Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/W_2q2zr5uaLN8jn_07ZvMgHjvDQ.roa
File: W_2q2zr5uaLN8jn_07ZvMgHjvDQ.roa (raw, json)
Hash identifier: 7H2nvarAomceRey9gizOfhjEaK5wIJ9FuWHwdeLb0OA=
Subject key identifier: 5B:FD:AA:DB:3A:F9:B9:A2:CD:F2:39:FF:D3:B6:6F:32:01:E3:BC:34
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 68EC
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/W_2q2zr5uaLN8jn_07ZvMgHjvDQ.roa
Signing time: Fri 06 Jun 2025 21:11:51 +0000
ROA not before: Fri 06 Jun 2025 21:11:51 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26860 (0x68ec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jun 6 21:11:51 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=5BFDAADB3AF9B9A2CDF239FFD3B66F3201E3BC34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:0b:e9:cd:3b:dd:ba:4f:c8:2e:92:06:04:52:
66:87:f3:b7:c1:ed:ee:d0:bb:93:cd:f1:1a:e5:ef:
17:5a:96:2f:a4:00:20:77:81:84:cf:1c:dd:3b:93:
54:b8:c3:27:8c:de:33:d7:7d:1b:47:aa:0e:63:71:
89:d0:c6:91:f4:4f:e7:74:7d:75:a1:ec:46:17:e9:
02:60:4d:0c:0c:50:29:f3:b9:f2:28:69:c3:0b:69:
e0:d2:c3:9d:c6:f9:7a:8a:b7:05:89:be:90:88:f0:
b5:8d:c1:77:b6:41:ce:97:d1:a8:e6:3b:0f:a3:fc:
e5:39:d6:15:cf:ef:4a:59:a6:65:e0:3e:aa:d3:5f:
9d:3e:d7:6b:f8:07:e3:30:c4:b9:fb:43:1d:2e:c3:
8f:60:45:bf:c2:5a:16:c8:2f:2f:72:d1:66:ee:e1:
8d:a8:ef:55:e8:77:23:cc:b5:3b:d9:82:b7:de:27:
01:29:8a:c4:27:0c:04:9f:06:9a:99:bf:39:aa:61:
1c:bb:30:99:b9:ec:00:29:5c:22:4b:3f:ca:37:52:
d4:69:0f:6e:2b:e5:90:6d:3d:6d:82:74:c4:6f:b7:
51:b5:f9:50:4f:86:ba:d0:95:29:87:6f:3f:f2:a7:
5b:01:59:93:fd:90:55:3c:3f:50:e3:87:1e:79:ff:
2c:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:FD:AA:DB:3A:F9:B9:A2:CD:F2:39:FF:D3:B6:6F:32:01:E3:BC:34
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/W_2q2zr5uaLN8jn_07ZvMgHjvDQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
0b:17:92:b5:93:4e:65:73:aa:ab:b8:70:75:69:17:d1:e4:7e:
e6:cf:b1:2d:a2:a8:35:a1:e4:82:41:ac:6b:7d:63:28:02:f3:
f2:8b:5e:82:88:5d:ce:1f:9a:95:82:70:16:7b:43:8c:50:6e:
13:0a:31:0f:d2:d1:b2:69:ff:61:dd:6e:d8:21:ad:a2:25:4b:
52:91:61:4d:4f:f4:eb:70:d5:28:f8:0e:26:28:e1:e2:cd:61:
c3:b8:0f:fa:3e:e9:d2:dc:be:37:57:fa:60:1f:29:be:ea:6c:
7d:45:6b:07:8c:3e:be:9f:87:52:30:84:5c:2d:c6:95:5e:e8:
57:af:34:16:97:8e:f4:9c:25:57:9c:77:9f:5a:14:a4:92:08:
8c:94:2e:20:2a:de:cd:f3:b8:10:53:2a:cd:a3:1d:bf:8b:79:
02:6c:b8:09:32:9a:7b:ce:2f:1f:9e:9b:e6:6c:02:17:a5:30:
97:d1:65:34:10:7e:60:07:4b:d6:71:fe:5f:8b:4d:29:ce:50:
00:5f:5d:dd:59:ef:27:67:30:7a:f0:c9:03:71:bb:03:c8:74:
ab:19:3c:34:7d:4c:ca:e7:b2:cb:1e:46:83:c9:2c:30:09:c3:
b6:e4:b5:5c:e7:af:70:3e:f2:dc:1e:3a:c0:d1:e3:89:32:60:
34:cc:c0:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:49:33 2025 by rpki-client