Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/i7yqWsSX7iwbbcT_7hWXqf0MKHA.roa
File: i7yqWsSX7iwbbcT_7hWXqf0MKHA.roa (raw, json)
Hash identifier: vqL8JubOWBtD/CC6BkLTwRue9iIWNTFxMQHj03SHFao=
Subject key identifier: 8B:BC:AA:5A:C4:97:EE:2C:1B:6D:C4:FF:EE:15:97:A9:FD:0C:28:70
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 6216
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/i7yqWsSX7iwbbcT_7hWXqf0MKHA.roa
Signing time: Mon 19 May 2025 15:40:36 +0000
ROA not before: Mon 19 May 2025 15:40:36 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25110 (0x6216)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 19 15:40:36 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=8BBCAA5AC497EE2C1B6DC4FFEE1597A9FD0C2870
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:45:23:9b:cb:f5:71:8a:72:15:95:4b:66:e9:
c1:89:93:7d:e5:90:44:4d:42:e4:87:71:33:89:e7:
1a:1a:f0:44:3a:a1:1e:53:c3:e4:58:4d:8e:b3:32:
79:d1:c9:42:e8:4a:e3:80:ed:66:04:64:90:2e:57:
f5:f7:23:10:28:27:9a:ae:fc:10:a6:9a:1e:7b:4e:
61:34:d8:4a:dd:70:36:1b:74:80:97:1c:88:a2:13:
b7:1e:50:11:bf:62:39:d0:08:2b:ac:8c:8f:cb:f6:
38:a8:32:82:8b:ad:d8:31:cf:a5:e3:76:5d:95:fb:
ab:cb:33:c5:60:f9:52:6a:d4:6c:34:1b:bc:69:0d:
6e:d9:5b:49:1e:00:1f:6c:3c:ac:c7:9e:b2:8a:64:
7b:b7:af:04:f6:0c:3c:14:58:63:6e:84:6d:b1:86:
2b:2e:09:b9:17:42:fd:34:31:8a:9b:eb:c7:ba:d1:
c8:77:55:7d:03:7b:5a:18:15:a5:d4:de:bc:4d:ea:
bb:26:ec:de:bc:fc:3b:0b:47:10:b9:e6:47:73:4d:
42:ab:25:e3:52:cc:b7:5d:51:58:98:c0:04:44:c7:
ef:70:81:05:56:6b:a5:f9:2e:53:75:1d:42:54:6c:
d5:e8:e6:24:d8:01:75:92:66:d3:26:ca:41:54:e9:
ae:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:BC:AA:5A:C4:97:EE:2C:1B:6D:C4:FF:EE:15:97:A9:FD:0C:28:70
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/i7yqWsSX7iwbbcT_7hWXqf0MKHA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
42:49:10:e3:74:aa:14:d5:9c:cc:ed:1f:3f:c7:07:d0:19:e3:
f9:4b:49:2f:8a:68:89:b8:5d:ae:90:26:4f:71:4b:23:00:1f:
60:26:ed:c4:4d:e1:19:ee:17:15:d1:38:d6:59:0a:0c:7b:28:
25:cc:f4:8f:ca:26:eb:81:cc:74:70:a8:11:63:bd:91:56:92:
b6:f6:9b:d3:16:34:4a:80:ec:16:82:92:1d:a1:6a:f3:7f:21:
e8:96:cc:8f:f1:28:37:d3:fd:85:f0:76:24:66:f7:d4:7e:f0:
bf:ac:75:c8:72:ed:34:ff:42:93:26:77:55:25:8c:23:85:3a:
f0:73:de:30:58:ac:d5:8a:54:5b:3d:76:2c:b7:15:57:b2:15:
77:9f:ea:3c:12:72:dc:65:26:1f:5a:5d:7c:44:3c:f5:1b:6d:
5c:9c:ff:5a:e9:db:03:92:9e:5d:22:ba:a8:bd:dc:93:35:d2:
34:19:0e:a0:ff:d5:6b:7a:44:b2:08:14:03:27:17:92:1b:7c:
60:42:55:95:56:fe:c5:75:e2:8f:b1:2c:7e:8a:eb:ee:fd:fb:
4c:9e:c1:4f:a7:77:4c:ae:8b:f8:5e:22:f6:ca:e3:57:04:e4:
f0:ee:a7:0f:0b:cc:f0:40:0e:f1:91:7b:cf:88:d2:08:72:c2:
da:42:a7:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 04:02:14 2025 by rpki-client