Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/gNcuBQ_BZ54RRSiOeTiwtpUNcNk.roa
File: gNcuBQ_BZ54RRSiOeTiwtpUNcNk.roa (raw, json)
Hash identifier: mz7XFKy3p80nCsh9o/2gjpxuqHbMZU5azCkCVDgo1uc=
Subject key identifier: 80:D7:2E:05:0F:C1:67:9E:11:45:28:8E:79:38:B0:B6:95:0D:70:D9
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 724A
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/gNcuBQ_BZ54RRSiOeTiwtpUNcNk.roa
Signing time: Wed 02 Jul 2025 02:14:48 +0000
ROA not before: Wed 02 Jul 2025 02:14:48 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29258 (0x724a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jul 2 02:14:48 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=80D72E050FC1679E1145288E7938B0B6950D70D9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:99:30:05:33:2c:26:56:e1:32:17:6f:e3:85:
14:3c:a4:6b:ab:56:2a:d1:a8:b0:b0:58:de:e1:34:
01:6b:9f:7b:f5:91:ab:5a:5e:2b:e5:f0:43:15:a1:
88:de:25:7e:87:c8:bd:53:1a:b5:73:f0:cd:4d:77:
a9:98:21:5d:9f:77:c2:7b:e2:35:0b:3f:18:d0:82:
12:a3:00:cf:0f:29:6d:f4:cc:45:1b:5d:93:e3:f2:
0a:c1:e1:3d:5d:37:49:25:ff:e8:a4:0e:46:f7:6f:
bc:53:ec:b4:57:90:26:8f:05:42:3d:08:ed:43:30:
bb:bd:4a:33:ed:d4:57:45:9d:57:e6:56:ff:93:7d:
4e:4b:d6:fb:78:04:84:95:79:3b:56:8e:89:4c:f0:
96:90:fb:21:10:8f:9f:ea:25:3b:9e:7d:e1:1a:6e:
6d:e3:7d:c6:36:70:1a:57:86:e3:8e:8c:3c:7a:7f:
4f:ac:c3:d4:72:77:f8:00:ed:58:33:95:b2:d6:af:
2e:11:66:ce:bb:bd:f7:c9:5d:80:57:3d:48:4a:45:
74:d1:a5:85:bc:52:47:27:24:21:2c:19:72:61:ab:
10:f0:d7:22:d4:8b:97:5f:96:e8:35:dd:f1:26:92:
4b:b1:df:de:4a:1e:24:71:9d:92:5c:06:76:ee:24:
9e:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:D7:2E:05:0F:C1:67:9E:11:45:28:8E:79:38:B0:B6:95:0D:70:D9
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/gNcuBQ_BZ54RRSiOeTiwtpUNcNk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
02:4d:f6:d5:99:94:fe:19:34:f4:a0:76:2a:f0:18:f1:0c:8f:
d4:48:5c:10:a7:07:32:d0:4d:24:e1:a7:db:1d:6a:b2:8c:79:
a1:ed:0a:6c:d4:31:ca:47:75:b3:a5:6f:d4:a4:10:f0:3b:40:
2a:a2:bc:a0:67:ef:9a:0b:07:69:cb:5c:a5:9b:5a:a9:1e:54:
cd:4e:b3:f2:e9:08:54:98:cc:8e:eb:82:72:f8:fa:c4:99:db:
71:bb:09:31:73:65:ca:d8:dd:a1:7c:06:b1:8b:b4:3c:54:4d:
99:d6:19:ad:51:a9:82:6a:db:ce:bb:9f:9b:05:dc:97:b5:8d:
7c:3d:84:21:2a:fb:73:09:db:95:7b:40:8a:3f:eb:36:86:67:
a9:e2:98:40:89:dc:00:0b:67:40:7c:5f:74:ab:03:c1:20:da:
a3:d2:1a:38:b4:2a:82:3d:23:bc:3b:3b:e7:9d:2f:ec:0e:20:
19:12:92:bf:ae:a9:33:0c:f8:b0:e1:3c:86:38:a6:c0:a8:6b:
b9:0f:94:71:4e:e1:d9:34:49:97:99:bf:66:cd:ad:7f:9e:1b:
41:ff:cb:48:22:58:ac:f1:b8:27:72:5e:fe:c3:a5:73:99:9e:
8c:cf:fc:fe:c5:51:c5:96:ea:ae:fd:3b:b4:48:68:4e:bd:d0:
8f:67:67:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:46:35 2025 by rpki-client