Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/WuDbyd-GrtvYwccOtt88bVinltM.roa
File: WuDbyd-GrtvYwccOtt88bVinltM.roa (raw, json)
Hash identifier: 4u1rmHeaUSFJiWvypHu3EKmE7b2rFJgcpZLQJNsF46I=
Subject key identifier: 5A:E0:DB:C9:DF:86:AE:DB:D8:C1:C7:0E:B6:DF:3C:6D:58:A7:96:D3
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 6CA2
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/WuDbyd-GrtvYwccOtt88bVinltM.roa
Signing time: Mon 16 Jun 2025 18:42:22 +0000
ROA not before: Mon 16 Jun 2025 18:42:22 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27810 (0x6ca2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jun 16 18:42:22 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=5AE0DBC9DF86AEDBD8C1C70EB6DF3C6D58A796D3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ff:0a:cb:01:32:a3:ea:8b:ff:11:67:5d:eb:
ff:4e:50:6d:0a:be:ba:3f:b2:31:cb:2b:d4:56:5e:
37:e8:a9:61:29:fb:e2:5b:fe:3d:d5:f9:e2:0d:a9:
08:9c:b7:da:85:88:e8:33:07:1b:c4:2c:02:3e:67:
18:a4:ae:79:b6:12:4b:b3:ac:5a:39:65:c1:12:ee:
60:81:00:ac:0e:87:50:9a:56:49:0d:75:05:5a:0a:
ed:9d:f4:57:fd:a9:34:bd:f5:61:7b:56:69:b7:48:
9e:72:52:a1:66:b1:98:9e:f9:ec:6a:18:9d:56:ce:
fa:3b:a4:67:bd:9e:77:e6:b2:8e:ec:be:ae:ad:bc:
52:a0:70:92:da:2b:be:60:30:09:04:df:00:70:14:
4a:b4:71:5f:12:99:b9:7b:97:9c:d5:a5:03:f7:02:
01:20:fd:70:ee:3e:48:4b:24:e3:0b:54:1e:a4:11:
c2:b3:cc:61:e1:60:85:de:87:2d:94:36:89:7d:2a:
ab:61:43:b0:b3:67:6a:5b:f3:5a:88:c1:7e:c8:ad:
10:67:7b:42:cc:ef:eb:f2:0e:61:89:48:50:2d:57:
87:c8:62:c8:c3:e0:97:14:e9:9c:75:34:09:cb:19:
ba:a4:6a:ae:37:2d:48:8a:ec:13:00:9d:c5:f2:ec:
be:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:E0:DB:C9:DF:86:AE:DB:D8:C1:C7:0E:B6:DF:3C:6D:58:A7:96:D3
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/WuDbyd-GrtvYwccOtt88bVinltM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
a3:5a:eb:11:06:7f:a5:8b:97:05:9a:c0:23:6c:8f:53:bb:b0:
9d:06:93:64:6f:06:5d:71:52:6e:55:6d:4f:b1:2b:90:97:1c:
1c:ab:de:75:3c:12:c8:3c:0e:8a:aa:87:1a:66:39:8b:3d:3b:
0a:27:9d:4f:d7:b5:e5:d3:a8:13:83:95:21:c4:2e:58:7b:0e:
68:7f:f9:b6:7c:dd:58:1a:65:51:46:80:42:85:69:86:37:ec:
d8:0b:25:53:91:6c:10:68:37:b7:fa:ee:1c:ac:b7:bc:b4:7a:
4b:46:f6:57:f5:5d:cd:dc:0c:6f:71:07:00:83:eb:35:2e:96:
be:3c:33:b5:04:32:cf:23:11:52:d1:7d:27:10:b8:83:c0:6b:
54:2e:b2:69:06:5d:ba:9a:83:bb:75:70:1b:cb:43:dc:2f:8f:
5e:cf:42:4c:06:6c:4e:16:5c:5d:2c:2b:c6:b2:9d:c6:36:13:
ea:95:db:c6:f0:25:82:86:4d:3f:40:9f:0e:4d:24:d4:91:13:
99:b9:bb:dc:c1:e2:ce:c4:34:c0:42:db:1d:d9:7f:41:b4:61:
ca:ed:43:fc:57:5d:ef:2b:95:1e:77:b5:38:44:c6:82:11:e0:
e0:48:94:94:b2:55:15:d8:c7:61:1a:72:d4:c0:e5:36:5b:e4:
7b:d0:7e:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:50:24 2025 by rpki-client