Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/ddXA6VYOrgM_-ato-YsMtG3ZuJI.roa
File: ddXA6VYOrgM_-ato-YsMtG3ZuJI.roa (raw, json)
Hash identifier: C9v4MaiV65pCAdYjI4Q0xkiTxrGhXQtstf5C7LjSW8M=
Subject key identifier: 75:D5:C0:E9:56:0E:AE:03:3F:F9:AB:68:F9:8B:0C:B4:6D:D9:B8:92
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 7380
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/ddXA6VYOrgM_-ato-YsMtG3ZuJI.roa
Signing time: Sat 05 Jul 2025 07:45:01 +0000
ROA not before: Sat 05 Jul 2025 07:45:01 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29568 (0x7380)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jul 5 07:45:01 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=75D5C0E9560EAE033FF9AB68F98B0CB46DD9B892
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:a0:4c:bf:0e:cb:b3:17:3a:90:a2:75:f9:54:
b0:cc:ce:1f:eb:76:32:22:83:aa:ab:3c:47:01:2a:
9d:13:76:3f:95:16:aa:20:51:ff:e2:be:88:d4:c2:
b3:06:79:2b:0a:bb:34:1b:87:de:92:1d:b9:7e:f9:
32:2b:1f:2c:75:0b:6a:83:83:0f:42:8a:44:6f:87:
6f:ef:6e:fc:b4:2c:68:ac:50:c4:53:e4:3b:72:05:
51:4c:1f:6c:96:d5:ac:05:58:b7:8c:04:87:24:eb:
cf:d1:92:ae:7f:be:e3:89:cd:ff:2b:f3:df:fd:18:
ad:86:33:40:7a:03:8b:d9:97:6b:bf:7c:81:91:25:
f1:1b:34:e0:d8:d0:4a:dd:f6:45:08:77:8c:c3:c9:
69:4e:ae:3f:20:56:d7:da:7e:b3:50:b4:7a:05:e2:
a4:fa:f8:13:31:9d:bb:05:f8:32:cc:83:fd:47:58:
11:b5:fb:a7:3a:f0:c0:38:bd:5a:20:f5:67:2b:90:
e0:ce:43:52:59:d6:30:df:49:d9:67:77:4e:75:13:
f9:e1:0a:de:86:a2:cd:c9:f5:32:a0:34:a4:ae:c6:
bc:5e:72:59:e0:f1:19:6c:aa:03:3e:13:17:fc:74:
21:5f:5f:eb:e1:5c:d0:4f:b0:97:25:4c:35:53:9e:
c3:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:D5:C0:E9:56:0E:AE:03:3F:F9:AB:68:F9:8B:0C:B4:6D:D9:B8:92
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/ddXA6VYOrgM_-ato-YsMtG3ZuJI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
1a:d8:f1:82:14:1a:ed:91:ca:7b:8a:35:ad:94:d6:4a:52:08:
fb:ce:5c:18:0e:a6:ba:86:6c:c4:ef:2a:bb:75:97:eb:7e:95:
72:93:15:21:70:3a:62:98:6e:7e:c5:1d:d7:70:dd:81:70:ab:
d2:55:9f:4e:b3:b7:c4:c2:b5:39:d5:d3:22:dd:5f:64:02:dc:
29:e0:79:9f:69:9d:52:8a:c7:0e:a4:68:06:48:11:e5:b7:a8:
fe:9c:cd:93:3c:51:c0:1e:c7:05:af:48:87:23:05:26:03:b1:
65:6d:f1:6c:c1:ef:b5:a8:b8:9a:69:57:f0:01:3c:b9:35:fe:
1c:37:1b:55:3e:6f:62:58:81:90:8c:87:3d:35:8a:3f:1a:f2:
67:43:95:14:cb:4c:b1:ee:bd:f3:73:50:84:47:e7:ce:71:4b:
6e:c2:4b:46:39:3b:1e:b0:d9:5b:99:d5:65:5f:d3:a2:f8:c7:
51:ad:db:ff:41:89:d6:92:7a:21:69:82:aa:99:95:d9:7c:e6:
70:ed:e3:e8:54:d2:bc:78:a0:e2:f1:0c:5a:1d:2a:34:a2:40:
cf:48:db:1b:a5:52:f8:fe:dd:7b:62:cc:31:4f:e0:44:59:6d:
ad:29:43:7d:e5:11:71:a2:2a:ea:0f:d8:d9:83:76:7c:48:f9:
f9:44:a9:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:49:52 2025 by rpki-client