:fc:21:4c:9d:89:23:d8:6d:
8e:b9:07:80:e9:fd:37:91:67:9a:54:16:d0:cb:55:
94:e1:69:ba:d1:a3:b5:b6:cd:97:8a:4c:b1:4b:d9:
3a:b5:fd:c8:24:e6:f5:ef:f6:60:fb:27:5d:57:76:
8a:46:1e:99:55:f6:ef:c7:13:2d:35:48:51:eb:2a:
8b:79:ee:18:6b:c9:36:b8:a7:7c:55:ba:e2:16:66:
65:80:06:5e:05:2d:56:f3:9c:d7:9e:80:41:c5:c6:
67:3a:fb:3e:5d:b2:e9:68:15:95:1a:1f:6f:09:f0:
e2:59:9e:d9:29:e0:65:82:2c:53:95:a1:98:97:98:
6e:db:5d:9a:d4:d0:70:44:f9:6b:bb:db:09:9e:76:
31:1b:08:57:bb:a4:51:31:f3:95:8c:f4:e9:40:81:
ef:f8:a7:3e:22:c8:73:c1:8e:21:7b:78:19:bb:78:
f3:fd:4d:98:66:59:a7:1b:07:a7:88:52:44:fd:a9:
5f:ff:51:9d:15:9d:45:69:51:89:4b:36:c7:3d:06:
54:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:F8:82:AE:97:F2:19:6D:F3:97:24:5A:06:05:A5:C2:FC:C6:2C:32
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/WPiCrpfyGW3zlyRaBgWlwvzGLDI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
5b:1b:54:04:f1:ad:8c:61:70:e8:36:93:b9:b1:0b:1f:50:6f:
b1:43:72:7f:60:4a:1e:ad:fe:e4:9c:cd:9d:b0:26:a8:6d:46:
95:7b:e2:18:d0:e0:b2:f7:f8:ed:17:d6:0e:25:dc:8d:b9:76:
0f:40:d3:45:6e:b2:ad:89:1c:78:2d:1a:e5:a1:20:f7:0e:af:
78:8a:75:14:82:b8:cd:dd:3f:51:a3:82:47:d1:e8:cd:cb:e7:
f8:82:f1:94:82:10:25:cf:1b:01:ef:a8:1e:43:84:5b:1b:af:
e6:42:a4:a3:eb:e4:ac:48:a3:1f:7c:35:8c:d2:e7:ff:c4:d0:
d5:aa:29:dc:cf:b5:1a:aa:d5:aa:f1:0b:6c:8f:a5:8c:16:c9:
f6:2c:9c:a5:b3:25:4d:20:3d:77:ea:45:71:a9:fc:8a:e3:f8:
3d:f8:8d:ab:30:3b:41:63:8d:d7:08:3c:1d:37:71:28:4f:f5:
a1:70:4c:e5:e6:45:e2:d2:5e:49:73:af:46:84:60:9f:bc:98:
16:a5:60:79:13:a7:62:1d:95:af:91:c2:22:18:6c:0d:5e:23:
7b:bb:8c:17:0f:e5:ae:87:63:3e:82:1d:16:bd:3b:1d:d2:80:
eb:a2:13:c2:e1:e0:59:ed:2d:74:72:64:cd:22:54:15:67:da:
d2:32:df:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:49:32 2025 by rpki-client