Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/otdD6d4V_NI2jiJxpaaAk7cCZlA.roa
File: otdD6d4V_NI2jiJxpaaAk7cCZlA.roa (raw, json)
Hash identifier: Z3lM8t+3IXWz9svnVJx+f95eSdpUQbh8V0Xp5Oeeqdo=
Subject key identifier: A2:D7:43:E9:DE:15:FC:D2:36:8E:22:71:A5:A6:80:93:B7:02:66:50
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 6CDA
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/otdD6d4V_NI2jiJxpaaAk7cCZlA.roa
Signing time: Tue 17 Jun 2025 08:42:27 +0000
ROA not before: Tue 17 Jun 2025 08:42:27 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27866 (0x6cda)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jun 17 08:42:27 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=A2D743E9DE15FCD2368E2271A5A68093B7026650
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:19:b7:c2:16:d3:54:97:07:13:f8:35:20:9f:
86:c1:84:29:5f:76:20:07:cf:bc:00:b4:05:34:02:
82:88:17:51:43:83:01:96:02:4e:ff:c1:dd:a6:a9:
ff:7e:94:aa:38:e5:d7:00:0c:ad:53:da:9e:65:ac:
3e:e6:2d:f6:16:87:0e:7e:16:1b:fa:b5:0c:59:a7:
37:0d:05:91:26:55:f3:c3:f2:17:4c:e6:f7:7b:d7:
78:d3:e1:5c:86:ad:ce:d9:2f:ae:08:e6:a2:b7:e6:
49:18:90:25:51:fa:2a:12:a9:43:93:05:b6:86:61:
be:a4:40:c7:19:cb:31:ea:54:d3:f9:dc:8b:06:f8:
92:3e:7b:e3:1d:d4:e4:25:1f:b0:3e:bf:8f:fa:22:
d7:f2:48:0c:0b:ee:f1:7a:92:56:ca:12:8d:68:f5:
78:56:78:fc:a2:3b:1f:a5:09:06:92:1a:d6:2c:7f:
f8:76:be:97:ee:ea:0f:80:da:63:c7:ee:35:a9:7d:
9b:46:2f:3e:85:32:77:bb:4b:ba:f0:96:bc:79:cb:
d5:bc:ff:f6:97:05:85:44:06:5a:c6:33:9c:51:f4:
5f:60:8a:fb:5d:01:d6:f6:6e:54:0f:f2:45:ea:33:
e0:fd:e3:87:97:d1:aa:79:cc:8f:52:7b:a4:42:8a:
27:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:D7:43:E9:DE:15:FC:D2:36:8E:22:71:A5:A6:80:93:B7:02:66:50
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/otdD6d4V_NI2jiJxpaaAk7cCZlA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
34:1f:2b:45:c7:71:20:56:7c:21:d1:8e:df:5f:8f:9a:7c:f4:
61:6e:4f:21:2f:32:bb:ce:09:de:e2:79:c2:6b:a8:83:1c:a1:
ec:d5:57:39:9c:51:f2:e8:8e:b7:ac:42:8a:82:04:2f:76:f7:
30:ef:23:0f:e9:f8:35:73:5b:3a:9a:99:7d:18:e3:e9:b3:6a:
70:72:3d:08:72:a5:b9:fe:15:f9:8b:04:8b:ad:54:cc:cd:70:
3c:77:41:f8:8e:4f:4f:98:13:14:ed:17:5d:0d:44:8d:5a:b5:
bf:0b:23:2f:91:4e:97:61:8c:10:76:80:cd:a8:a0:8c:d2:af:
3c:6d:31:9a:07:aa:e9:44:48:45:b1:17:d9:d3:ac:0b:f3:bd:
0b:b4:ce:1d:d0:c1:7a:d7:de:38:d8:df:24:f9:29:71:78:b1:
f8:d7:e5:8b:8a:76:e0:c0:31:d8:76:50:54:36:f1:47:cc:33:
56:51:e1:95:30:fc:b0:a0:17:e3:a9:4b:1a:20:6e:bb:9d:cb:
3b:65:63:97:c4:25:10:d0:e5:fd:9e:66:ec:46:71:03:f8:7b:
a5:48:d9:10:53:6f:c9:ad:d1:77:10:93:89:76:2b:78:c9:01:
67:e2:8c:66:0f:fb:9e:5c:63:25:7f:0e:75:97:91:bd:40:02:
ff:c3:5b:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:46:37 2025 by rpki-client