Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/aa3uv_TRWizaJgsAr_4KL7BNYFM.roa
File: aa3uv_TRWizaJgsAr_4KL7BNYFM.roa (raw, json)
Hash identifier: TEeH7cOHptnkaKhrK8dWSyT1Gb8sqq0+YourzPth3/Y=
Subject key identifier: 69:AD:EE:BF:F4:D1:5A:2C:DA:26:0B:00:AF:FE:0A:2F:B0:4D:60:53
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 70D2
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/aa3uv_TRWizaJgsAr_4KL7BNYFM.roa
Signing time: Sat 28 Jun 2025 04:14:35 +0000
ROA not before: Sat 28 Jun 2025 04:14:35 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28882 (0x70d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jun 28 04:14:35 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=69ADEEBFF4D15A2CDA260B00AFFE0A2FB04D6053
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b2:01:3c:cb:8b:89:ae:d0:ce:a0:58:70:c7:
23:2d:13:b0:5e:5b:c1:dd:30:79:7e:e2:2e:aa:04:
d5:b4:82:ba:62:5d:d3:da:d2:93:ad:65:4a:a3:2f:
22:96:8a:7a:75:2c:1e:3a:a0:59:60:25:30:bc:3f:
ca:c2:59:c3:45:02:46:a2:be:48:e7:3a:ae:cf:a8:
7a:b4:65:bb:b5:a7:70:80:f9:02:b8:ab:4f:6b:3b:
6c:63:92:3e:c7:fc:e8:da:9a:55:32:81:3f:1f:63:
b8:3c:1d:3f:67:77:7d:3f:26:68:40:00:1b:26:2d:
85:df:f7:8d:99:6b:50:a9:b5:02:75:a3:62:ef:95:
3b:f5:f4:59:bb:a2:b4:d1:98:97:c8:8e:f8:3d:ab:
b1:b9:6e:22:bb:5b:fc:ef:b1:83:75:df:71:f9:7f:
e0:3e:87:20:f4:3a:71:17:a9:96:f3:be:ae:ac:0a:
72:8c:dd:ef:35:6f:03:9b:da:a4:a0:17:e3:84:e9:
e1:10:f9:8e:6d:e2:0d:9f:66:40:b5:3b:a7:26:7e:
90:c4:bd:43:1b:81:a2:b9:0f:09:08:e6:ff:9c:14:
7a:a2:20:9a:12:9e:5c:ba:3e:56:56:6a:f2:d1:f1:
ae:e3:10:86:29:8b:a3:da:52:60:ab:97:b3:77:47:
c1:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:AD:EE:BF:F4:D1:5A:2C:DA:26:0B:00:AF:FE:0A:2F:B0:4D:60:53
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/aa3uv_TRWizaJgsAr_4KL7BNYFM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
7c:59:b3:bc:cd:1a:a9:b0:71:b6:d4:82:30:cd:70:22:38:d7:
58:3c:46:cd:f7:88:2b:9e:5e:cf:3e:07:43:64:4f:28:7a:b8:
06:a0:68:8d:5b:d2:c3:4f:9f:5f:2b:f7:30:cc:3c:44:5b:e3:
54:93:4e:7d:fc:19:07:da:3d:f3:69:ce:da:0c:2b:48:30:c9:
6a:7b:39:90:75:f2:c8:4c:10:95:90:74:ab:b5:f1:38:dc:d3:
35:ae:c0:79:09:77:60:fb:4f:0f:b2:49:1c:38:72:ca:20:cb:
0d:5f:46:43:04:ef:19:4d:23:1a:27:04:d7:27:a4:c3:eb:37:
93:59:52:52:50:a3:36:01:42:3b:22:d0:a4:fc:6e:e7:63:59:
c8:da:7a:fe:ed:c0:c6:17:f7:d3:02:2e:3e:55:d2:84:9e:0b:
71:d8:21:d2:39:e9:22:e8:16:e5:a1:dd:65:30:3a:dc:71:4c:
d6:dc:43:a3:b3:85:e5:e3:a1:14:2c:89:8e:dc:55:68:ec:33:
f5:49:87:7a:d5:0a:fc:a4:60:f8:50:2c:a4:79:44:a8:d5:69:
a8:61:0f:0b:09:d6:18:1a:4c:e3:30:7b:31:43:d7:7b:91:aa:
43:8c:ae:4f:4c:d0:2f:88:de:7b:2e:fe:d0:7b:7e:ac:89:4a:
40:09:ef:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:43:19 2025 by rpki-client