Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/k7q6i0uD_TVdPGU4ExHMUk1nlPc.roa
File: k7q6i0uD_TVdPGU4ExHMUk1nlPc.roa (raw, json)
Hash identifier: W1JtaN47X9OOkN/V4l2hZaLTx0H0dizI7vzXjXurDrk=
Subject key identifier: 93:BA:BA:8B:4B:83:FD:35:5D:3C:65:38:13:11:CC:52:4D:67:94:F7
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 7890
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/k7q6i0uD_TVdPGU4ExHMUk1nlPc.roa
Signing time: Fri 18 Jul 2025 20:12:14 +0000
ROA not before: Fri 18 Jul 2025 20:12:14 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30864 (0x7890)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jul 18 20:12:14 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=93BABA8B4B83FD355D3C65381311CC524D6794F7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:d8:23:e8:b5:b9:4f:2f:b6:44:08:b3:c0:9b:
8d:65:f0:3d:03:7d:d8:91:ad:10:26:16:33:bf:17:
5f:df:06:95:52:a5:2e:50:65:a0:ea:d3:c8:d3:48:
a7:de:47:52:26:eb:0e:b0:26:ca:8d:0d:69:91:73:
4e:08:89:ed:8a:a9:ed:b4:d8:7b:87:3f:e6:a4:0b:
41:5a:49:bd:e8:a4:3e:07:cd:9d:38:49:c1:af:08:
86:68:30:84:17:de:fc:40:1b:cb:3c:04:bf:d2:ce:
24:0f:29:de:89:65:41:7c:98:39:3f:da:99:28:13:
a6:6b:19:2f:0e:b4:a6:c9:94:3b:f2:7f:2b:f2:54:
70:40:3e:a0:83:31:f3:1e:43:40:49:0c:a5:14:d1:
c8:86:c7:12:05:9e:b0:6b:62:3f:64:33:35:2f:6e:
fb:e9:a5:44:c7:65:fb:b0:12:dd:c6:30:8a:df:45:
99:40:0d:c9:a7:e2:a3:65:77:71:c7:5f:38:c4:f6:
96:d6:07:dd:a8:dc:c5:ae:19:be:5c:74:20:29:04:
b6:8c:81:b7:3a:f5:3f:35:1a:e4:a6:62:24:8f:d0:
59:03:ad:17:71:bc:4c:3c:0a:ab:ba:0d:63:9d:ac:
0d:a4:24:d7:ec:e0:b2:4b:51:7b:d0:54:3f:33:32:
79:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:BA:BA:8B:4B:83:FD:35:5D:3C:65:38:13:11:CC:52:4D:67:94:F7
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/k7q6i0uD_TVdPGU4ExHMUk1nlPc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
7a:12:df:33:8c:da:f1:47:c4:1f:41:d2:f9:2d:bf:c3:4f:2a:
fc:df:fc:d3:18:3e:84:70:85:3d:83:0c:dd:c8:32:6e:c6:6c:
08:14:09:f8:30:90:0c:00:e6:c3:ce:ec:5c:aa:19:d6:80:9b:
67:3a:f7:f2:8b:c5:be:fb:64:6b:99:c1:0e:33:d2:d4:6a:b4:
02:85:25:eb:c1:fe:45:b3:14:ef:ad:55:68:5e:3a:64:8d:ba:
1e:15:af:a3:dd:39:c2:67:e0:01:03:d0:25:15:03:2e:b1:b9:
ae:d3:a7:cc:89:dc:03:77:79:78:17:12:e4:e8:73:88:b3:0e:
db:b0:9c:78:d5:3c:ef:0f:0c:e5:c9:23:54:ff:81:57:f9:e9:
85:fb:fd:e1:9c:e0:6a:0b:14:fc:18:e9:6e:9a:bf:fb:be:cd:
84:92:8b:79:a3:39:2e:a6:f9:62:6c:58:3b:1c:65:04:ab:a5:
fc:d4:49:53:35:73:3c:6e:a4:ad:05:a6:27:a6:da:6a:66:b6:
4f:5d:23:8b:ef:c3:5d:89:49:6f:ee:23:6b:53:ab:43:c8:4a:
ab:87:e7:d3:1c:b8:af:19:8a:1a:c8:92:a8:fc:7e:9d:60:a2:
fb:85:5e:66:4e:0d:af:a7:31:2e:5f:a1:e1:d7:1e:9d:e7:64:
16:af:3b:de
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgICeJAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNTA3MTgy
MDEyMTRaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDkzQkFCQThCNEI4M0ZE
MzU1RDNDNjUzODEzMTFDQzUyNEQ2Nzk0RjcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDN2CPotblPL7ZECLPAm41l8D0DfdiRrRAmFjO/F1/fBpVSpS5Q
ZaDq08jTSKfeR1Im6w6wJsqNDWmRc04Iie2Kqe202HuHP+akC0FaSb3opD4HzZ04
ScGvCIZoMIQX3vxAG8s8BL/SziQPKd6JZUF8mDk/2pkoE6ZrGS8OtKbJlDvyfyvy
VHBAPqCDMfMeQ0BJDKUU0ciGxxIFnrBrYj9kMzUvbvvppUTHZfuwEt3GMIrfRZlA
Dcmn4qNld3HHXzjE9pbWB92o3MWuGb5cdCApBLaMgbc69T81GuSmYiSP0FkDrRdx
vEw8Cqu6DWOdrA2kJNfs4LJLUXvQVD8zMnnpAgMBAAGjggI0MIICMDAdBgNVHQ4E
FgQUk7q6i0uD/TVdPGU4ExHMUk1nlPcwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L2s3cTZpMHVEX1RWZFBH
VTRFeEhNVWsxbmxQYy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwYgYIKwYBBQUHAQcBAf8EUzBRME8EAgABMEkD
BAIr7zADBAMr9gAwDAMEAiv2DAMEBCv2IDAMAwQCK/Y0AwQCK/ZgAwQCZyMwMAsD
AwJn7AMEA2fsEDAMAwQCZ+wcAwQCZ+xgMA0GCSqGSIb3DQEBCwUAA4IBAQB6Et8z
jNrxR8QfQdL5Lb/DTyr83/zTGD6EcIU9gwzdyDJuxmwIFAn4MJAMAObDzuxcqhnW
gJtnOvfyi8W++2RrmcEOM9LUarQChSXrwf5FsxTvrVVoXjpkjboeFa+j3TnCZ+AB
A9AlFQMusbmu06fMidwDd3l4FxLk6HOIsw7bsJx41TzvDwzlySNU/4FX+emF+/3h
nOBqCxT8GOlumr/7vs2Ekot5ozkupvlibFg7HGUEq6X81ElTNXM8bqStBaYnptpq
ZrZPXSOL78NdiUlv7iNrU6tDyEqrh+fTHLivGYoayJKo/H6dYKL7hV5mTg2vpzEu
X6Hh1x6d52QWrzve
-----END CERTIFICATE-----
Generated at Sun Jul 20 12:50:47 2025 by rpki-client