Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/ZHHQcuZBnT7YZAwasYc4Ja0DpjY.roa
File: ZHHQcuZBnT7YZAwasYc4Ja0DpjY.roa (raw, json)
Hash identifier: Jq1T4k0RjmfF9hX1feRgGCk/Cbcg9xTZ/jQmIbhZvJk=
Subject key identifier: 64:71:D0:72:E6:41:9D:3E:D8:64:0C:1A:B1:87:38:25:AD:03:A6:36
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 7778
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/ZHHQcuZBnT7YZAwasYc4Ja0DpjY.roa
Signing time: Tue 15 Jul 2025 22:11:53 +0000
ROA not before: Tue 15 Jul 2025 22:11:53 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30584 (0x7778)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jul 15 22:11:53 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=6471D072E6419D3ED8640C1AB1873825AD03A636
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:b7:aa:58:6f:d9:c5:ef:8a:c5:f4:2b:b5:71:
fe:01:17:04:fc:3f:e5:03:97:13:de:83:e2:14:d1:
c8:11:1f:f6:e5:93:1f:7d:c9:38:46:55:30:28:02:
bb:b9:66:7a:95:69:16:0e:79:84:85:92:54:fd:57:
9f:7d:6e:e9:73:e0:86:75:30:2c:e2:94:24:19:53:
e7:f5:0d:0c:e4:5e:f7:78:6a:e6:42:f3:79:57:19:
f2:20:24:13:c9:1d:c2:5c:e8:58:62:ca:6e:f2:15:
db:50:32:5a:4c:b8:ea:aa:3d:2d:53:1b:b0:0f:a1:
04:1e:00:5a:35:38:f3:27:a8:03:f5:b2:64:59:79:
c7:be:72:ca:76:ac:03:cd:c7:5b:f2:f0:50:1a:db:
68:5b:65:05:b6:9f:12:89:e2:92:8e:b2:99:af:d0:
27:1e:c1:97:a2:dc:d6:b1:70:c3:8c:4c:b3:f4:9b:
25:58:c3:8a:98:f3:e5:94:5d:d7:9b:af:63:6d:36:
00:d7:5f:81:56:32:94:69:23:24:26:4c:91:37:92:
e7:e0:96:23:98:b9:e9:dc:e4:22:9d:57:3f:50:8b:
ed:25:b9:a4:8c:f8:64:c3:db:fd:b5:2d:c9:35:c1:
35:08:96:92:25:5a:62:c8:d4:f5:1a:c5:b2:06:82:
0b:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:71:D0:72:E6:41:9D:3E:D8:64:0C:1A:B1:87:38:25:AD:03:A6:36
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/ZHHQcuZBnT7YZAwasYc4Ja0DpjY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
81:9a:2d:1d:a1:cb:c7:a1:cd:30:6a:f0:c4:4d:10:72:1a:9b:
d7:ae:a6:9e:56:85:02:ba:f0:19:56:0a:4d:f6:39:7b:83:a6:
ee:e6:8e:6d:b9:8c:5b:a5:cc:68:d1:42:00:bf:4e:f2:d6:0c:
f3:70:fe:3c:ab:4f:be:64:a1:c5:7b:18:b7:f3:7e:98:fe:11:
70:52:a6:a1:fd:d8:1c:ea:be:43:c5:64:a8:52:41:8a:50:ec:
ad:15:d4:73:91:f6:f5:03:f0:fb:b2:83:8c:bd:ce:41:98:92:
56:52:6b:18:6f:25:a8:c8:be:c9:31:66:64:8c:e6:b6:14:de:
a3:d4:82:87:c7:0e:ee:ec:ce:f5:0c:63:68:27:da:94:1a:1a:
bd:82:15:d5:56:7a:fc:43:b2:ef:e7:09:b8:f5:35:6d:fa:13:
f9:33:2a:c0:c2:6a:12:0f:55:54:04:48:5e:c1:e6:83:89:fb:
e6:64:98:70:16:e2:59:83:09:dc:f4:b0:85:f8:22:d3:9f:1e:
4d:47:77:4c:88:53:f1:36:74:d8:3e:da:d1:5d:b6:36:38:4a:
a3:40:f2:37:de:24:77:9d:e8:65:bb:fb:83:cd:b1:2c:0a:da:
5e:fa:d4:e3:fe:20:a2:5e:3a:32:14:ef:fd:f8:82:76:01:62:
cf:01:8b:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:47:36 2025 by rpki-client