Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/_WBITUn41FwdIJBcqE17sysMuyc.roa
File: _WBITUn41FwdIJBcqE17sysMuyc.roa (raw, json)
Hash identifier: 5Y3NbABe/vQi5GcE3d8T3CfBeJcvksVTUZCc2pBCiEs=
Subject key identifier: FD:60:48:4D:49:F8:D4:5C:1D:20:90:5C:A8:4D:7B:B3:2B:0C:BB:27
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 6504
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/_WBITUn41FwdIJBcqE17sysMuyc.roa
Signing time: Tue 27 May 2025 11:11:13 +0000
ROA not before: Tue 27 May 2025 11:11:13 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25860 (0x6504)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 27 11:11:13 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=FD60484D49F8D45C1D20905CA84D7BB32B0CBB27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:de:c4:ff:b9:f8:2d:66:01:db:8d:bf:a9:94:
23:9a:54:fa:b2:0a:6d:e0:11:f2:f1:68:8f:8f:3b:
f8:92:22:e4:6c:d1:ef:fd:e5:96:aa:28:38:7d:61:
c3:60:fa:38:2a:05:bf:80:d2:88:12:81:f0:9d:bf:
48:16:96:f6:f6:14:49:79:21:bd:16:1c:be:30:17:
ef:99:bf:05:9a:1a:53:ed:26:4f:2c:41:64:d2:f9:
49:18:f8:a4:50:32:28:e3:b6:56:19:fe:96:3c:cf:
5d:34:9e:d7:79:9e:94:58:03:cb:11:cb:a6:bd:a0:
c8:fe:c7:e5:cd:fe:f0:55:1c:12:83:f3:cd:aa:fd:
dd:27:eb:44:69:43:c6:4c:e2:3e:0a:da:87:51:0d:
88:40:ba:bf:c0:f3:86:b3:4d:57:90:3f:b2:9c:78:
9e:08:2a:24:f1:c1:7b:92:33:5b:d9:8a:1b:3a:fa:
1b:c8:a0:e3:7d:74:83:8e:a0:14:0b:f4:cc:18:0c:
ce:eb:98:2a:85:14:c0:ae:d4:47:55:cb:56:b7:a1:
cd:3d:5c:6b:b3:27:09:51:1a:a5:6f:66:2b:68:5f:
2e:61:09:12:82:bf:8a:8c:6d:08:1a:9d:e9:fc:7a:
f2:59:f8:c1:8c:0b:df:d1:68:41:ba:b6:5a:db:8e:
90:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:60:48:4D:49:F8:D4:5C:1D:20:90:5C:A8:4D:7B:B3:2B:0C:BB:27
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/_WBITUn41FwdIJBcqE17sysMuyc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
78:cd:32:a5:6d:19:91:9b:ac:6f:50:a4:76:ae:02:a3:ab:82:
eb:f9:82:78:aa:31:f0:ed:a2:a1:4f:d9:1c:f6:f1:83:36:f7:
36:bb:c3:8f:2a:42:48:23:7f:5b:93:57:40:fc:c7:33:1d:51:
28:f0:19:ac:0f:e3:a9:de:87:00:24:d3:09:ec:aa:02:03:47:
0a:31:4d:c5:f9:ef:1b:7a:80:be:b5:f0:a4:9f:32:96:bc:21:
b9:30:ea:42:86:c9:ec:14:00:f2:e4:08:9a:2e:09:c6:19:c2:
0d:ea:f9:61:f5:10:a8:f2:43:89:11:6f:06:4a:90:d9:ff:86:
fb:08:b5:28:7f:82:89:67:ae:e8:72:21:53:33:3f:bb:8e:bd:
e4:ca:e3:f8:b5:c7:c3:58:35:a2:d5:f4:68:1f:37:3b:b8:fd:
dc:ff:b6:58:25:2f:2a:38:31:80:00:c2:f9:78:d1:78:6a:e1:
1b:d2:37:83:20:af:0c:03:c9:21:ac:3f:64:5c:b4:0e:31:7c:
a6:30:1a:d7:95:82:df:26:3c:e2:91:f8:1d:22:0c:25:dd:c8:
96:7c:ba:0c:dc:15:b6:4f:96:fa:cd:73:02:7f:aa:b3:62:cd:
5a:3b:2b:5a:c1:d3:98:01:0e:2a:37:61:e5:24:48:59:2d:34:
17:85:96:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 00:58:25 2025 by rpki-client