Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/gqOqMzJamT9emNnHTXLxHtgkNIc.roa
File: gqOqMzJamT9emNnHTXLxHtgkNIc.roa (raw, json)
Hash identifier: 6MEtHWZ4fwhA4puTmrtDHOqgLAj4TYpXAThvr6FQ2vY=
Subject key identifier: 82:A3:AA:33:32:5A:99:3F:5E:98:D9:C7:4D:72:F1:1E:D8:24:34:87
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 7484
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/gqOqMzJamT9emNnHTXLxHtgkNIc.roa
Signing time: Tue 08 Jul 2025 00:45:02 +0000
ROA not before: Tue 08 Jul 2025 00:45:02 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29828 (0x7484)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jul 8 00:45:02 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=82A3AA33325A993F5E98D9C74D72F11ED8243487
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a6:df:81:39:ab:4b:e8:3b:91:b8:36:6a:f7:
41:56:d8:67:76:44:e3:90:e7:b4:db:aa:cd:ca:5f:
26:88:c1:d0:20:1f:29:1e:1e:0b:bb:4f:09:dd:df:
70:69:18:73:3d:10:9c:ec:d8:dd:59:a7:8e:a5:91:
38:06:1b:1b:5c:43:5c:50:07:a5:1b:41:1e:d7:1e:
fa:2b:56:f2:eb:90:26:f2:12:1d:f1:12:39:ed:a5:
af:cb:08:6a:6e:87:28:ec:7b:82:f2:9a:94:9c:5d:
52:bd:c0:92:98:75:c9:74:45:63:c4:7f:1b:26:5d:
de:fc:28:72:d6:a2:9f:53:cf:9d:67:a5:cf:17:27:
bb:39:24:f1:fd:7f:b5:36:58:5d:b0:0c:4b:e3:ef:
91:20:3a:c8:56:e6:c0:dd:d1:4f:cc:33:e6:27:c3:
93:52:04:a3:85:93:07:3e:36:29:1d:48:c0:66:49:
94:bd:af:e8:d0:4c:22:6b:09:d3:98:25:4c:f3:e3:
40:00:a7:87:d2:87:73:a2:2a:dc:ae:46:31:51:82:
4a:5f:ff:f4:41:46:1a:1a:70:d5:2b:9d:50:33:82:
88:bc:a3:e2:fd:50:98:c6:d4:43:c6:32:cf:b6:07:
1d:0b:32:a6:03:40:e8:e2:48:f3:a4:c3:79:70:62:
75:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:A3:AA:33:32:5A:99:3F:5E:98:D9:C7:4D:72:F1:1E:D8:24:34:87
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/gqOqMzJamT9emNnHTXLxHtgkNIc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
3c:ec:ad:f7:3b:d2:70:33:ab:b2:c1:54:b0:f9:ba:b6:45:94:
16:95:6d:77:4b:d2:1d:30:e7:3b:71:e5:bd:f6:e6:91:8e:16:
54:93:99:30:0b:fd:eb:fe:f5:0c:f3:e8:56:6f:c0:9b:50:49:
ef:be:ad:42:b8:65:10:18:bf:0c:0c:1b:51:c0:9c:e4:4e:41:
70:a0:95:6f:11:ad:ad:6a:c7:48:c4:05:ce:72:b0:7e:fe:b2:
9b:69:05:92:82:7e:bf:b4:d4:cd:73:50:ad:d5:ff:41:38:af:
36:32:07:7e:56:a3:f6:95:83:25:9c:42:95:5e:c2:97:13:65:
56:05:34:17:41:47:94:2e:53:2a:5b:ac:68:4c:8a:07:a4:d2:
4b:54:d0:42:3d:a1:5a:54:3b:6f:15:7c:8a:4b:94:0f:43:99:
2c:4a:db:e5:fd:1f:df:ca:b8:12:43:0c:a0:d3:8c:8b:d5:7e:
25:2e:d0:e1:cc:47:05:82:73:d5:b2:e6:f8:2c:9d:82:8a:70:
fa:81:a3:b4:3e:cc:37:dc:0d:90:49:b4:26:92:e4:74:bc:56:
78:52:fd:23:1a:7d:00:d4:9b:36:70:e3:d1:dc:9b:d4:9c:96:
f2:a4:cc:6f:a7:65:54:4b:cb:89:cf:8b:ed:03:a1:8a:d8:10:
9d:38:e7:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 16:37:06 2025 by rpki-client