Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/jPXvEtKFDbLsmWRqrlXwLCSG4R8.roa
File: jPXvEtKFDbLsmWRqrlXwLCSG4R8.roa (raw, json)
Hash identifier: SRB47NQk0JywAILQCRv63ggxpk8F1zFPZAgrQ1qqYuQ=
Subject key identifier: 8C:F5:EF:12:D2:85:0D:B2:EC:99:64:6A:AE:55:F0:2C:24:86:E1:1F
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 7438
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/jPXvEtKFDbLsmWRqrlXwLCSG4R8.roa
Signing time: Mon 07 Jul 2025 05:47:08 +0000
ROA not before: Mon 07 Jul 2025 05:47:08 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29752 (0x7438)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jul 7 05:47:08 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=8CF5EF12D2850DB2EC99646AAE55F02C2486E11F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:37:e0:9d:10:05:8e:30:7a:f1:79:16:61:7a:
d5:e2:b7:a3:2a:51:8c:dd:e1:88:12:0b:fd:64:77:
f6:e0:11:87:87:45:0e:b4:41:4e:e6:26:e4:c1:60:
27:3a:d0:32:81:ee:67:6b:f6:87:ba:39:58:f2:04:
26:0c:68:46:42:a6:eb:7d:09:a6:06:92:93:10:84:
e9:cb:11:01:c0:e5:79:ed:42:5e:14:09:24:3f:65:
0f:2b:7f:4b:d3:e9:7b:63:a1:16:29:47:b9:aa:5c:
f8:c3:a7:59:ab:27:11:b3:aa:13:67:60:89:94:57:
1e:51:6d:3a:77:52:93:3d:9c:e9:10:9f:7c:ff:27:
1f:86:b6:49:98:cd:70:b0:6e:2b:8a:d5:66:a1:01:
84:4d:fd:77:87:39:9b:7b:84:d9:e0:26:8c:4d:ef:
53:6b:8b:6f:5c:d5:71:d2:a2:18:b1:01:7c:17:22:
89:78:a1:50:cb:62:29:4a:af:bf:66:11:61:72:f0:
4b:d7:2b:c9:ff:72:03:45:b8:5b:5e:e6:1a:56:e3:
4e:02:e3:84:5f:ef:a7:41:39:5e:8d:29:21:2e:80:
37:7f:76:a7:2f:8b:8f:f5:f1:80:44:93:f4:d9:b2:
92:f6:0f:b7:60:ed:c9:4d:b0:fc:58:08:cd:69:a9:
78:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:F5:EF:12:D2:85:0D:B2:EC:99:64:6A:AE:55:F0:2C:24:86:E1:1F
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/jPXvEtKFDbLsmWRqrlXwLCSG4R8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
96:9d:9b:0a:c0:63:6a:fa:1f:66:16:64:5a:dd:f5:e2:72:36:
92:0d:0c:de:a3:88:b8:ca:16:82:69:74:4a:c0:1c:f1:ce:a1:
10:08:bf:7a:b0:f0:d1:ec:51:6a:54:71:d3:ea:04:26:6d:82:
7b:75:50:3c:b5:09:2e:b5:bf:46:6a:ce:17:bd:fa:2a:7c:af:
94:19:75:9f:82:9a:6f:2e:bd:2b:40:6a:ad:29:3b:ee:f6:df:
f0:3d:fd:79:b8:2f:a0:c3:c4:3d:18:76:3a:ec:02:12:d3:e1:
d6:e2:4d:ba:22:0b:7b:8b:f8:5f:12:0f:71:23:df:fa:5d:0f:
99:0e:74:63:b8:dd:47:ef:ab:d9:b5:45:1d:90:c4:cd:80:b7:
25:62:ad:ef:a7:77:0e:01:06:f5:c3:b9:3f:09:56:69:25:ea:
cb:6a:f4:4a:1c:c6:7f:b7:9c:ab:a5:1f:62:67:1d:71:8a:f3:
ac:46:e3:82:21:12:34:f9:69:04:04:67:5f:51:f6:87:8d:27:
2d:d9:87:96:f7:d4:bd:71:f2:94:44:8f:78:7b:1b:1b:a3:d1:
a7:cc:c3:25:b2:7e:fe:b5:ef:29:b0:0a:a2:e0:6f:7e:32:7e:
21:e0:f7:5d:46:ca:7b:6f:17:a2:71:5f:8a:fe:aa:66:92:ac:
e6:5b:ef:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:34:19 2025 by rpki-client