Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/df0bRgrYOlAC3fsbtO3kFjW6brg.roa
File: df0bRgrYOlAC3fsbtO3kFjW6brg.roa (raw, json)
Hash identifier: ybsy3953PU46Ej8xfD7u7rbNSkX2KWEyLbvF0y0l/vo=
Subject key identifier: 75:FD:1B:46:0A:D8:3A:50:02:DD:FB:1B:B4:ED:E4:16:35:BA:6E:B8
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 642C
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/df0bRgrYOlAC3fsbtO3kFjW6brg.roa
Signing time: Sun 25 May 2025 05:10:59 +0000
ROA not before: Sun 25 May 2025 05:10:59 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25644 (0x642c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 25 05:10:59 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=75FD1B460AD83A5002DDFB1BB4EDE41635BA6EB8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:dc:04:81:24:2a:1d:12:04:62:75:eb:23:c9:
07:fc:1a:61:e1:88:7f:ab:be:0a:60:b2:8a:2c:7c:
7f:d9:67:1a:ba:cf:cc:9e:62:8c:60:c9:05:56:3e:
44:49:1a:5e:68:89:55:16:db:b8:ae:2c:23:8c:98:
d1:9e:2f:85:14:80:c2:4d:ff:f1:16:b8:9b:f8:b1:
6f:c0:17:0d:62:b5:2f:91:28:ca:66:05:8d:0a:a1:
56:85:70:d6:d1:1a:af:ce:ed:23:bf:ed:bb:c6:cf:
07:ff:1c:a4:39:01:24:f7:fd:c9:85:70:f5:c4:ea:
8d:0b:ec:41:73:92:50:60:e7:4e:69:c1:5e:f2:4d:
56:a5:08:8d:c4:87:64:95:9a:11:77:ef:a2:af:a0:
f5:bd:f7:07:28:66:0d:29:33:ac:a9:9e:05:d7:06:
9b:16:84:27:0f:48:c7:dd:a6:06:f2:c8:0d:72:be:
a1:4d:4b:a8:1a:6f:3e:ae:d1:24:d2:72:ba:0c:a9:
36:4a:21:40:d7:5a:38:75:57:d2:5b:5a:f7:e5:ce:
a9:48:0e:83:96:c0:c8:05:00:58:dc:8c:52:89:19:
1b:e4:14:cb:82:2d:be:67:18:ac:c8:00:4a:d0:1c:
98:fa:8c:8b:6e:01:91:c6:be:dd:61:db:21:48:b6:
09:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:FD:1B:46:0A:D8:3A:50:02:DD:FB:1B:B4:ED:E4:16:35:BA:6E:B8
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/df0bRgrYOlAC3fsbtO3kFjW6brg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
47:e6:43:4d:ef:59:07:be:9f:ec:35:b9:87:7b:b8:15:33:cf:
aa:73:1a:50:4b:1e:50:e1:30:da:0e:90:ca:36:8c:ab:7c:6f:
44:c9:cb:d4:d7:f2:a2:8d:ae:17:ee:e2:b0:84:fa:c2:e1:b3:
e7:4e:44:25:13:8d:8e:d8:19:42:35:03:03:df:7a:60:39:d7:
37:38:84:a2:2d:cd:9a:ec:36:ca:3f:e9:b0:1b:e7:c1:df:1f:
2a:57:59:b0:65:12:6f:e7:25:5a:6e:d6:bf:f4:d4:10:1d:e8:
31:7a:8c:fe:11:ff:13:07:40:27:75:28:a8:2f:2a:24:8a:82:
10:9f:3b:2b:08:9a:a0:38:09:f4:07:4f:c8:5d:d7:31:58:a9:
fa:8b:9a:bf:9a:cc:c8:4a:23:96:43:b0:45:35:ab:29:17:f6:
1b:25:22:19:ce:35:92:dc:38:1b:96:98:80:d7:b6:11:e3:41:
bc:01:6b:31:0d:e9:19:a6:5c:25:a8:d9:9c:93:9e:b7:6f:92:
1f:ea:83:34:55:4f:87:d3:76:65:64:f4:53:74:8a:63:0f:ab:
7a:7b:f2:16:19:5c:14:55:25:7d:30:2a:e3:be:53:f3:dd:35:
93:0c:e5:22:a2:1c:dd:82:10:8c:34:3e:22:60:0c:ea:fd:c4:
e5:cb:46:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:37:34 2025 by rpki-client