Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/eXb9klx38ZhEjlVdit7aGlPUFaY.roa
File: eXb9klx38ZhEjlVdit7aGlPUFaY.roa (raw, json)
Hash identifier: czGHwzMmv3itDdOW4eHcwSTjR3NBR2MbXRspUDkpLz0=
Subject key identifier: 79:76:FD:92:5C:77:F1:98:44:8E:55:5D:8A:DE:DA:1A:53:D4:15:A6
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 6CCE
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/eXb9klx38ZhEjlVdit7aGlPUFaY.roa
Signing time: Tue 17 Jun 2025 05:42:24 +0000
ROA not before: Tue 17 Jun 2025 05:42:24 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27854 (0x6cce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jun 17 05:42:24 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=7976FD925C77F198448E555D8ADEDA1A53D415A6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ac:a6:21:8d:5d:e7:23:9f:b5:a4:01:1c:1e:
51:f9:41:43:5b:81:53:6e:c8:e6:45:41:24:4b:5e:
3e:5c:54:02:28:d0:c2:67:58:72:6c:78:b6:63:05:
04:8e:a3:ca:29:5e:a4:a8:1e:23:e3:24:f8:47:9a:
04:09:3d:f9:5b:39:0c:82:29:b1:d6:c8:0b:2e:87:
9d:e6:40:ce:5e:24:eb:f0:2b:02:58:cc:20:09:d5:
33:5e:43:63:27:2d:07:db:59:4f:c2:08:91:29:06:
d2:65:97:b3:42:84:e0:0a:dd:36:6c:7a:e2:53:35:
30:97:51:31:6b:62:81:c1:38:b7:23:41:7f:9f:18:
ce:04:5b:31:25:c7:32:da:ea:1c:72:71:53:7d:01:
a8:48:c8:3f:0b:52:e0:cc:3b:1f:70:a5:9c:f7:2d:
22:0a:e7:0a:53:ca:4e:71:14:0f:aa:ca:4e:40:ff:
b6:2a:b3:a1:7e:7a:2a:8a:7e:11:ab:d8:ac:75:82:
5d:51:fa:38:9a:6b:2a:65:f3:ef:24:77:fc:b3:d9:
7b:fe:4d:b8:a8:ca:d7:f3:9f:ab:e7:3e:9b:46:85:
d4:5d:c5:72:c9:33:db:a7:98:30:ce:d1:02:21:4e:
01:ab:62:bc:c3:1b:a3:54:14:38:0e:b5:d0:54:5e:
af:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:76:FD:92:5C:77:F1:98:44:8E:55:5D:8A:DE:DA:1A:53:D4:15:A6
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/eXb9klx38ZhEjlVdit7aGlPUFaY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
57:ce:b6:a7:4e:e6:a1:9d:ff:61:45:ae:f8:13:26:68:bf:5f:
93:e0:18:00:42:ac:43:d4:16:d1:7f:7e:b3:2f:a4:51:3d:11:
78:43:26:ca:11:24:58:95:db:06:d9:00:01:d0:05:85:49:fa:
fb:e3:a7:05:a3:f5:1b:f6:74:dd:f2:38:68:7a:ed:19:ce:cf:
6f:7c:a4:5e:32:b3:0d:82:1e:41:fe:7d:15:c0:30:d8:f0:45:
ab:2a:62:19:ff:68:60:f8:01:43:c8:d2:b6:1c:ea:b4:0e:02:
ed:46:6d:28:39:ee:5b:03:2e:2b:f6:b3:9c:ff:c3:0e:a8:96:
09:17:e8:b6:5a:da:be:95:c8:41:49:97:65:36:62:97:43:5d:
93:69:4f:a7:0c:f7:77:06:52:94:d7:09:ea:7d:7c:a0:18:d8:
fd:1b:02:2d:68:23:de:f6:99:34:7f:9f:bd:b9:6c:56:de:3a:
23:1a:b2:5c:7d:36:6d:43:07:a6:ad:ca:e2:5e:ea:62:97:53:
84:46:45:df:18:66:37:02:e1:7e:0d:1a:e7:57:f7:7c:b7:24:
ac:ee:d0:e2:26:e8:fc:8b:53:4c:9d:f2:fd:4e:4f:ff:da:10:
2b:a2:47:4a:6d:45:b9:10:5d:a4:33:e2:a6:ed:1b:7b:27:45:
19:7a:44:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:51:28 2025 by rpki-client