Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/ojIb-oOolCzh6FtdxurashIf4Ts.roa
File: ojIb-oOolCzh6FtdxurashIf4Ts.roa (raw, json)
Hash identifier: a84x7oYdq2MSzf7ZlFnirwPUk/bpIWh4+0X6Zn1ZBcc=
Subject key identifier: A2:32:1B:FA:83:A8:94:2C:E1:E8:5B:5D:C6:EA:DA:B2:12:1F:E1:3B
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 7154
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/ojIb-oOolCzh6FtdxurashIf4Ts.roa
Signing time: Sun 29 Jun 2025 12:44:36 +0000
ROA not before: Sun 29 Jun 2025 12:44:36 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29012 (0x7154)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jun 29 12:44:36 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=A2321BFA83A8942CE1E85B5DC6EADAB2121FE13B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:6f:7c:6b:f3:04:7e:c8:f5:ad:05:8c:4d:6a:
02:61:dc:84:84:7c:e7:5b:cc:73:5d:25:b9:01:29:
09:d9:ef:99:da:51:f1:b2:d7:4a:64:39:a6:db:f1:
b0:5e:61:dd:f0:d8:b3:14:8a:b7:d4:eb:5a:f1:9a:
dd:e7:f3:ad:a7:49:15:fa:b5:ac:a0:56:17:fc:c3:
9d:7c:d1:0e:cb:e4:1b:3e:2c:98:26:5b:79:47:d6:
26:c4:fd:0c:5c:d3:80:b9:ad:0e:d7:93:06:1e:04:
f2:14:35:67:6e:d2:70:7f:34:55:fa:88:f9:ee:c8:
bc:24:83:70:b9:33:af:a5:25:72:84:d3:da:b3:31:
36:ec:9d:a5:41:f1:d2:07:4f:1a:0e:62:3f:40:5d:
61:fb:86:e1:67:fc:a7:7d:7e:c1:fa:d2:3f:26:9c:
6d:7d:f7:f9:97:b6:b4:f4:24:49:01:e5:19:28:06:
4d:c1:77:1a:d2:9e:a1:12:d0:67:84:5e:8e:78:3d:
12:d2:a4:95:7a:60:6f:22:12:31:ee:e2:6f:f7:5c:
85:f0:fa:da:4d:d9:1f:d6:f1:89:bd:6e:17:ab:89:
d7:8f:ae:fc:26:95:26:b1:68:7f:2f:32:b0:8c:4b:
fb:e3:7f:f9:75:63:5a:05:35:73:4c:4c:e2:bb:c7:
63:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:32:1B:FA:83:A8:94:2C:E1:E8:5B:5D:C6:EA:DA:B2:12:1F:E1:3B
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/ojIb-oOolCzh6FtdxurashIf4Ts.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
7a:a8:ab:b3:93:6d:9c:74:05:2a:d7:69:f6:f7:e8:14:bd:5e:
77:42:9f:6d:51:ec:16:72:0b:93:ac:84:63:1f:70:d8:76:51:
4d:04:80:e9:36:56:c3:39:dc:ea:ef:90:51:95:68:67:96:df:
8f:9a:de:bb:dd:79:1e:ec:84:84:d2:83:a9:ac:4e:44:be:dd:
de:29:e5:98:fb:d8:10:7e:e7:15:a5:2f:ba:89:a4:b9:51:cc:
01:7d:fd:7d:f7:f4:16:ae:06:d0:38:0c:d3:ad:d4:20:9b:7c:
1c:87:3d:5f:f0:30:12:db:53:7d:50:d0:79:67:f2:55:ab:82:
ea:38:40:b5:f1:ca:61:ec:75:36:be:0f:d5:b1:c0:9b:9f:43:
17:0e:a1:b7:88:72:63:59:75:00:2f:6e:7a:ef:3c:3e:d4:55:
18:17:9f:bc:29:e1:89:93:df:af:67:66:f6:18:bc:f0:34:30:
81:9c:cc:e8:02:b7:88:a6:b3:7f:6c:aa:86:b3:1e:48:7e:4b:
f7:6c:c0:ac:89:77:52:9c:ff:a8:a8:67:d2:27:83:de:38:2e:
c0:b1:1e:3a:5b:03:7a:9c:df:04:cc:ec:48:50:a3:9d:c8:5c:
99:44:35:ef:df:0a:8d:76:3f:74:fc:c8:5b:27:ea:3c:f6:6d:
6f:2d:fa:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:47:38 2025 by rpki-client