Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/d9y5ZDXE79FbKjqzuj4rbNO_6yk.roa
File: d9y5ZDXE79FbKjqzuj4rbNO_6yk.roa (raw, json)
Hash identifier: tpEqTddtu4TTUDkFzZdAfDnKAaOfY1Vzwy+vklDzE/A=
Subject key identifier: 77:DC:B9:64:35:C4:EF:D1:5B:2A:3A:B3:BA:3E:2B:6C:D3:BF:EB:29
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 782C
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/d9y5ZDXE79FbKjqzuj4rbNO_6yk.roa
Signing time: Thu 17 Jul 2025 19:12:04 +0000
ROA not before: Thu 17 Jul 2025 19:12:04 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30764 (0x782c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jul 17 19:12:04 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=77DCB96435C4EFD15B2A3AB3BA3E2B6CD3BFEB29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:f5:0b:e2:c2:d5:02:7d:67:88:d8:d9:59:10:
1d:b1:e3:80:06:92:15:77:ed:c0:59:07:b2:39:66:
e8:62:62:e5:dd:8f:5d:65:1a:9f:61:ac:23:af:ae:
50:70:be:37:5a:a5:4e:74:5f:09:88:54:b6:17:bd:
4f:62:5d:1c:e2:71:f9:d5:8e:3a:41:fb:68:02:6a:
1b:4b:fd:ce:5e:f4:a4:1a:6a:e1:6a:3f:87:66:6d:
57:a3:90:74:3d:d9:c6:25:06:90:4d:e6:d8:11:d5:
41:cc:bd:51:18:a7:d9:24:3e:8b:09:3c:cf:72:36:
a4:72:3c:0e:69:78:7d:da:37:35:1d:50:8b:bd:c8:
2e:2a:ed:ee:f1:7e:ab:35:9c:33:62:19:c6:56:9c:
d1:73:aa:68:c0:d9:47:94:20:a8:cc:0d:5c:82:99:
ef:4c:53:47:31:d1:0c:e0:fa:14:9d:2d:60:fe:04:
93:7f:97:ba:49:c6:0e:84:e7:ca:c3:96:94:2a:1e:
ac:ac:13:61:76:59:89:45:ea:dc:03:82:6e:81:4b:
36:0d:c8:9a:fd:0b:19:92:91:95:90:13:30:34:16:
88:b9:12:98:0e:20:bb:5a:b6:8f:a2:19:d6:7e:60:
d6:e5:01:e3:48:a8:b8:d4:28:9c:3e:f8:82:3b:7a:
c6:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:DC:B9:64:35:C4:EF:D1:5B:2A:3A:B3:BA:3E:2B:6C:D3:BF:EB:29
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/d9y5ZDXE79FbKjqzuj4rbNO_6yk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
3a:74:20:03:e3:1c:33:22:b4:c4:f4:f5:27:ae:33:ee:b4:32:
91:a5:d7:26:9f:13:3d:74:35:e2:17:74:5e:86:2c:48:95:a0:
db:b3:9d:3a:86:03:80:e3:b6:ff:97:26:ef:2c:20:a7:69:16:
27:ec:1f:23:40:9e:85:db:34:1f:3f:03:24:37:77:53:9f:42:
69:10:56:de:6f:36:ec:10:44:7c:9b:e5:a4:ff:29:b4:bc:75:
e4:e9:f8:98:a2:4d:78:15:a9:b1:77:de:57:04:71:01:f9:b3:
e8:bf:1c:80:3d:9b:10:38:fa:3b:ef:4c:8f:e6:b1:6f:89:26:
e6:43:62:75:c2:85:8c:47:5a:8c:89:e3:db:0f:2d:8f:41:4d:
a5:01:31:5f:0f:dd:2a:ed:80:b7:1d:d6:f6:7e:9c:8c:85:34:
5a:6e:7d:44:09:71:da:f1:6c:68:5d:69:9f:2b:99:ef:9a:6e:
ea:e6:f7:7f:78:3c:a3:e9:d6:c2:07:6c:39:aa:13:b9:0d:37:
cc:21:21:5e:c8:fc:47:de:e6:fa:d0:1d:4e:cd:e7:1d:99:5d:
b2:06:bb:2c:40:80:b3:50:98:7d:b3:b3:ce:c7:fb:7b:91:47:
56:4e:52:ed:3a:26:f1:65:ab:44:85:65:bc:2f:a9:bb:b5:e3:
d6:d1:80:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:47:49 2025 by rpki-client