Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/lG-U0xmzNEI61z_gNqOxs4xSFw8.roa
File: lG-U0xmzNEI61z_gNqOxs4xSFw8.roa (raw, json)
Hash identifier: UIHFOYAx4D6rPJE7NamGkC/bMN6KkcqyKKsLUMv0RWA=
Subject key identifier: 94:6F:94:D3:19:B3:34:42:3A:D7:3F:E0:36:A3:B1:B3:8C:52:17:0F
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 7768
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/lG-U0xmzNEI61z_gNqOxs4xSFw8.roa
Signing time: Tue 15 Jul 2025 18:11:52 +0000
ROA not before: Tue 15 Jul 2025 18:11:52 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30568 (0x7768)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jul 15 18:11:52 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=946F94D319B334423AD73FE036A3B1B38C52170F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f1:8b:36:b3:45:ad:7c:89:be:c9:83:e7:9c:
26:03:21:36:b1:36:ef:c9:a7:fa:74:c4:d4:15:db:
0a:b7:80:12:9f:94:c0:dd:1b:3e:85:d4:ea:36:81:
3c:f1:4e:6f:8b:21:da:95:e1:c4:c0:1b:8d:6a:0e:
b0:34:27:7b:06:95:62:6e:d3:84:9e:7d:69:e9:eb:
62:04:7a:5a:66:ef:8f:3c:6c:69:51:2d:7a:87:d5:
28:1f:e3:2c:cc:40:57:f0:4b:fd:c5:5d:bf:45:ee:
0a:06:50:f7:e7:c8:fe:ad:d8:81:45:e5:6e:91:4e:
6e:2b:c6:2d:7b:56:bb:c5:7f:39:cf:27:b5:c1:ec:
2d:14:64:60:35:ac:5a:06:61:6d:39:ef:c3:84:cc:
65:18:2b:fa:d1:3b:a4:98:75:08:62:d3:0c:a6:4a:
59:36:2e:87:7d:aa:01:48:5c:aa:da:64:10:8f:d5:
29:3a:84:f9:b3:f9:15:8c:19:66:67:a1:29:2b:df:
8d:98:0d:e1:52:13:3d:5c:94:96:b3:d3:86:76:61:
e8:5c:c6:61:01:97:37:aa:49:4f:c5:d7:32:4b:2f:
97:a9:4d:93:2d:c5:8c:5f:b7:66:21:57:37:22:7e:
0e:d9:94:e0:54:ca:e6:b9:cc:2e:58:61:af:b9:b9:
a4:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:6F:94:D3:19:B3:34:42:3A:D7:3F:E0:36:A3:B1:B3:8C:52:17:0F
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/lG-U0xmzNEI61z_gNqOxs4xSFw8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
1b:20:db:c8:40:2c:78:f6:13:d7:ec:c3:13:98:1a:90:ad:6e:
56:9e:4a:65:0a:90:5b:9a:45:d4:02:25:34:75:2e:a7:aa:8c:
e0:4a:88:63:64:57:61:b8:bc:39:f2:63:bf:55:fb:c3:f0:80:
7f:b3:81:82:3e:d2:22:d4:4c:20:58:07:bd:ad:3d:57:65:71:
21:be:e6:c3:69:76:f8:8e:9f:5d:ad:af:dd:fa:64:05:f0:fb:
c1:0d:4c:a0:cf:3d:dd:d5:3b:20:43:61:61:5a:87:0d:56:41:
a2:98:83:cc:bf:c3:26:4b:e8:47:07:9d:b2:00:c5:78:c4:de:
c4:3f:01:eb:9c:7b:76:db:3a:1d:18:84:d2:bb:e1:26:55:8a:
18:b5:1d:fa:f9:51:0f:38:4d:3e:3c:6c:1b:1c:97:90:73:3f:
32:e8:b2:62:c2:73:c4:9d:84:f8:c2:52:28:48:10:01:e5:a7:
a8:85:a4:be:37:ae:ad:03:ac:c7:1a:26:25:45:0e:64:f0:11:
21:9e:f4:e5:44:c2:2f:1c:46:dd:cb:33:3c:54:81:dd:78:92:
da:a8:1c:9d:37:e3:5e:35:5d:2c:a0:58:57:82:76:84:ef:38:
9d:6b:25:f1:cc:17:43:a8:44:a4:92:aa:b5:85:a4:b0:68:be:
3e:50:80:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:36:12 2025 by rpki-client