Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/exuTyE2Cq_WczclU-Ur12yt5uag.roa
File: exuTyE2Cq_WczclU-Ur12yt5uag.roa (raw, json)
Hash identifier: z6dvQr8Fga4ZyVewwMpeHqowaNAr2kc04MhAO1AL4uw=
Subject key identifier: 7B:1B:93:C8:4D:82:AB:F5:9C:CD:C9:54:F9:4A:F5:DB:2B:79:B9:A8
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 620E
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/exuTyE2Cq_WczclU-Ur12yt5uag.roa
Signing time: Mon 19 May 2025 13:43:58 +0000
ROA not before: Mon 19 May 2025 13:43:58 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25102 (0x620e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 19 13:43:58 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=7B1B93C84D82ABF59CCDC954F94AF5DB2B79B9A8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:60:2a:33:67:68:2c:c4:b9:f3:8e:1c:53:6b:
32:37:c3:26:b2:cc:99:16:0c:cc:d3:e7:9d:cf:a9:
45:53:a1:db:40:b0:8f:e3:5a:c4:9d:d8:3a:4f:c2:
b7:9e:4f:27:64:f9:de:36:16:30:cf:b9:43:a5:66:
af:07:95:9a:db:25:51:3a:15:9c:e6:a6:2c:4e:54:
9d:5d:b8:9a:7d:95:25:ad:58:5e:dc:9b:b3:18:ba:
20:81:16:35:40:c1:60:ea:11:8e:7f:55:4e:3a:1c:
4d:56:85:1a:a1:9f:7a:75:1c:5b:bf:d9:e5:d5:c8:
db:28:dd:25:86:7d:85:3d:16:1d:62:77:be:10:f4:
3e:4b:36:98:bc:59:4b:85:24:47:55:57:47:c3:3c:
a8:4f:d8:ab:d2:59:6c:dc:69:c6:6b:7f:60:cb:a8:
ad:d3:3a:bc:c1:e2:f7:fb:ee:23:d0:f8:33:70:2a:
60:0c:7a:01:56:da:f9:e0:59:d8:cb:14:47:3e:ad:
e1:b1:da:bf:0b:2b:1f:13:54:d6:65:35:e7:5e:0c:
7d:9a:b9:bf:c5:dc:5b:e6:78:9e:39:f2:ff:5c:ef:
92:10:0e:1b:08:45:70:25:ca:c5:00:d1:8d:a5:4f:
84:9d:b1:80:c6:80:d3:55:8f:b9:37:ee:36:7e:8d:
4c:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:1B:93:C8:4D:82:AB:F5:9C:CD:C9:54:F9:4A:F5:DB:2B:79:B9:A8
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/exuTyE2Cq_WczclU-Ur12yt5uag.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
1a:f1:57:f8:47:7e:d9:68:67:84:df:bd:41:9b:8e:03:fa:b1:
5a:2b:3c:8c:db:f9:7a:f5:28:b2:c0:7a:5b:95:19:83:a9:72:
36:31:18:39:d6:46:b7:c1:27:d4:02:03:c2:f5:52:f7:dd:cd:
61:96:87:ed:1e:a8:06:9e:fc:d1:03:ee:26:cf:cb:72:b7:c8:
d8:7d:1f:f9:d8:64:bd:e5:e7:b9:64:45:5b:de:ad:1f:5c:fb:
5d:cc:fc:9d:00:45:d5:b2:25:58:36:7b:e7:fc:0b:5d:91:be:
79:94:24:dd:10:c6:fc:75:73:4b:64:06:21:2c:f0:0e:d3:80:
ff:54:bb:ce:ae:90:6b:16:7b:07:81:10:18:c8:c3:a7:89:5a:
0c:93:ce:e7:22:83:fd:84:6c:6d:de:d5:40:9e:8c:d4:cd:89:
c9:36:03:01:cc:bd:a8:87:a7:68:2e:95:3e:be:63:d8:43:8d:
c1:e7:f8:15:5e:6b:45:f3:f1:af:f3:68:b0:5d:a3:f5:b6:0a:
f3:d6:77:bc:56:98:c4:b6:72:97:af:9c:c3:1a:f6:2a:0c:f6:
56:f1:63:6a:c1:c4:07:c7:23:21:30:d7:16:0e:7a:75:0b:7e:
9b:22:48:f4:43:fc:fb:bb:58:52:dd:ab:74:ac:e4:96:71:4e:
a9:41:a2:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:49:38 2025 by rpki-client