Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/WXmGxOToM73tjsws-b_lkeyJLvc.roa
File: WXmGxOToM73tjsws-b_lkeyJLvc.roa (raw, json)
Hash identifier: bH1RvFUwn2SbpyNTjUP/mZJN+CPtBa9ga2xMMMYGKaA=
Subject key identifier: 59:79:86:C4:E4:E8:33:BD:ED:8E:CC:2C:F9:BF:E5:91:EC:89:2E:F7
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 6710
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/WXmGxOToM73tjsws-b_lkeyJLvc.roa
Signing time: Sun 01 Jun 2025 22:12:44 +0000
ROA not before: Sun 01 Jun 2025 22:12:44 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26384 (0x6710)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jun 1 22:12:44 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=597986C4E4E833BDED8ECC2CF9BFE591EC892EF7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b8:db:cd:a0:68:77:5e:ae:1d:1f:09:92:cb:
0f:8c:61:5d:52:29:da:75:6b:12:3b:51:32:b1:65:
6e:74:89:0f:23:7e:d8:f4:1a:a0:08:fa:a6:9d:ca:
41:86:db:ba:df:57:d6:24:cf:fa:fe:38:00:b2:69:
70:5a:42:dc:bc:6e:c9:61:c8:ee:18:22:9d:04:a0:
40:4d:e5:93:7c:e0:c6:20:92:9a:3a:ef:6a:cf:37:
7f:45:3d:4e:84:79:98:3a:45:15:8c:72:06:50:2e:
6b:9b:f2:85:9b:b6:e3:35:c1:b9:07:5b:3d:35:58:
78:19:41:cb:e4:02:73:60:74:d1:bc:5e:e8:08:6e:
95:a4:fa:16:eb:50:fd:4a:54:d1:3c:84:dd:55:70:
2a:72:4a:91:b1:28:a4:5d:a9:14:94:2e:27:15:eb:
be:20:0e:ba:77:be:56:e5:dd:81:77:f5:b8:ff:00:
6b:a5:7d:23:a8:27:7c:37:9a:5d:01:a4:4f:3c:8f:
4f:79:bd:cd:be:05:d0:74:35:63:c5:8f:32:f7:5d:
18:f0:5c:57:49:25:b9:b5:54:12:a8:4f:70:1d:fb:
26:92:82:06:5f:0c:1d:d9:09:44:b5:5a:98:7e:34:
97:2a:2a:77:de:62:3e:71:76:25:3e:ff:47:d1:a8:
62:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:79:86:C4:E4:E8:33:BD:ED:8E:CC:2C:F9:BF:E5:91:EC:89:2E:F7
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/WXmGxOToM73tjsws-b_lkeyJLvc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
31:ad:b7:59:95:31:15:41:0c:bc:47:1a:c6:0b:a3:4b:f9:c9:
64:58:64:60:c2:89:db:58:3f:9a:1b:a8:d3:5a:2b:c9:20:45:
82:f2:49:ec:aa:7d:cf:43:b1:61:da:40:fe:9c:ff:f7:b1:5e:
f2:76:b3:02:28:e7:eb:0d:7b:c7:89:81:9a:a0:dc:7e:fd:55:
83:5a:42:de:50:76:ef:fc:f4:ec:8c:84:dd:ad:3f:3b:c3:61:
3b:a0:55:0b:58:96:e8:c6:60:78:22:75:29:85:88:e1:f6:5e:
1b:72:89:fc:1f:1e:fa:f5:b4:63:19:72:6e:68:29:7c:80:c8:
b6:dd:8a:5d:7e:6b:88:f7:53:bc:8e:32:44:ee:82:1d:e7:e0:
4d:ce:84:c5:e0:58:ba:a4:41:ec:6d:a5:80:28:cb:87:b9:85:
a0:19:57:de:7d:62:06:45:37:22:72:f0:cb:2a:b4:c8:9a:a1:
3c:d6:12:bc:20:3f:13:41:1e:39:c4:5e:db:61:0e:4b:be:c9:
76:0b:0a:bb:81:09:a4:94:e7:0c:2c:f1:9c:16:ce:6d:57:ef:
ef:50:c0:65:d3:0e:dc:00:07:1d:cc:6f:a2:d8:b6:74:98:38:
52:9b:b5:d0:89:ff:99:2f:6d:a6:7a:c0:e3:88:00:dd:76:51:
2a:5f:97:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 00:56:08 2025 by rpki-client