Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/_DJB2wxu87DRgfsrLGUKP-by1fE.roa
File: _DJB2wxu87DRgfsrLGUKP-by1fE.roa (raw, json)
Hash identifier: Z1ZURww1K25zu3hTjSx5z+C3PEONNU/HP9D/esmOl8Q=
Subject key identifier: FC:32:41:DB:0C:6E:F3:B0:D1:81:FB:2B:2C:65:0A:3F:E6:F2:D5:F1
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 6E7E
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/_DJB2wxu87DRgfsrLGUKP-by1fE.roa
Signing time: Sun 22 Jun 2025 05:14:14 +0000
ROA not before: Sun 22 Jun 2025 05:14:14 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28286 (0x6e7e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jun 22 05:14:14 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=FC3241DB0C6EF3B0D181FB2B2C650A3FE6F2D5F1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:f7:3d:c8:e2:58:22:d4:f5:ec:bc:60:08:3e:
02:96:48:62:0e:c7:ac:7e:6b:a3:e1:9a:52:67:52:
0f:50:4d:be:80:e2:24:8b:4f:b4:b6:99:9a:c4:cc:
41:0a:7c:ab:1a:6f:b8:47:19:4f:29:44:c1:c1:26:
ae:d2:91:bd:d1:2b:44:ef:1e:0f:12:81:5b:c2:4d:
c0:d1:d3:17:e5:1f:e2:77:5f:02:37:7f:d9:d0:f1:
9f:16:bd:05:2a:11:51:db:ac:9b:f1:70:6a:37:2f:
cb:1e:8d:bd:06:44:07:26:0b:2c:89:cb:7b:d7:2d:
88:28:b1:a1:53:f6:79:be:6b:11:4d:89:ed:0e:db:
b5:b5:5e:ba:ae:cb:1d:20:e5:ce:24:52:c0:ce:be:
61:eb:86:e8:7d:23:1e:a4:06:90:9a:a0:4c:91:b4:
cf:e7:4d:af:d4:78:03:a2:38:1d:46:2b:08:b4:31:
f4:a1:a9:bb:46:fa:2f:93:9a:99:4d:bf:f7:de:dd:
ed:48:99:31:cd:10:93:56:9d:13:f7:24:41:52:e9:
5a:ba:ec:17:e5:10:71:27:24:f4:62:2a:f1:ab:db:
4b:9e:88:e6:2d:7e:c3:9f:b1:11:d3:88:27:da:64:
b5:ed:fa:23:ce:09:02:90:04:30:54:c7:2f:89:89:
9e:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:32:41:DB:0C:6E:F3:B0:D1:81:FB:2B:2C:65:0A:3F:E6:F2:D5:F1
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/_DJB2wxu87DRgfsrLGUKP-by1fE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
67:f8:62:d4:bc:73:16:2c:0f:01:1a:b2:ca:f7:84:27:23:fe:
e7:be:f2:5d:e8:28:91:4a:58:04:29:6d:4c:ca:67:4c:c2:0f:
f2:52:16:fc:54:a2:5f:da:1d:d6:71:88:aa:59:cd:57:38:61:
77:b7:95:04:b2:6a:3d:a2:4f:17:aa:f2:05:68:d4:50:ca:87:
66:8c:c7:11:24:d8:9f:07:e9:dc:84:db:80:60:cb:ff:07:65:
41:2b:59:29:76:05:0c:4c:fc:49:38:2b:35:41:b3:d8:67:5b:
0a:45:c1:60:d3:d4:77:53:ac:f3:4d:86:2c:f6:e9:fd:10:03:
03:76:07:ac:ba:cc:d5:8d:55:99:b9:e1:d2:9a:89:82:77:a6:
48:8c:b8:a7:b0:12:cb:ca:00:46:61:e2:61:5e:63:11:96:f7:
11:4c:a1:09:d7:63:d1:57:22:94:8c:21:2f:66:d3:be:cf:2e:
3b:b4:7b:05:ca:ae:4f:32:3f:9f:14:e0:74:b0:e7:33:59:81:
ed:0f:c2:e8:c9:4b:28:cf:4d:7f:e8:bd:46:bd:a3:52:72:3f:
d3:e0:43:b7:09:38:80:69:c4:e6:51:10:e3:e0:4f:b5:81:9f:
c9:84:7a:f2:7e:07:e2:8d:86:a2:9a:b3:7b:cd:6f:c3:20:82:
71:e6:4b:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:50:41 2025 by rpki-client