Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/jS0lh0SHkJrUKb2zV_jufCZ9KfE.roa
File: jS0lh0SHkJrUKb2zV_jufCZ9KfE.roa (raw, json)
Hash identifier: nVaY+UOrINBw2JNZLOi9W+dBqutvzQM1eoPXSIMbSGU=
Subject key identifier: 8D:2D:25:87:44:87:90:9A:D4:29:BD:B3:57:F8:EE:7C:26:7D:29:F1
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 7690
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/jS0lh0SHkJrUKb2zV_jufCZ9KfE.roa
Signing time: Sun 13 Jul 2025 12:11:50 +0000
ROA not before: Sun 13 Jul 2025 12:11:50 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30352 (0x7690)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jul 13 12:11:50 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=8D2D25874487909AD429BDB357F8EE7C267D29F1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:8f:cb:8b:81:13:c6:f3:c6:d8:b9:e7:ee:25:
8e:0f:aa:22:bc:5f:81:1e:ef:32:3c:08:21:80:a9:
0b:b1:d6:50:1b:3f:27:fe:d3:ee:73:cf:6b:d1:08:
e4:39:e2:8d:e5:1a:30:89:e8:a5:fb:da:23:a6:6b:
94:7f:ee:2f:73:86:0e:04:c1:78:81:06:e2:15:35:
16:72:57:f2:8b:42:b0:bf:f4:d3:8a:b9:af:84:a4:
96:85:b8:d5:9a:cd:5b:06:a8:3c:f7:e5:7c:99:dd:
59:d8:a6:e8:ef:c3:61:c5:15:9c:f2:52:d1:74:18:
64:52:58:d0:c0:4e:12:7f:62:1b:fc:75:ce:e3:c8:
d6:8c:39:2a:9a:79:90:ed:6b:28:15:5e:f7:be:06:
d8:45:b7:fd:fc:5e:21:13:4d:95:de:ec:76:9e:1a:
54:be:63:b7:e8:0c:02:db:80:7a:b2:6c:eb:d7:d1:
60:bf:fb:92:a9:f9:7c:9f:e8:91:ce:5f:f7:b1:9d:
63:a2:6a:c1:59:44:81:d0:9e:35:4c:f4:01:0b:60:
ca:94:2a:00:29:34:ae:95:14:e4:fa:3b:3a:15:d5:
58:28:15:de:4e:9c:de:66:9e:fb:3c:aa:d3:38:ba:
21:9c:2d:c4:f8:98:6f:43:12:26:15:ee:69:c8:c8:
f7:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:2D:25:87:44:87:90:9A:D4:29:BD:B3:57:F8:EE:7C:26:7D:29:F1
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/jS0lh0SHkJrUKb2zV_jufCZ9KfE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
2b:db:04:ce:90:72:77:80:7a:1c:bf:62:03:2d:59:21:80:aa:
c9:73:e6:5f:4c:59:df:f4:40:ac:9e:3a:0e:fb:df:66:df:15:
9c:56:34:b1:c6:3c:f4:a7:ab:84:d5:3d:7c:70:22:6f:14:98:
bc:b7:ff:1f:f6:36:29:ed:62:b6:50:45:8d:55:d1:5c:81:ab:
0a:c8:e8:b2:64:99:0d:bf:0c:c0:84:40:13:cb:24:46:4b:8b:
17:a7:e9:e1:b3:b3:b5:c9:b1:a1:bc:1c:66:c8:8b:9c:73:d6:
23:20:ef:37:13:fe:93:4b:41:b4:76:96:49:34:d2:d1:75:34:
f7:e1:de:27:ba:30:ac:46:5b:81:fe:b6:a2:5c:ce:46:8e:a2:
02:07:1a:ab:d7:7c:11:83:da:ed:4d:bf:09:61:b9:f2:f0:40:
04:72:97:9d:6b:dc:6f:4a:23:5d:ed:0c:1b:c1:2a:4a:85:ff:
f2:35:64:14:1f:75:8f:f4:d9:46:56:0e:0d:ca:b4:93:91:ec:
09:7d:b4:33:65:6c:2d:a2:71:a7:52:c7:d9:4f:db:fa:10:58:
a3:85:cc:5a:6f:80:93:6c:9a:ea:0a:b0:4c:2a:15:d0:d6:28:
0f:9b:ee:25:cb:6f:75:ec:d9:c9:30:64:dc:7c:0c:1f:73:62:
55:68:37:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:51:23 2025 by rpki-client