Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/jAwafRjBYrK18uRHGIvSrKzHCpk.roa
File: jAwafRjBYrK18uRHGIvSrKzHCpk.roa (raw, json)
Hash identifier: jyShHT7UYdO6KUh04a3HV95tkLp9Vj+zoR9Nb2c/Pm8=
Subject key identifier: 8C:0C:1A:7D:18:C1:62:B2:B5:F2:E4:47:18:8B:D2:AC:AC:C7:0A:99
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 6E48
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/jAwafRjBYrK18uRHGIvSrKzHCpk.roa
Signing time: Sat 21 Jun 2025 15:47:48 +0000
ROA not before: Sat 21 Jun 2025 15:47:48 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28232 (0x6e48)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jun 21 15:47:48 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=8C0C1A7D18C162B2B5F2E447188BD2ACACC70A99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:32:8a:91:81:10:5d:01:e0:90:ae:d8:bd:3a:
fa:ce:4f:c3:f5:e4:2b:68:c6:0d:46:d8:39:28:81:
7a:3a:26:42:80:98:84:46:8a:06:6e:e3:82:ee:d6:
b2:d0:df:32:f8:c7:f4:9c:39:4a:42:7e:ef:59:ee:
b6:6e:b6:55:6b:e3:1d:48:fb:63:67:21:74:87:b1:
d8:23:56:de:95:f3:e8:7f:8a:1e:0c:60:7b:5c:c5:
af:7f:1c:c9:0a:6d:64:a8:66:86:14:d4:44:12:f6:
fa:b2:0f:1c:69:b8:27:82:ad:80:59:80:5a:7b:c8:
6d:5b:2e:41:41:d0:4d:b4:aa:30:83:0c:1d:19:58:
06:11:16:17:e5:f8:d4:00:40:78:f0:91:d2:69:0c:
b1:6d:c6:0f:af:48:ee:2d:36:67:4d:a6:2a:7f:5b:
56:a1:30:3c:59:04:50:e1:bc:c1:61:de:4d:a5:d8:
e9:e1:2d:f6:04:d5:4b:e8:13:b7:70:f5:df:c8:06:
d1:9c:5a:c8:91:0c:c1:73:23:0d:14:2a:91:2b:78:
e1:11:49:67:d1:87:95:cf:c2:36:7b:ae:48:40:89:
7d:da:16:04:7f:3a:32:a4:0e:5f:4e:a9:82:e0:7d:
c3:05:12:09:4d:ab:48:6b:2e:9c:a4:12:73:9e:89:
be:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:0C:1A:7D:18:C1:62:B2:B5:F2:E4:47:18:8B:D2:AC:AC:C7:0A:99
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/jAwafRjBYrK18uRHGIvSrKzHCpk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
7e:58:24:ea:74:b5:9f:52:2c:39:f5:09:bd:91:0a:61:32:f8:
57:cc:61:a4:64:4c:66:90:4b:6f:45:56:63:cc:04:41:4d:f6:
b3:01:01:d4:75:ff:c8:bc:7c:c5:49:41:5f:f6:b0:13:14:0c:
f9:ff:56:1b:09:44:f1:f7:3c:22:9d:cd:33:09:2d:2a:40:c5:
93:36:77:86:1d:92:dd:80:c5:81:ef:1e:15:c6:f5:4d:35:87:
e4:62:f2:3e:ff:a1:e2:ec:2e:33:77:1d:97:c3:80:2d:08:e8:
57:99:e8:d7:35:86:10:2a:59:30:dc:0b:cf:8e:48:ed:9a:1d:
c0:c9:5a:ec:64:88:2e:3d:aa:5c:32:6b:2f:57:df:fb:4e:b5:
07:cb:9f:19:80:84:92:9a:ba:6e:e4:08:f0:8a:49:07:31:d6:
d2:03:7e:81:8e:d0:3f:57:9d:34:be:66:d3:bf:c7:c2:64:36:
56:b0:91:b1:e2:05:ee:11:7c:51:fe:5e:5c:37:3d:24:c1:a7:
c1:eb:96:4a:ac:9a:32:5e:61:ff:e6:48:ff:89:bf:58:12:f8:
2f:b3:14:c1:b4:29:b2:fa:36:ef:cd:0c:80:c2:2e:5a:70:29:
0d:50:60:e4:fd:f1:57:18:6e:5a:3f:2a:c0:d4:b3:b5:7c:f6:
77:40:26:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:37:04 2025 by rpki-client