Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/dVK3DlFyoOv83Kvdo4e4cLTvI_U.roa
File: dVK3DlFyoOv83Kvdo4e4cLTvI_U.roa (raw, json)
Hash identifier: xTjESAk2Cnvw8bLwWiHV6oj7acvYowDT5cMCvt25x4A=
Subject key identifier: 75:52:B7:0E:51:72:A0:EB:FC:DC:AB:DD:A3:87:B8:70:B4:EF:23:F5
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 7796
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/dVK3DlFyoOv83Kvdo4e4cLTvI_U.roa
Signing time: Wed 16 Jul 2025 05:42:47 +0000
ROA not before: Wed 16 Jul 2025 05:42:47 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30614 (0x7796)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jul 16 05:42:47 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=7552B70E5172A0EBFCDCABDDA387B870B4EF23F5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:94:16:04:ee:11:60:99:42:2c:30:89:63:b8:
b4:ac:84:9a:c5:90:75:b4:b5:25:a2:89:1b:a3:fc:
3d:d3:1e:6d:58:9b:2f:05:ab:09:ff:37:46:3a:d8:
02:fd:94:d1:5e:0c:eb:3d:9c:45:fb:5f:8d:6e:ae:
80:c8:50:cb:db:b4:cf:c7:f5:1d:e7:9f:e7:38:8f:
42:c2:41:b8:2c:05:62:59:3c:b5:80:7e:1d:89:93:
44:8f:ac:ee:de:40:e7:ff:9b:4e:3e:59:dd:69:77:
68:fc:d3:39:ff:23:d3:a1:7e:26:ad:dc:cd:df:44:
dc:ad:00:d3:c2:a9:dc:cc:8c:25:e9:f9:83:0d:a4:
ce:72:b7:16:e4:28:db:4e:39:38:75:0a:5e:0d:fd:
7e:cf:cd:35:54:31:ef:97:d3:72:60:aa:65:6b:5a:
52:2d:2a:ae:f4:30:2a:dc:07:cb:16:f6:c2:6e:8f:
8c:10:0f:0c:37:4e:5b:80:5a:d0:49:97:8c:f3:3e:
76:92:6c:a0:f4:3f:c8:cf:26:4d:2d:9f:0c:8b:05:
53:26:e7:87:87:98:53:19:50:8b:16:5e:86:55:75:
4e:37:9e:47:ad:2b:a9:28:96:92:9f:e1:5a:2f:ab:
76:20:bd:45:04:d1:ab:ea:c7:61:57:b7:1f:12:5b:
2a:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:52:B7:0E:51:72:A0:EB:FC:DC:AB:DD:A3:87:B8:70:B4:EF:23:F5
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/dVK3DlFyoOv83Kvdo4e4cLTvI_U.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
ab:fa:0a:25:1e:e8:29:94:41:95:d3:c6:04:b2:38:44:b5:b2:
f0:50:56:a6:d7:d7:16:de:dc:7b:13:18:30:a2:b2:2e:d2:be:
db:2d:cf:fc:27:5f:ca:79:37:eb:1e:02:f7:fe:78:2b:b2:f3:
d3:f1:24:da:a0:4f:c2:80:c5:0e:b5:a4:a5:21:50:dc:24:fd:
ec:e9:e9:d5:77:e1:58:c5:0d:23:3b:87:cb:d5:e4:8f:1f:c1:
d3:2a:cc:0a:b8:ec:82:89:64:10:26:72:2a:1b:24:6a:19:f1:
64:53:c2:21:cc:09:6a:3e:bc:c4:17:82:79:37:16:8a:ee:59:
90:b1:33:ca:05:54:75:4c:30:ef:b9:5f:4b:52:48:5b:35:8f:
9c:b8:1c:a8:80:76:ee:dd:d8:06:34:3b:1f:4d:64:72:d9:24:
58:a5:d5:cc:0a:44:a9:67:4b:df:7b:4e:63:6c:62:a4:ae:8e:
1d:e9:39:3d:d1:bc:30:e5:d3:9b:3b:a1:f8:b1:86:03:40:0a:
7e:c3:fc:a6:5f:07:06:d0:54:6b:74:ec:33:7a:10:17:6a:7b:
02:f4:45:24:13:a8:b2:6a:09:43:0f:cb:f0:d2:9e:c2:cb:23:
2d:66:20:30:64:00:99:58:8b:dd:80:26:f5:a7:b2:37:53:65:
2b:16:8b:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:36:18 2025 by rpki-client