Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/_eodXCctTBwqoxmiczI0H_zZ_7I.roa
File: _eodXCctTBwqoxmiczI0H_zZ_7I.roa (raw, json)
Hash identifier: BLhff6O9Vet+5ckLT7yRAywa/1qVxM2VpRDOknsDkb4=
Subject key identifier: FD:EA:1D:5C:27:2D:4C:1C:2A:A3:19:A2:73:32:34:1F:FC:D9:FF:B2
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 6CE4
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/_eodXCctTBwqoxmiczI0H_zZ_7I.roa
Signing time: Tue 17 Jun 2025 11:12:51 +0000
ROA not before: Tue 17 Jun 2025 11:12:51 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27876 (0x6ce4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jun 17 11:12:51 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=FDEA1D5C272D4C1C2AA319A27332341FFCD9FFB2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:77:3a:87:a9:ef:d5:83:d5:f4:62:69:47:59:
40:60:28:50:f9:72:0d:83:df:ee:79:54:9b:ee:f0:
a4:e5:2f:15:6f:a2:44:fe:46:f5:70:51:72:b1:e7:
23:65:88:08:26:00:d5:6d:84:ed:34:dd:bb:51:0e:
b8:7e:b3:d8:80:82:2d:9f:07:ac:57:0b:6f:b3:53:
da:6c:3e:9b:4a:6b:65:b8:65:f0:75:21:47:a9:39:
d6:b5:4d:a8:c1:46:2e:e9:18:85:4f:32:2b:57:34:
15:47:0f:84:3b:fa:5e:89:c8:c7:d6:80:d4:af:4f:
f6:d5:89:ef:89:00:4e:a5:a7:11:5c:05:f8:0b:71:
f3:cb:55:b4:e4:ae:71:95:47:eb:33:16:6a:4b:24:
38:84:a3:01:bb:03:81:75:7b:db:62:00:61:91:2f:
0c:cc:d0:96:fb:9b:1d:89:ac:ea:fa:3f:62:88:5f:
9f:0e:92:53:57:d0:22:40:71:65:ad:f4:71:c1:dd:
6e:56:b8:3b:d3:56:67:76:56:11:74:ee:b4:36:2b:
3a:8f:fe:81:8a:6e:06:a7:96:c5:7c:9d:7d:00:49:
44:a4:1d:dc:9c:62:a5:d1:b9:31:15:b8:77:cc:92:
c5:84:fc:1b:65:74:15:f6:30:2b:3d:1a:39:34:c6:
80:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:EA:1D:5C:27:2D:4C:1C:2A:A3:19:A2:73:32:34:1F:FC:D9:FF:B2
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/_eodXCctTBwqoxmiczI0H_zZ_7I.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
87:47:81:dd:53:06:a1:4d:23:3c:e6:37:98:bb:f5:b2:b5:08:
54:b7:63:8a:ec:c4:c5:51:9e:63:fc:f2:e5:7a:a3:69:bb:34:
38:f6:17:95:5e:e2:88:89:4e:e3:4f:a3:98:9f:75:0c:b7:32:
4b:a3:4a:68:cc:02:bb:4a:d8:10:50:4b:20:06:18:cf:6c:14:
7a:dc:17:a3:54:b6:3a:1c:3a:98:a3:cf:51:e0:bb:de:b7:d5:
f6:6d:1e:38:2e:e5:c2:1f:de:d2:49:d7:c2:91:4d:f8:bf:85:
56:cf:80:87:56:34:3e:0e:c2:0a:42:09:a4:b0:72:4b:e0:05:
69:95:46:0b:4c:ff:d3:64:7d:43:25:57:14:d0:50:72:bc:51:
50:e9:9c:21:33:e5:81:66:fd:65:56:af:2a:1f:75:b1:3e:40:
2c:0b:6c:26:3c:29:0c:cb:95:7a:c5:1b:70:91:52:2f:dc:2b:
1b:b0:97:51:c1:02:a3:ab:ac:82:ff:c4:a1:2e:02:9c:d8:e5:
16:20:52:73:7d:42:33:57:93:7f:82:5f:da:36:34:d0:43:79:
b3:d9:ad:7d:a4:18:26:86:57:b4:c3:86:ae:16:b8:c8:52:72:
c3:d1:dc:82:c5:53:b9:bc:eb:0e:40:13:16:8e:d4:9d:6a:ab:
93:60:89:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:46:30 2025 by rpki-client