Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/adu3Er8_i_xrHMdvzaSNcM9F7eA.roa
File: adu3Er8_i_xrHMdvzaSNcM9F7eA.roa (raw, json)
Hash identifier: k4g0k3Oe7T1+Wx5sTABhN6uXV3x8KcxUCNSGEfCOD+A=
Subject key identifier: 69:DB:B7:12:BF:3F:8B:FC:6B:1C:C7:6F:CD:A4:8D:70:CF:45:ED:E0
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 6D68
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/adu3Er8_i_xrHMdvzaSNcM9F7eA.roa
Signing time: Wed 18 Jun 2025 23:55:33 +0000
ROA not before: Wed 18 Jun 2025 23:55:33 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28008 (0x6d68)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jun 18 23:55:33 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=69DBB712BF3F8BFC6B1CC76FCDA48D70CF45EDE0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:87:e7:2f:af:b9:8a:bf:23:c9:67:6a:b7:c0:
5c:08:e4:95:31:83:75:12:89:20:47:12:78:94:6f:
24:15:b4:75:14:ff:5a:f1:66:5e:27:09:0b:b3:e5:
a9:8d:47:d5:a2:46:03:cd:a1:c3:6c:76:73:ae:25:
83:20:b9:17:0c:6d:e7:cb:a7:2e:16:e2:a7:0b:32:
f2:96:bc:4f:0c:a5:e5:2b:ae:d6:af:de:ff:2b:e0:
23:cc:fa:00:8b:01:b6:e5:31:6d:cb:3f:3f:b3:bb:
81:dd:a6:de:5a:c9:4f:4e:fb:b4:d0:6c:37:b5:ba:
07:4b:14:53:cf:ca:e3:2a:68:14:2b:2c:0b:37:7e:
57:c8:c6:78:cc:7b:a5:fe:ec:a8:1a:b2:1c:d9:f1:
87:e9:30:07:ee:54:11:3b:4c:b1:4d:0a:11:7e:91:
b1:4e:1e:82:1c:d5:96:91:62:2d:7c:d1:6e:2d:32:
3b:6c:bd:e3:9c:37:87:6a:d1:f4:b4:d8:56:9e:56:
10:ec:34:33:d6:cd:b7:09:77:29:04:0a:4e:9f:9f:
98:e0:8d:fe:a5:57:05:76:e4:72:f9:3e:cc:d0:12:
1b:59:e4:eb:fb:ff:7c:1b:a5:f3:ea:ab:2c:c5:b9:
96:6f:69:f1:39:3b:e3:d2:b5:3f:39:a2:ce:0a:49:
1e:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:DB:B7:12:BF:3F:8B:FC:6B:1C:C7:6F:CD:A4:8D:70:CF:45:ED:E0
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/adu3Er8_i_xrHMdvzaSNcM9F7eA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
4f:0d:4e:b9:49:98:b6:69:fa:0e:aa:9a:fa:69:77:65:a0:d5:
fb:4b:90:0f:77:09:04:df:ed:19:28:14:49:60:13:f9:7a:c6:
b3:65:33:c8:9b:59:06:64:fb:30:1e:ab:42:98:71:da:a2:11:
4a:22:95:45:cf:2e:d9:88:03:f0:e0:67:79:ff:f5:8a:05:c2:
6a:97:6b:8e:9c:b1:c9:ea:71:2b:55:77:00:6f:cb:45:d7:8f:
be:86:37:d6:bb:94:a6:2b:f2:15:fa:cf:9e:50:66:99:96:79:
5c:e5:b1:df:99:c2:25:ec:26:a3:ac:36:a3:0b:29:16:f2:09:
5d:44:cb:84:72:97:dd:63:06:7d:b6:e5:b7:4c:2f:64:46:75:
c1:75:6a:f5:49:8c:ff:9e:4e:05:a9:f8:d8:5e:6b:75:2e:27:
b5:b2:b2:af:f4:7d:68:23:16:3c:36:b7:45:f0:0b:8d:e5:7a:
db:67:71:e5:e4:a9:e6:57:16:33:2f:ac:d1:f8:18:cf:fb:6b:
4e:df:6a:d1:c0:40:ad:45:8e:c7:f0:f0:15:85:a2:77:13:3c:
a3:ed:00:e0:d5:01:b0:78:78:40:8d:e2:e4:10:2b:75:9d:9e:
a6:c7:bb:f9:52:4f:99:0d:49:24:6a:a5:55:63:db:58:c0:34:
51:26:3b:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:32:15 2025 by rpki-client