Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/jEU00E5HW1wGiN_r-uU4dGSaytU.roa
File: jEU00E5HW1wGiN_r-uU4dGSaytU.roa (raw, json)
Hash identifier: fWTnxTtklP7iPCuYFb7Ofa+Dr9mJZDy5TuPMJEQAAp8=
Subject key identifier: 8C:45:34:D0:4E:47:5B:5C:06:88:DF:EB:FA:E5:38:74:64:9A:CA:D5
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 64D0
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/jEU00E5HW1wGiN_r-uU4dGSaytU.roa
Signing time: Mon 26 May 2025 22:11:48 +0000
ROA not before: Mon 26 May 2025 22:11:48 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25808 (0x64d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 26 22:11:48 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=8C4534D04E475B5C0688DFEBFAE53874649ACAD5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:42:1a:7b:ab:70:38:b3:9f:f2:10:4b:8e:fc:
f6:f3:55:13:fe:a6:f3:49:8f:44:2b:35:64:f5:76:
70:27:c5:4b:a4:ea:56:9f:62:42:35:2d:eb:75:a5:
bf:f9:c4:a5:f3:e4:f8:c5:f6:2d:a8:af:a3:62:3b:
28:6c:14:61:3e:33:7f:90:49:17:77:5a:28:6a:61:
86:d3:27:b8:ab:be:29:a3:58:cc:ab:3e:15:f2:aa:
52:9c:71:bf:83:b8:de:bd:3d:a5:54:00:91:d3:b3:
6f:eb:c2:32:8a:8b:35:c0:ab:52:8f:17:28:47:d7:
75:de:04:02:f2:e3:b6:8a:b4:8d:83:a7:c1:67:65:
e7:b3:87:17:fd:27:6d:b9:48:10:35:f7:63:36:e9:
1d:c2:c1:7b:84:ea:40:0a:0a:32:98:07:c3:c7:9b:
be:6e:50:1a:13:f5:92:e4:9c:4a:55:2a:5d:47:a6:
e3:8d:30:ff:32:5a:91:cf:79:83:b1:c8:e0:b0:6d:
c6:89:5d:45:a4:aa:5a:84:a7:5e:da:22:f4:45:41:
09:f1:f1:c9:ed:43:8a:1b:c0:a6:0e:7a:f2:19:b9:
91:e9:c9:77:e2:df:d2:f4:ae:50:1c:16:ac:3a:04:
8b:65:57:7b:37:b2:49:24:d1:ac:fb:63:f5:e1:4f:
1a:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:45:34:D0:4E:47:5B:5C:06:88:DF:EB:FA:E5:38:74:64:9A:CA:D5
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/jEU00E5HW1wGiN_r-uU4dGSaytU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
18:94:8e:50:59:40:90:ff:e6:79:6b:96:1f:d2:3d:41:f9:b5:
6e:9e:04:af:d8:54:5f:50:22:b5:47:a1:ef:c2:d1:9f:36:f3:
32:ac:c9:a9:52:26:6a:5b:16:58:3b:80:26:e2:e4:10:e6:bd:
9e:42:f1:30:10:ba:20:2a:93:7d:7e:5c:2c:56:f9:bd:ec:80:
7f:a6:8b:80:f1:93:86:6e:27:9d:f9:3e:23:c5:c6:52:06:92:
04:b2:3e:f4:e9:c2:fe:ec:98:6f:e6:f4:ac:c7:96:7d:1c:8a:
eb:47:79:26:65:fc:4a:8d:b3:fb:4d:b7:1f:d8:ec:db:e0:c4:
31:36:2e:cc:38:44:98:0a:e3:10:8b:1e:4e:87:94:6e:03:12:
47:06:67:92:37:09:2a:52:16:03:d9:22:e1:01:be:c5:e5:46:
c7:35:e3:6b:4f:b7:e5:a9:42:98:98:7e:2a:03:c7:12:36:e9:
53:27:5f:e5:27:d6:51:cd:50:74:03:56:1d:f3:ab:22:57:00:
fa:89:67:33:3a:af:ac:4d:c0:8a:f5:1c:c5:8e:0b:0a:8a:e9:
c1:f6:0b:ec:f2:a1:83:60:98:ad:f9:57:65:7d:16:b7:dc:eb:
89:e9:fc:2b:10:1c:7c:0c:09:39:ba:b1:ee:7b:a9:37:e8:7c:
ce:35:53:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 00:43:10 2025 by rpki-client