Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/di5hW9_mS4VX9LodFsUPwlGB9AM.roa
File: di5hW9_mS4VX9LodFsUPwlGB9AM.roa (raw, json)
Hash identifier: eFBJ0fo6qLxe4UOy9GCL5Us8abolcyAO7Lc5rqUOc7g=
Subject key identifier: 76:2E:61:5B:DF:E6:4B:85:57:F4:BA:1D:16:C5:0F:C2:51:81:F4:03
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 665C
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/di5hW9_mS4VX9LodFsUPwlGB9AM.roa
Signing time: Sat 31 May 2025 01:11:37 +0000
ROA not before: Sat 31 May 2025 01:11:37 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26204 (0x665c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 31 01:11:37 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=762E615BDFE64B8557F4BA1D16C50FC25181F403
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:81:49:2e:58:28:72:d6:3e:18:cf:4c:0c:83:
88:78:b9:98:0e:71:86:f6:ad:2d:c6:42:34:1d:72:
76:f6:24:a8:98:07:6a:24:e1:d3:46:04:2c:45:b2:
6f:4f:c1:4b:42:b1:1a:51:ba:6b:a2:b2:2f:49:b3:
a2:d0:58:89:db:d2:a1:c4:ee:ff:e9:d6:48:39:78:
70:5d:38:6c:6a:4c:56:c0:0f:1b:08:ed:cf:52:3c:
0b:e2:9f:02:f1:8f:08:9e:54:23:4d:27:61:16:80:
00:2d:c3:3f:76:96:8b:92:e5:fd:80:70:fd:eb:e4:
c4:db:df:b6:ed:3c:80:a4:ae:90:fb:27:78:63:b8:
76:ea:5f:93:a6:56:72:8b:ed:e8:03:9a:6d:2d:31:
3c:d9:88:e5:82:e0:c7:c7:7e:fd:37:ed:65:9d:5c:
9c:25:8a:3a:e6:ff:b2:ef:fe:94:f4:a7:5c:25:fb:
b7:1b:5a:20:21:a2:a3:18:dc:e7:9f:9f:99:f3:82:
d4:39:03:06:04:14:cb:b7:03:64:7a:c3:f3:c9:d7:
6b:1a:83:e2:5e:93:24:f8:7c:fb:f8:61:a5:bb:65:
35:0c:61:cb:49:57:29:b4:34:32:9e:11:59:11:28:
5d:eb:0b:a4:06:60:7c:0a:fe:6e:22:3d:f7:a0:89:
0b:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:2E:61:5B:DF:E6:4B:85:57:F4:BA:1D:16:C5:0F:C2:51:81:F4:03
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/di5hW9_mS4VX9LodFsUPwlGB9AM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
1e:15:c0:9a:bb:5a:09:d6:5f:8f:d9:c8:09:23:e2:41:e5:0b:
8b:c9:d5:42:e2:55:3e:03:39:e2:f4:47:5b:09:6b:e6:a3:72:
8a:54:ad:d9:67:7b:13:4f:27:17:5c:29:03:75:cf:54:18:bb:
fc:fa:b9:e4:4e:e2:eb:3e:3d:68:99:da:78:63:a6:32:14:e6:
62:77:6a:c3:14:9a:28:7c:fa:f7:95:e8:c5:b6:73:6f:51:62:
17:2b:91:db:de:b4:5d:7e:28:e3:a9:4c:b2:16:63:22:cd:31:
33:ee:63:5a:6a:a7:03:57:8e:50:4b:d4:28:2e:77:64:99:2d:
c1:c3:c4:98:fa:3a:51:ad:51:d7:60:23:13:85:21:a9:74:cf:
b9:f9:72:9e:a1:2f:0c:54:14:c0:f5:36:e0:b6:71:81:67:1c:
ba:80:89:e2:a8:27:ba:8e:c9:d9:0c:fa:ee:bd:c0:ad:64:de:
2a:8e:f1:ff:73:c1:2d:10:2a:b2:61:50:6d:23:a5:07:76:f2:
c9:30:2f:a6:41:d1:3e:f7:2d:a9:86:a6:1e:79:8c:d1:d2:b3:
1e:80:ce:6d:54:8c:8f:99:3c:07:ff:da:76:0c:6d:46:c6:8e:
f8:f5:c9:f8:9c:77:80:5d:81:b2:df:9f:4b:62:55:84:3e:a2:
81:36:0b:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 01:23:37 2025 by rpki-client