Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/_oVhxz4QOsfA9FFLuqd5l1TmDTo.roa
File: _oVhxz4QOsfA9FFLuqd5l1TmDTo.roa (raw, json)
Hash identifier: S/3h6XW8rtWF20FWOhgWqPYeg0PWfiFNdPX0O4qQmws=
Subject key identifier: FE:85:61:C7:3E:10:3A:C7:C0:F4:51:4B:BA:A7:79:97:54:E6:0D:3A
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 707A
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/_oVhxz4QOsfA9FFLuqd5l1TmDTo.roa
Signing time: Fri 27 Jun 2025 06:14:40 +0000
ROA not before: Fri 27 Jun 2025 06:14:40 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28794 (0x707a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jun 27 06:14:40 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=FE8561C73E103AC7C0F4514BBAA7799754E60D3A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:4b:cc:91:55:14:d5:1f:63:82:e5:59:6c:08:
63:ca:2f:06:2a:aa:f7:03:56:2f:ed:22:93:9a:f8:
05:08:dd:47:6a:f8:1d:29:8b:0e:43:60:b8:b8:47:
3d:6f:6e:c6:23:52:fb:ad:35:4b:97:66:ff:5d:b3:
72:21:55:89:38:6d:fc:ed:c5:07:73:ac:cb:e3:1f:
39:24:13:e8:85:d6:76:41:d3:c2:ba:5a:02:1a:9f:
e0:97:a8:ef:9d:66:7d:78:36:6d:58:ea:59:5e:81:
54:55:ba:89:3a:97:43:a6:39:c1:e4:c5:58:30:d6:
56:17:c6:eb:f7:bf:3b:f1:c5:48:64:36:dc:db:61:
a5:d1:d3:4e:b9:ab:66:2d:ee:5f:bb:c5:2e:14:45:
37:7c:2b:ab:cc:11:eb:9f:0b:a6:d3:21:ef:62:e1:
05:82:a0:e6:f4:18:73:c8:f6:9a:a1:6e:9b:ce:38:
83:76:b9:eb:de:d8:66:c2:91:96:1d:42:9f:73:8e:
6e:dd:8c:ee:f7:91:ee:19:86:b8:33:60:79:79:f8:
21:30:b5:88:e0:0a:7f:84:41:02:c8:24:6d:cb:00:
4e:92:a6:4d:93:8e:87:2c:67:2a:2f:d0:64:0d:7d:
58:1a:12:60:f6:8f:19:0b:e8:ed:6c:5c:77:0f:47:
b9:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:85:61:C7:3E:10:3A:C7:C0:F4:51:4B:BA:A7:79:97:54:E6:0D:3A
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/_oVhxz4QOsfA9FFLuqd5l1TmDTo.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
49:dc:9e:8b:07:74:99:5e:eb:de:0b:da:d4:e4:d9:80:4f:4b:
c0:ee:51:f1:75:ae:69:63:a2:0b:21:e1:85:a0:d9:a2:7d:6a:
30:da:a9:a3:da:22:d0:d1:7e:6a:b5:2d:16:23:f5:92:37:49:
d7:39:53:dd:e6:a6:0a:c8:ae:c0:42:33:a8:60:71:b7:54:9d:
18:48:63:78:60:a1:90:17:a1:57:c6:f1:69:64:e1:ed:cf:e3:
c8:c8:60:b7:9a:c0:c9:81:17:a2:7f:9c:4c:c2:2a:d8:17:ee:
d3:f7:1c:14:a9:8e:9e:20:76:50:ba:fa:5b:4e:83:5d:24:55:
1f:04:0b:ad:d8:20:87:a8:12:d9:e6:dd:05:8c:ca:82:c3:f5:
92:ed:ee:9d:01:80:18:a5:4b:60:2f:0e:b7:b6:0a:3b:06:7e:
4c:85:db:9f:8d:75:fa:00:fa:01:ff:cd:80:16:aa:10:68:6c:
4a:32:94:ba:6c:26:ca:92:bf:47:d9:90:33:41:07:0c:b1:9a:
f4:a8:44:d1:85:6e:4f:ec:81:f2:0e:39:b7:17:72:d3:7f:c5:
b8:ca:d1:ed:e2:79:14:41:8f:ae:e2:ee:4c:97:a0:7e:09:95:
26:be:8c:12:d4:a8:89:9f:48:a2:f8:e9:83:d8:3f:03:10:8a:
db:d9:ff:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:45:28 2025 by rpki-client