Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/aeLwXaDgaHwdUpNQsGOlyje4ap8.roa
File: aeLwXaDgaHwdUpNQsGOlyje4ap8.roa (raw, json)
Hash identifier: 4DQl+6GNZc3CFRqEl5CoPoMQNcl9MDE42KbWpR9pga8=
Subject key identifier: 69:E2:F0:5D:A0:E0:68:7C:1D:52:93:50:B0:63:A5:CA:37:B8:6A:9F
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 61AE
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/aeLwXaDgaHwdUpNQsGOlyje4ap8.roa
Signing time: Sun 18 May 2025 13:40:26 +0000
ROA not before: Sun 18 May 2025 13:40:26 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25006 (0x61ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 18 13:40:26 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=69E2F05DA0E0687C1D529350B063A5CA37B86A9F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:dc:85:59:0c:1b:72:f9:8e:b6:4f:84:ad:f2:
57:8e:3d:05:16:bf:2b:09:90:6f:70:a0:e8:69:15:
75:09:93:ef:96:12:75:8c:ac:40:af:cb:0c:21:08:
e2:7c:6f:bc:93:c9:b5:88:d8:da:97:95:04:09:ff:
3b:d5:eb:6b:d9:75:9e:a6:95:40:c7:61:97:fa:0a:
6d:19:33:23:fe:c2:b1:14:43:47:80:6b:c5:ef:67:
5c:7c:59:a6:13:40:01:51:e5:f0:7e:36:f7:e1:68:
ee:3e:c1:ac:21:99:42:d2:70:52:44:0c:0e:4e:f2:
53:eb:db:2e:db:b7:23:4b:eb:92:3c:71:be:66:e8:
cd:2e:fc:6c:74:b5:55:41:18:ce:97:bc:79:9e:97:
b1:7b:85:2b:8c:dd:05:42:50:7e:fe:cd:f7:00:aa:
4e:13:5d:ce:0d:19:03:30:1c:6c:85:3d:12:11:82:
04:5d:cd:fc:09:d4:5e:d3:c4:6c:69:7d:d6:b9:56:
4e:a3:b7:d0:b9:2f:ef:0e:26:38:68:5e:28:5b:57:
c9:24:37:5b:99:30:7f:38:2f:fd:64:95:30:43:3e:
74:88:23:80:f9:41:05:4b:58:de:52:f3:78:80:8d:
97:d5:21:52:58:c6:7d:83:4a:b4:5b:0c:e4:b7:5e:
29:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:E2:F0:5D:A0:E0:68:7C:1D:52:93:50:B0:63:A5:CA:37:B8:6A:9F
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/aeLwXaDgaHwdUpNQsGOlyje4ap8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
1a:76:76:90:39:dd:09:80:f0:0f:0a:1f:6c:e1:26:74:1e:70:
26:b5:ed:47:ae:ed:86:5b:dc:ed:b2:8e:3d:23:0e:22:69:02:
d6:df:a8:03:10:40:eb:3d:11:c4:cf:ab:83:13:ca:65:a3:ff:
e1:b1:bd:fe:42:c7:0f:0f:35:96:2b:b5:2c:63:d7:ea:a3:d5:
39:f8:74:14:4e:e7:a4:a9:d6:b7:05:b3:63:5b:44:87:45:77:
45:c3:50:75:07:c7:f9:09:22:72:d2:cd:b6:7d:b9:e6:5c:ba:
55:6d:bb:fd:09:67:88:fd:a5:56:13:d5:49:79:ac:71:78:5b:
aa:f3:5a:3f:0d:c6:8d:60:83:f4:4d:fe:c7:9f:cf:80:fa:07:
e5:3b:82:fa:1d:e2:db:44:2a:3b:93:87:c3:b5:b8:cc:d7:70:
30:b1:3a:9b:1e:4a:c6:7e:9a:02:da:8e:5a:b8:5c:ff:80:e8:
55:cb:b3:75:7c:0b:8c:7f:8d:12:8c:87:4b:6e:d9:c9:f6:64:
ed:32:ea:22:89:03:9b:22:8c:d9:d3:d7:58:86:b9:ef:2e:16:
68:b1:65:04:45:33:26:e0:fa:eb:5d:e2:ca:0a:28:06:70:82:
67:c3:5f:d6:d4:fa:37:be:45:02:c4:b5:ba:70:f1:b7:e2:d2:
84:fe:25:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 00:59:47 2025 by rpki-client