Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/aCu9apYUNyjzao8uK-9z4bOdb-E.roa
File: aCu9apYUNyjzao8uK-9z4bOdb-E.roa (raw, json)
Hash identifier: /yOd4gO8lKZOZ8KeDptJb08MsJwHdXhMCWmyYaA8+4U=
Subject key identifier: 68:2B:BD:6A:96:14:37:28:F3:6A:8F:2E:2B:EF:73:E1:B3:9D:6F:E1
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 7114
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/aCu9apYUNyjzao8uK-9z4bOdb-E.roa
Signing time: Sat 28 Jun 2025 20:44:36 +0000
ROA not before: Sat 28 Jun 2025 20:44:36 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28948 (0x7114)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jun 28 20:44:36 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=682BBD6A96143728F36A8F2E2BEF73E1B39D6FE1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:4b:2f:7c:e6:1d:ee:9d:cb:f7:c3:33:63:67:
a4:0a:2b:a1:17:b2:82:35:3f:77:d1:fc:27:12:43:
46:51:1a:d4:4f:3e:96:cc:5c:2f:73:18:f0:f8:ab:
e7:42:92:d0:a2:40:82:da:71:2b:c8:13:42:cc:b1:
79:8b:bf:18:87:52:35:ab:ba:de:02:99:13:90:be:
d3:84:90:97:5e:e4:03:93:9c:81:ca:0f:16:43:85:
14:a0:f1:ec:a9:80:fd:05:4d:45:13:7e:8d:4d:0e:
d6:fe:c1:c8:fa:1e:4f:3c:f4:33:7e:37:93:95:64:
cf:0c:d3:3c:43:25:7a:a9:7d:37:3e:21:1d:c9:f8:
a4:27:34:5b:b8:bf:93:c5:43:44:10:75:da:05:84:
ad:5e:2b:6b:f7:90:54:de:77:ce:4f:29:ff:43:bd:
3c:34:1c:ea:c5:1c:1e:b5:fb:39:fb:13:28:a1:b6:
eb:ea:25:a5:d2:ad:a9:f5:29:6b:43:1c:2c:68:69:
60:9c:47:fb:97:4c:8e:d1:76:54:a3:de:96:e7:e0:
da:20:13:bb:18:dd:5f:60:b1:9e:d5:36:42:a2:bb:
20:b9:57:49:96:f7:7c:e9:7d:e3:3c:30:4a:44:53:
71:f9:fd:12:48:98:e2:35:14:ee:f6:f8:03:d6:d6:
5c:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:2B:BD:6A:96:14:37:28:F3:6A:8F:2E:2B:EF:73:E1:B3:9D:6F:E1
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/aCu9apYUNyjzao8uK-9z4bOdb-E.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
18:d5:3f:78:72:c0:3e:33:2c:fa:2b:46:8f:18:93:a2:a6:fa:
97:74:90:b9:a8:5f:a8:e5:a5:9f:6b:a1:73:55:7b:00:c8:29:
23:f7:3e:81:50:42:2c:79:6f:94:63:17:02:ab:6f:ea:b0:ed:
7a:76:6b:26:c9:f3:8b:cc:46:d5:48:25:3c:a1:59:f2:7a:1c:
76:c1:60:a3:39:b7:60:d9:45:80:03:ac:dc:8d:8e:18:c1:a5:
63:42:0e:cb:be:5b:db:02:f1:df:0c:13:f2:c3:24:09:e1:9e:
ce:ac:57:9c:5e:11:84:04:d3:a4:86:90:5d:e1:f2:99:2d:d2:
d2:3d:4d:dd:59:73:0a:77:b9:50:ee:af:7e:d8:c6:fe:da:47:
05:65:02:0e:cd:c2:45:65:b0:85:27:43:8d:54:e1:ca:aa:3a:
a3:67:94:df:cd:9f:d9:57:9f:47:bb:d6:85:ef:aa:67:a5:68:
30:e7:1d:9e:b8:c4:b9:88:4e:a8:ac:7f:02:09:11:56:3f:5c:
95:23:b0:cf:85:b6:dc:c2:a3:2b:ee:0d:96:66:f3:a1:68:40:
5f:b6:f8:33:a2:7c:7d:36:35:d4:50:1b:fe:b2:c4:b7:e4:ce:
87:9c:be:76:33:ab:86:04:86:23:27:96:9c:61:36:e6:b5:37:
32:23:36:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:38:36 2025 by rpki-client