Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/khOI95qb91_uMoVos8OOGRaUzx0.roa
File: khOI95qb91_uMoVos8OOGRaUzx0.roa (raw, json)
Hash identifier: PZoaKDX1Xz+sL/g7MS/ypJkyAiMpMd0PC38y3uG6gY4=
Subject key identifier: 92:13:88:F7:9A:9B:F7:5F:EE:32:85:68:B3:C3:8E:19:16:94:CF:1D
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 736A
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/khOI95qb91_uMoVos8OOGRaUzx0.roa
Signing time: Sat 05 Jul 2025 02:15:09 +0000
ROA not before: Sat 05 Jul 2025 02:15:09 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29546 (0x736a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jul 5 02:15:09 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=921388F79A9BF75FEE328568B3C38E191694CF1D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:2b:97:08:6d:b7:59:4e:26:31:21:89:0c:a1:
91:3c:ab:b2:8b:1a:9c:d6:6f:4a:81:ff:44:6a:86:
64:8e:4a:fa:33:09:7d:dc:f9:9c:ae:3b:37:b0:c9:
02:f3:8c:b8:18:01:1d:ed:c5:64:a5:20:af:f9:0c:
e1:55:e9:8b:dd:d9:58:df:8a:e4:3c:92:a3:ba:8f:
36:2e:9f:6c:75:d1:e9:b1:45:04:5a:e7:71:71:94:
09:58:85:08:82:42:83:49:07:82:cc:3a:e3:5f:91:
c9:2c:d2:a0:4f:77:d0:e5:65:81:b9:34:5f:80:15:
8c:99:82:6c:1b:73:7a:79:06:25:ad:fb:84:d1:65:
e0:75:29:b2:f1:99:b6:3b:bb:05:73:c6:ba:83:6d:
74:f2:ad:16:d0:7b:ed:a0:41:81:5c:2f:fd:4b:88:
df:bb:af:16:67:4c:6a:db:b0:3f:e3:0b:4f:c9:fe:
ba:61:9c:7e:f3:a3:0c:b4:02:29:d0:64:a5:e4:17:
49:7a:5a:54:89:43:d4:1c:88:b5:19:ca:63:cb:a4:
5c:02:50:08:b4:7a:4d:f1:7b:c0:4b:fa:41:31:e1:
e1:f5:1e:a7:8c:6b:63:28:86:19:a0:13:36:17:5e:
88:7d:96:6d:d9:b0:de:d8:f9:92:6b:c6:3c:a6:7c:
2b:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:13:88:F7:9A:9B:F7:5F:EE:32:85:68:B3:C3:8E:19:16:94:CF:1D
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/khOI95qb91_uMoVos8OOGRaUzx0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
0e:be:84:a6:4d:3f:cb:7c:6b:f6:8b:32:27:7d:f4:8c:ba:a3:
79:67:23:72:84:d6:4e:41:a3:d0:a8:0a:cd:68:33:f3:e8:68:
57:df:86:49:70:58:bd:57:b9:bc:21:93:96:e9:33:81:f3:7b:
ea:be:72:cd:4c:e9:43:50:a1:84:fe:f6:e8:e6:fc:3c:71:72:
17:84:66:ae:2e:cd:1a:db:e1:c9:a5:f8:ce:f8:29:8c:f9:87:
d8:49:66:ca:94:09:79:4c:e3:0c:e8:86:61:d3:65:15:6f:41:
62:66:1b:8f:39:07:d3:75:47:55:c9:90:b4:df:a3:2d:96:5a:
f3:68:00:2a:f1:d8:e4:dc:d6:bd:4e:d7:e9:be:1f:ba:75:05:
91:ad:80:0a:34:f9:f6:14:74:cb:35:46:27:39:77:48:78:35:
c6:16:32:ca:fe:ca:2a:c5:29:c8:a3:34:33:ea:2f:e8:9a:4d:
f7:3b:fe:ac:dc:9a:3d:a9:c2:66:6a:e8:62:42:ee:fc:96:53:
33:79:62:96:46:4d:60:9c:09:5a:0d:8c:21:50:c6:55:f8:49:
76:a0:8f:44:50:b1:92:a0:82:04:ad:4a:5f:71:51:23:46:10:
cc:2f:1e:de:9d:fd:c0:7b:7e:0b:1d:30:d7:0b:ff:f0:36:13:
5d:71:c3:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:34:02 2025 by rpki-client