Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/aHyDFvhQYTdGhzydgh3YRiOhoKo.roa
File: aHyDFvhQYTdGhzydgh3YRiOhoKo.roa (raw, json)
Hash identifier: EK9VaTYifxmx6/JWbOrZkGEkXAQ1uJrcrz6RVdEVyjE=
Subject key identifier: 68:7C:83:16:F8:50:61:37:46:87:3C:9D:82:1D:D8:46:23:A1:A0:AA
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 6E16
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/aHyDFvhQYTdGhzydgh3YRiOhoKo.roa
Signing time: Sat 21 Jun 2025 03:14:15 +0000
ROA not before: Sat 21 Jun 2025 03:14:15 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28182 (0x6e16)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jun 21 03:14:15 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=687C8316F850613746873C9D821DD84623A1A0AA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:a0:e9:9b:84:e5:b0:11:a0:03:8d:83:34:ce:
19:6b:7e:48:8d:70:b8:5b:bf:c2:50:9e:51:97:a6:
ae:fb:8b:69:dc:e7:c7:63:6b:69:dd:0b:17:67:c0:
2e:9d:9e:5e:c1:d1:a1:71:e2:c7:d7:f6:de:45:5f:
cc:54:6c:ad:ee:a8:48:44:35:4f:6a:18:c7:f4:c1:
3d:d5:80:a4:5a:bf:64:97:76:00:a2:f0:dd:c9:c3:
bb:62:59:2f:0c:bb:71:66:77:71:f2:a8:9f:b4:0e:
85:02:e5:89:02:06:51:19:d4:93:aa:34:a4:f6:d8:
63:7a:8e:88:c0:64:9a:53:fa:74:e9:d4:b5:61:0a:
03:07:2f:00:d3:08:cb:2a:bf:4c:40:2d:4d:cc:02:
3e:b1:ce:64:00:7b:ce:ad:58:c6:3c:5f:5a:fd:7f:
28:ed:f9:79:25:f7:09:f4:55:c0:a0:59:c4:df:7c:
ae:51:26:9c:80:49:30:db:d8:88:c7:f9:91:ff:d6:
28:a5:fe:fc:f8:6a:9d:aa:5c:d8:cc:9a:d4:19:13:
a4:51:d1:a8:a3:2b:d1:65:17:d9:72:42:ae:49:8f:
58:30:d3:66:f6:b5:2d:3a:47:4b:95:34:8a:b4:98:
a8:40:b8:47:66:44:09:fe:83:f4:b7:1e:bf:26:59:
09:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:7C:83:16:F8:50:61:37:46:87:3C:9D:82:1D:D8:46:23:A1:A0:AA
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/aHyDFvhQYTdGhzydgh3YRiOhoKo.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
0d:77:ba:c9:39:0d:21:1a:ff:6d:ca:a6:b1:8a:94:d0:49:4c:
9d:56:36:d4:72:bb:0a:3c:89:38:1f:fe:4c:39:30:7f:24:ed:
b6:df:4f:49:20:71:fa:99:88:12:d9:a5:59:a3:f8:d2:3c:40:
9f:22:af:5e:8a:9c:a9:ad:e4:b3:ed:94:3c:4c:ba:2e:9a:ca:
f9:87:05:74:f9:87:a8:10:9c:a2:6d:0d:e9:10:d0:59:17:6d:
4c:63:55:40:7d:9a:10:5a:de:b1:31:09:3a:ea:10:a9:97:f5:
01:8a:eb:c7:7c:d9:64:20:3b:81:d3:71:98:e0:9e:3b:0c:13:
02:a0:e8:83:ab:d5:af:73:54:0a:b5:ca:f6:13:34:23:77:a6:
f3:a2:ba:3b:89:a8:43:40:46:fc:26:4c:0a:c1:28:b6:d4:56:
97:dc:46:f5:96:56:78:d9:61:07:26:cb:2a:a1:9c:c3:c3:6f:
ae:02:b1:14:9c:42:b6:df:08:80:54:19:fb:8d:f5:7d:c4:ed:
25:38:e0:c7:ba:0a:05:0d:6d:eb:39:d7:09:32:5f:4b:71:2a:
db:e9:7c:3b:92:b5:0d:44:98:c8:97:a0:0f:fd:0d:46:aa:54:
97:6e:7f:b4:a7:fa:5a:b9:52:32:33:9c:13:eb:54:11:25:02:
be:7d:04:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:35:46 2025 by rpki-client