Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/cuRhObYYjkf_zby_zhiowmSSm78.roa
File: cuRhObYYjkf_zby_zhiowmSSm78.roa (raw, json)
Hash identifier: 9jF26A+tucFnRMLMZyVs1+mSd+pFRUdvI2hIK8zmZMI=
Subject key identifier: 72:E4:61:39:B6:18:8E:47:FF:CD:BC:BF:CE:18:A8:C2:64:92:9B:BF
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 7612
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/cuRhObYYjkf_zby_zhiowmSSm78.roa
Signing time: Sat 12 Jul 2025 04:41:34 +0000
ROA not before: Sat 12 Jul 2025 04:41:34 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30226 (0x7612)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jul 12 04:41:34 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=72E46139B6188E47FFCDBCBFCE18A8C264929BBF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:66:1b:8c:ac:e7:3b:6e:c1:e0:44:c7:d7:5a:
2a:ed:f2:97:e5:af:ee:cb:23:5a:8b:04:43:43:c5:
bf:a5:33:90:e9:cb:4a:a3:b6:1d:6e:5d:aa:43:68:
74:65:8c:6a:2e:40:3f:b9:d3:3c:44:13:d1:e9:3d:
d3:19:a7:75:dc:31:48:32:ca:7f:25:66:c3:82:60:
60:0c:a7:2d:62:48:61:88:b8:11:48:be:12:bc:e3:
d5:24:e7:3e:86:a4:13:2b:7e:4d:68:25:8a:10:a2:
70:75:27:38:be:bc:d2:7b:4c:14:da:ae:e5:d0:f9:
5c:8a:8a:86:5f:20:ea:85:1b:a8:61:ee:15:88:fa:
be:bf:6c:1c:3f:28:7b:59:07:24:4f:05:d7:83:9d:
ab:0b:72:a6:b4:24:e8:46:2a:21:be:b5:54:b5:d0:
80:dd:ef:04:6c:12:26:64:cc:4c:75:17:c4:65:dc:
7d:e6:75:2f:cc:24:f3:2f:4a:d0:40:b0:c1:ff:c7:
bb:b7:f4:b3:18:fe:39:c9:a5:7a:66:ab:9f:f7:6f:
10:0c:52:fe:c7:27:2d:e1:76:ac:bb:05:28:6c:51:
61:cc:df:4f:ed:49:f0:e3:31:b6:ea:99:f9:b0:a5:
e4:7d:eb:35:fe:a5:c4:81:d0:51:e7:b9:a2:62:09:
cb:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:E4:61:39:B6:18:8E:47:FF:CD:BC:BF:CE:18:A8:C2:64:92:9B:BF
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/cuRhObYYjkf_zby_zhiowmSSm78.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
41:d7:76:b9:25:0d:e9:43:91:8d:24:6b:e7:f9:d0:9c:1a:25:
63:36:93:ac:3c:00:e0:c6:3d:35:c9:9d:9e:02:29:90:30:3c:
29:9e:f9:3b:a8:b6:d6:45:f9:17:7f:81:17:00:68:85:8a:31:
63:2c:69:4f:d7:24:a2:c1:ca:ab:b7:35:6d:aa:9a:47:4f:f7:
80:fc:f6:7e:01:70:7b:c2:13:f1:5f:29:e4:51:b3:f8:5e:f4:
11:e8:c4:f6:96:dc:19:ba:2d:b1:e3:33:3e:03:01:27:bc:8b:
55:e9:0e:0c:65:19:db:17:f3:c0:68:cf:90:25:77:8d:7a:76:
ff:16:30:02:67:66:51:ef:2b:5b:a8:52:09:9d:3f:aa:96:42:
a7:10:1f:3b:3d:0d:31:b6:a5:25:ae:a4:21:9a:98:4d:e2:cc:
9e:b8:d0:a0:77:e5:c7:1b:b3:36:da:d0:b5:3b:93:1a:5d:c7:
8a:b4:c6:e3:2e:5f:ab:82:1a:cb:ce:4a:1c:47:d4:50:bb:44:
c6:4c:81:77:2e:0a:f3:97:8f:8a:83:77:ed:5e:1f:05:d0:b0:
e4:11:d1:ff:91:3f:bc:08:f9:e2:62:46:95:57:6a:58:1b:ac:
51:d5:5d:73:d9:51:6c:e3:24:78:84:42:80:10:5f:2d:bb:53:
67:16:38:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:34:01 2025 by rpki-client