Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/eUlHwfh9kYIC4qA0JsN_F4UMMto.roa
File: eUlHwfh9kYIC4qA0JsN_F4UMMto.roa (raw, json)
Hash identifier: H+XFzzKVYxGlJmEJfsnSydKWJASA1E3Djb6Zp36ELmk=
Subject key identifier: 79:49:47:C1:F8:7D:91:82:02:E2:A0:34:26:C3:7F:17:85:0C:32:DA
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 7402
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/eUlHwfh9kYIC4qA0JsN_F4UMMto.roa
Signing time: Sun 06 Jul 2025 16:14:59 +0000
ROA not before: Sun 06 Jul 2025 16:14:59 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29698 (0x7402)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jul 6 16:14:59 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=794947C1F87D918202E2A03426C37F17850C32DA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:4c:34:49:92:63:58:7e:58:05:43:c3:2d:0d:
35:0e:30:56:50:ed:80:e3:a6:51:32:08:45:1c:6e:
1e:16:11:e0:86:31:07:d7:34:c9:90:86:68:3c:e2:
81:bb:8e:ea:15:04:8c:70:8d:d0:f4:8e:e3:04:b9:
55:b5:d4:ab:33:c7:e6:7e:5e:4e:58:da:8a:1e:61:
f6:94:5e:b9:05:40:81:3b:86:e9:b0:bf:2b:eb:d5:
49:0a:d6:27:b7:04:f7:f2:bc:fc:9d:fb:35:09:b5:
f8:b5:be:4c:f2:4d:96:ec:a9:12:84:f1:b8:05:44:
29:3d:9c:81:bf:89:70:b4:42:61:37:ac:aa:be:bb:
5b:0d:4a:75:47:ea:7f:76:bd:ba:d7:80:17:59:1e:
76:c8:34:82:a7:f3:d1:50:1f:65:c0:56:f3:f9:07:
6a:79:e7:03:71:5e:d8:f3:10:ea:1b:a3:19:8d:43:
8c:47:4c:de:e9:41:e6:4e:bd:ec:db:a3:e0:b1:58:
24:c3:fe:8c:ba:f0:23:93:c1:43:3a:56:ca:d4:56:
1e:c6:7f:5b:ec:1a:fb:0e:33:44:bc:41:06:c5:d3:
9c:df:23:45:f6:82:26:82:5e:22:80:91:82:aa:8c:
7f:df:46:d5:21:b8:54:d7:f6:5d:cd:b8:1b:6b:5e:
39:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:49:47:C1:F8:7D:91:82:02:E2:A0:34:26:C3:7F:17:85:0C:32:DA
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/eUlHwfh9kYIC4qA0JsN_F4UMMto.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
4f:cd:f0:aa:f3:8b:94:54:50:84:39:63:4d:69:a7:91:4a:b4:
c0:7a:07:0b:c6:96:80:d4:2e:24:4e:eb:e4:be:cf:2d:b7:e0:
9f:6c:85:50:33:cb:d1:11:51:db:7d:87:f7:31:8c:5b:d6:c9:
9a:9e:1f:03:9d:2b:5f:ca:54:24:7c:a6:19:1c:12:78:47:96:
0a:72:ae:a6:27:13:09:8f:0f:3f:6d:6b:d5:4b:b3:0c:9f:77:
3f:a6:7b:cc:00:38:aa:1d:9a:94:85:c6:95:75:a9:c1:b3:3d:
50:89:14:b3:d6:75:9f:78:45:0b:6f:31:f9:28:05:bc:ce:28:
35:22:48:e5:4f:0b:ad:00:4e:b3:ba:05:96:8c:a8:f1:b7:c1:
42:0b:10:fa:90:26:51:d9:be:ca:19:66:2d:20:3f:d9:05:7a:
b4:ce:13:51:2a:d0:ca:a2:b0:49:42:77:75:5a:0a:9b:64:2b:
0c:16:11:dd:4b:22:43:a1:c1:2e:96:30:eb:60:61:a1:85:fb:
ea:e5:fa:ef:08:19:1d:e5:84:3f:9c:d0:cb:86:b2:10:af:c6:
c1:b0:d9:75:fc:b2:31:48:21:15:4e:48:39:d8:34:fc:8a:05:
6f:74:5e:96:00:12:ef:e2:34:7d:3f:d0:90:6c:1c:0b:11:bd:
d4:a6:b6:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:49:44 2025 by rpki-client