Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/gJEsUYgfGLaM0mNYSyG4caTkwlU.roa
File: gJEsUYgfGLaM0mNYSyG4caTkwlU.roa (raw, json)
Hash identifier: nB/YxPeIPHFdqegVy0A6Nan241QoS4enpB5L5QHziEE=
Subject key identifier: 80:91:2C:51:88:1F:18:B6:8C:D2:63:58:4B:21:B8:71:A4:E4:C2:55
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 7896
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/gJEsUYgfGLaM0mNYSyG4caTkwlU.roa
Signing time: Fri 18 Jul 2025 21:42:05 +0000
ROA not before: Fri 18 Jul 2025 21:42:05 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30870 (0x7896)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jul 18 21:42:05 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=80912C51881F18B68CD263584B21B871A4E4C255
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:89:88:5b:0c:42:2f:5f:f3:a6:8e:b9:71:e7:
e7:52:91:dc:3d:df:16:78:ab:d9:11:34:e0:30:d7:
ea:4e:c3:a2:f6:10:d7:a5:47:6a:0d:96:d7:95:d8:
9f:3e:96:ba:36:0f:94:5f:45:87:ce:49:5d:12:ed:
e8:95:77:1f:45:dc:84:86:fc:f4:71:e7:00:da:dc:
85:c9:e8:6b:14:0d:39:d0:4e:ee:33:e7:9f:2f:91:
e6:c1:b5:13:f9:04:3c:09:31:3a:eb:64:90:6d:9c:
66:ec:0c:7a:e0:90:3e:93:72:fb:ee:35:11:b2:ca:
3d:f8:3c:de:ec:f8:8a:19:ab:de:3a:a3:8b:6c:c9:
e4:27:0c:cf:97:6d:08:0c:ba:12:60:69:bf:41:ba:
79:db:71:3f:87:be:55:af:a5:ab:b7:99:9a:bb:d1:
f9:60:5c:a5:0a:2f:b1:d9:88:84:6f:fd:f2:0c:f0:
df:1e:33:db:17:ea:01:d3:6f:ef:b3:53:af:cd:8d:
6b:48:b3:2c:8e:8f:d4:97:2c:9d:46:d5:a9:43:4d:
5e:c4:34:f2:b1:27:75:97:ad:ef:01:a5:88:58:59:
27:c0:38:35:16:6a:09:18:bd:b2:ab:00:61:fb:c9:
7f:b6:73:c9:f3:85:18:95:2f:5c:da:f1:86:8a:02:
91:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:91:2C:51:88:1F:18:B6:8C:D2:63:58:4B:21:B8:71:A4:E4:C2:55
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/gJEsUYgfGLaM0mNYSyG4caTkwlU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
61:e2:53:56:99:bf:7d:ad:19:4d:d4:82:4f:87:fe:37:19:b6:
d8:60:0e:57:d4:69:d5:e1:2f:65:1b:9b:10:06:82:6d:06:b3:
d0:06:ba:47:ae:2f:0f:38:3a:68:e6:06:83:0e:5c:b6:c1:d9:
66:7e:e1:51:1f:4e:b7:56:09:68:d7:e4:40:95:46:00:bb:80:
4c:3e:91:46:48:14:9d:5e:4b:9c:9c:54:6a:eb:bb:79:60:0e:
09:13:eb:64:e8:50:0b:c0:67:72:e7:eb:cf:66:89:06:4b:a6:
aa:56:79:b3:49:bf:51:58:0e:19:83:27:01:24:3b:99:ae:26:
93:4d:f6:2b:2a:3b:ae:0d:ca:c6:1a:47:88:b0:f5:3e:86:86:
12:2a:bb:78:8e:32:88:53:40:40:49:5c:ee:48:a8:87:f0:16:
7c:b3:c8:70:41:c6:73:44:45:ce:ad:35:50:4b:d9:e8:9c:92:
b9:34:2a:5d:3d:d9:73:2e:5a:79:ec:b0:8e:ec:9d:d8:cc:a6:
23:1a:13:a2:39:54:2d:93:ec:dd:27:b8:a0:06:65:c9:86:7d:
fd:06:87:9f:f3:85:e5:ef:49:96:1f:eb:01:39:5b:86:a9:f1:
38:13:af:b3:c4:47:7c:df:14:ab:dd:34:63:0e:62:49:fe:3a:
eb:57:dc:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:34:57 2025 by rpki-client