Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/omFDQ3I3E7qzIA8RqjqlcNj4nBA.roa
File: omFDQ3I3E7qzIA8RqjqlcNj4nBA.roa (raw, json)
Hash identifier: n0P7gxcNvFaAt46tXrfIKkAZ0rpw/WDki+1GbGV6tRs=
Subject key identifier: A2:61:43:43:72:37:13:BA:B3:20:0F:11:AA:3A:A5:70:D8:F8:9C:10
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 766A
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/omFDQ3I3E7qzIA8RqjqlcNj4nBA.roa
Signing time: Sun 13 Jul 2025 02:41:48 +0000
ROA not before: Sun 13 Jul 2025 02:41:48 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30314 (0x766a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jul 13 02:41:48 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=A2614343723713BAB3200F11AA3AA570D8F89C10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:98:67:03:7d:b8:c4:6b:55:80:d9:17:98:7e:
5b:9c:05:5e:25:8b:e3:c6:f4:25:e4:3e:76:c0:45:
d2:92:a4:1c:aa:ff:b7:aa:88:34:7d:1c:c8:3c:e5:
c5:64:7d:ab:cd:db:27:3c:56:2d:b3:9e:e4:bf:7d:
5e:18:72:5d:24:d4:09:48:03:63:01:3e:0c:ab:2c:
2b:b1:0f:ce:8f:ac:ae:2e:28:10:e0:c9:ea:b3:6f:
2f:76:a1:05:39:ec:ad:4e:5f:a4:e8:ce:1f:76:a5:
80:84:f2:d0:ed:c7:03:73:81:6e:ca:a9:17:f9:ca:
9a:7b:97:75:3c:92:a8:69:d9:74:9e:de:d5:8f:a3:
4d:ef:9a:5b:da:f6:8c:80:d7:8b:93:35:8b:14:01:
42:fe:49:eb:f5:22:be:87:18:8c:80:f7:38:d7:fb:
8d:bc:b4:b0:67:d2:00:02:ff:aa:cc:a0:66:39:de:
75:b9:18:1b:5a:45:81:44:29:3e:42:dd:ad:4c:f1:
6c:3a:69:dd:33:69:96:ed:97:21:e5:c2:c8:f7:29:
b4:83:2e:d7:08:b0:7b:db:85:6c:38:ac:c7:7e:7e:
f8:72:2e:31:d2:69:f7:8a:f4:f9:16:b6:33:87:98:
f6:0f:b8:b0:10:07:f8:5b:ff:25:b7:88:08:19:bc:
1a:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:61:43:43:72:37:13:BA:B3:20:0F:11:AA:3A:A5:70:D8:F8:9C:10
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/omFDQ3I3E7qzIA8RqjqlcNj4nBA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
65:2b:29:e8:4d:8e:13:e2:cd:37:07:2b:1a:98:fb:49:fe:3b:
8f:4f:d2:e9:e6:ff:c1:9b:7a:0b:86:8d:ef:3f:f3:98:13:ab:
9e:cf:51:10:43:2b:12:03:f5:e9:e7:c8:e6:63:44:d2:e5:47:
43:9c:c0:70:3e:45:40:67:30:03:eb:d6:46:03:a5:4a:c1:d3:
67:dc:3e:0e:5f:e9:cf:fe:fe:47:77:80:61:ff:38:74:2c:32:
07:76:0c:88:61:43:96:e1:29:10:5a:62:f1:dd:c9:c2:d6:b5:
ce:21:f1:1f:86:d7:bf:e9:1e:e5:81:86:2d:0c:6a:ea:6b:c5:
f2:9e:1b:58:39:76:ad:cf:8f:57:d0:70:2f:f0:96:7f:9a:12:
40:6c:a9:6e:2f:fc:c0:c0:f3:d6:e5:37:bc:4e:28:a7:01:78:
b7:b4:18:95:9a:bb:da:20:9c:d0:ec:e0:10:1d:d5:57:38:c1:
31:40:1f:e5:fa:df:41:ec:44:28:28:1e:4e:dd:b1:da:04:84:
84:9b:76:f6:78:e3:5b:6b:42:1d:17:66:10:80:61:5f:6c:52:
58:75:cc:fb:1a:80:78:1a:68:59:06:81:28:b9:b2:04:f6:a6:
2b:d8:b8:08:e4:a1:65:1b:b0:ef:2f:a8:5c:dd:e9:a5:aa:27:
55:60:35:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:32:54 2025 by rpki-client