Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/WYl8M7V0bej_pwDFURxkYsUTNDU.roa
File: WYl8M7V0bej_pwDFURxkYsUTNDU.roa (raw, json)
Hash identifier: EoWRDdAy4OkjK5UU/bjDR6QAr2OPddf0bvw0Xw5ApZQ=
Subject key identifier: 59:89:7C:33:B5:74:6D:E8:FF:A7:00:C5:51:1C:64:62:C5:13:34:35
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 7716
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/WYl8M7V0bej_pwDFURxkYsUTNDU.roa
Signing time: Mon 14 Jul 2025 21:42:01 +0000
ROA not before: Mon 14 Jul 2025 21:42:01 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30486 (0x7716)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jul 14 21:42:01 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=59897C33B5746DE8FFA700C5511C6462C5133435
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b5:ea:e5:cc:e6:87:29:05:91:db:b1:f1:58:
ea:17:c8:3a:b3:02:c9:64:63:ba:3b:73:05:72:80:
06:f0:83:a4:d2:7b:91:bd:2b:92:56:03:ef:a0:15:
38:90:0d:f1:44:13:7b:93:b5:86:6e:d3:46:5c:27:
ee:a5:18:0e:6c:61:d8:f9:95:ee:51:a7:81:9e:9b:
b5:4b:c2:1c:42:ac:7a:23:6a:ee:11:e6:49:0f:52:
65:2e:5d:c5:61:57:d9:b4:77:5d:6f:e4:0a:40:a7:
7a:8e:28:e5:c3:ff:5e:57:6b:c5:b9:1d:90:28:52:
cc:01:02:60:cd:3e:b4:5c:09:c4:22:bd:63:83:74:
5f:3a:e3:34:1d:34:b5:bc:cd:4c:19:13:cf:85:08:
36:3a:73:39:05:5b:99:df:6d:43:73:92:d3:b7:66:
e0:01:08:ee:17:3e:f7:32:aa:8a:65:b1:c9:7f:58:
cf:05:73:e8:8f:fa:88:59:80:ff:77:42:16:26:8d:
af:a2:70:4c:04:82:e1:dc:3b:91:ac:45:da:72:bc:
19:af:42:4e:2e:0f:a5:b4:b2:e9:0f:a9:89:82:13:
b1:bf:a3:95:61:6f:e6:eb:c1:7b:b9:31:03:55:90:
3a:4d:f9:53:c0:9f:19:bb:62:ad:12:9e:1f:90:24:
ec:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:89:7C:33:B5:74:6D:E8:FF:A7:00:C5:51:1C:64:62:C5:13:34:35
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/WYl8M7V0bej_pwDFURxkYsUTNDU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
89:47:26:c0:3d:c5:ac:d6:10:55:d4:83:c6:8a:f7:06:46:0f:
6f:b0:1b:bf:5d:fc:d2:3d:8f:3f:81:20:77:15:c7:c7:61:f4:
71:d7:2b:b7:ab:0a:af:03:a3:1e:4a:e7:2d:07:a2:ff:c2:3d:
d5:3a:96:65:47:9b:a0:63:af:11:3b:24:18:3b:37:c7:a3:46:
33:e2:cb:29:3b:0e:44:ee:e6:e2:71:61:13:22:32:3d:bd:d2:
fa:07:b7:15:26:80:8e:cb:37:af:7b:bf:65:da:85:87:4c:b9:
c4:bc:71:74:82:e2:8f:1a:6a:7b:10:48:3d:f2:1a:27:0a:3b:
16:84:29:3e:e0:ee:e7:09:d7:ac:ef:79:16:6d:5f:00:71:5f:
97:3f:e7:34:fc:79:9a:4d:58:3f:74:53:e9:31:9b:7e:26:63:
ca:b5:87:35:a4:5d:22:d9:e9:f4:2c:68:a1:bd:67:cd:c1:5c:
ec:32:e3:65:d1:b3:1b:79:5b:66:dd:aa:28:c2:71:79:e3:d6:
2a:1c:1a:8c:c9:c8:1c:18:3c:7d:dd:d5:41:e6:d3:d7:b3:e2:
f3:71:a3:44:50:30:d7:d0:05:41:b4:6e:b1:69:74:89:cd:99:
30:80:41:47:1f:d9:4b:c0:fe:0e:8b:f2:fd:2b:c2:9c:d2:85:
a7:93:5f:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 21:20:48 2025 by rpki-client