Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/hBV1fGpLy-04OyMlKCrvXkv9Hm0.roa
File: hBV1fGpLy-04OyMlKCrvXkv9Hm0.roa (raw, json)
Hash identifier: KmVUo0JwRp0XsFQbmu7SLYRBluWZDxDSDJUkqUye9Uo=
Subject key identifier: 84:15:75:7C:6A:4B:CB:ED:38:3B:23:25:28:2A:EF:5E:4B:FD:1E:6D
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 7476
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/hBV1fGpLy-04OyMlKCrvXkv9Hm0.roa
Signing time: Mon 07 Jul 2025 21:14:57 +0000
ROA not before: Mon 07 Jul 2025 21:14:57 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29814 (0x7476)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jul 7 21:14:57 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=8415757C6A4BCBED383B2325282AEF5E4BFD1E6D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a6:a0:6c:c4:0c:bc:78:16:a4:d4:9c:12:b4:
b1:b3:34:1e:83:f3:94:58:81:83:47:36:bd:cb:34:
d6:4d:92:52:2d:ef:36:ab:de:3a:46:c2:00:0d:8d:
cc:b6:f1:f4:e1:96:52:69:a3:c6:d3:3e:8f:8a:11:
85:27:a1:59:5d:43:75:4b:c3:88:94:53:b1:62:22:
df:c5:fe:06:76:d9:79:8d:9b:a7:fb:10:5e:c2:c7:
dd:af:2d:ef:e2:3c:9d:ee:09:15:8e:5f:1d:65:0d:
4e:2d:5f:ff:5a:cb:92:73:bd:26:8b:45:9c:ce:a5:
81:98:8a:3e:c8:e2:54:22:80:b9:68:9e:f3:24:d0:
b7:fa:20:8c:af:ea:c6:ab:77:41:6b:30:82:26:13:
4d:73:a2:8a:6b:8e:38:e9:11:28:5f:32:82:8f:95:
67:34:9f:6f:42:ba:4a:4d:08:9c:87:5a:11:44:ca:
df:bd:28:72:67:81:62:b3:7a:18:63:5b:c9:13:ed:
5d:a9:74:80:b4:08:fa:ff:da:9c:38:21:0d:45:69:
54:0a:ea:cd:ab:bd:32:6b:db:af:ab:ad:85:40:3d:
86:51:3b:00:7c:d9:28:46:62:48:30:4c:83:7d:1b:
bc:bb:8c:1c:0f:3d:a9:3f:b7:13:05:b1:c6:cc:c8:
17:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:15:75:7C:6A:4B:CB:ED:38:3B:23:25:28:2A:EF:5E:4B:FD:1E:6D
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/hBV1fGpLy-04OyMlKCrvXkv9Hm0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
51:08:93:c7:98:b0:b1:a6:4d:d8:f3:f6:0a:76:2b:c3:0d:83:
f2:ae:ae:f6:02:5c:be:b9:f6:66:6f:b5:94:7b:9c:ca:a6:90:
0a:46:c6:a6:11:0e:09:32:f0:49:e9:27:d1:15:37:47:37:34:
26:b4:31:bd:55:3d:b5:03:73:7d:ab:a8:59:4a:90:5d:02:c3:
58:a6:17:bb:a6:d8:18:e0:8a:4d:c1:b8:df:07:27:a8:f4:52:
1a:cd:bc:91:c4:9e:d1:d1:6d:cb:20:84:c5:78:3e:12:52:19:
eb:b5:2f:9f:f7:30:5d:f4:64:25:8a:87:b2:f5:28:04:5f:6a:
4b:f6:60:69:82:59:74:56:3b:e7:cb:c9:fa:a2:d2:40:b3:c0:
76:dd:00:79:bc:f3:8c:45:9e:5c:14:d6:87:a0:db:4b:9a:f8:
ad:1e:d1:0e:2c:6d:0b:09:db:81:0a:d5:e1:ff:71:51:89:9c:
ff:68:3b:9c:b0:67:62:e5:6b:f9:12:8e:31:d3:76:53:fe:bf:
fa:3f:98:39:a0:ee:6c:c7:3e:c3:69:1f:d0:b4:1e:30:6d:23:
ef:2c:fc:c5:f3:c0:4d:b6:f3:c8:e6:75:8c:c3:83:a2:29:5b:
b3:70:f0:6c:ba:80:86:ad:19:4b:d4:40:0f:ad:c0:2a:a2:4c:
24:ae:f7:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:50:42 2025 by rpki-client