Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/pHyfyPtut5lWogyDKpCxcqNi8kI.roa
File: pHyfyPtut5lWogyDKpCxcqNi8kI.roa (raw, json)
Hash identifier: FmdJaGljvAzGJMq/rE+NRmkZpg5NeEA8wc+j4uCopug=
Subject key identifier: A4:7C:9F:C8:FB:6E:B7:99:56:A2:0C:83:2A:90:B1:72:A3:62:F2:42
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 73F0
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/pHyfyPtut5lWogyDKpCxcqNi8kI.roa
Signing time: Sun 06 Jul 2025 11:45:07 +0000
ROA not before: Sun 06 Jul 2025 11:45:07 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29680 (0x73f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jul 6 11:45:07 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=A47C9FC8FB6EB79956A20C832A90B172A362F242
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ba:08:ed:ba:45:94:d4:91:44:67:11:43:52:
8b:43:ce:2f:02:2b:2b:c3:f4:a8:5f:3a:70:4c:27:
5c:a9:8f:82:62:13:d2:f3:02:a0:a5:75:b9:43:8e:
5b:96:93:97:8f:64:54:73:ea:ac:50:6d:f7:a9:5f:
59:57:44:75:c9:16:f7:94:82:2d:a4:e5:3b:14:ad:
a4:0a:26:c6:66:c6:69:b4:4b:fe:6e:7a:a5:f2:b9:
18:a0:b9:dc:19:90:04:44:a7:5d:07:5b:67:2e:ca:
6a:e9:bf:b8:47:d5:67:53:8f:83:eb:d3:00:41:01:
50:45:25:25:fb:6c:44:03:40:06:dc:2f:7b:5b:db:
b0:56:3d:f2:5b:10:31:32:cd:ce:a9:6e:37:f0:39:
81:1a:24:7c:e7:c1:08:18:23:5f:94:18:55:7a:63:
c2:6e:b7:f2:ed:f9:2a:b6:f6:b3:89:6d:bb:fb:38:
45:1d:3e:96:c7:3f:b8:32:c9:05:0e:34:5a:12:65:
ed:cb:9e:40:8c:0f:c9:7c:83:29:36:0b:82:9d:40:
f1:fc:bd:da:85:57:6d:28:4c:aa:95:70:15:6e:3d:
7c:56:a9:31:f1:99:7b:c8:57:c3:59:a5:7b:38:26:
23:eb:8c:0a:b0:49:d9:d8:87:60:1e:5a:51:f2:92:
39:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:7C:9F:C8:FB:6E:B7:99:56:A2:0C:83:2A:90:B1:72:A3:62:F2:42
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/pHyfyPtut5lWogyDKpCxcqNi8kI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
3e:06:f1:03:09:c5:7c:9f:72:a6:b3:77:8c:fe:11:f8:2f:34:
1e:e0:ff:2e:dc:71:96:34:6f:65:f9:44:fc:7a:da:ff:ff:89:
bb:c2:fa:2b:07:b9:e1:ae:83:af:56:67:49:1a:12:c2:85:e5:
9a:83:dd:97:f5:31:2a:61:cb:a9:3f:cc:c0:3e:dc:96:1b:1c:
65:5b:6a:a7:0f:65:c6:b7:d2:32:ec:bd:6e:cd:17:ee:38:8c:
f0:7a:58:bd:a2:78:7d:a8:4a:6b:4d:46:1d:2e:b8:5d:45:ac:
95:6c:58:d5:bc:46:cd:0d:c9:cc:84:b1:6f:ca:2b:a1:5e:77:
5d:e4:90:98:ba:d1:9b:ec:06:f0:21:a9:f3:aa:d3:b6:a6:e3:
2f:11:4d:ad:7b:52:53:0d:2b:fc:44:de:7c:6e:17:57:5a:d8:
da:6b:c0:e0:4d:4a:2d:5b:a0:e4:f7:51:e2:cb:b8:ef:f4:f3:
63:58:62:ce:56:6a:5d:5f:19:56:2f:83:3c:aa:78:58:e6:bd:
b1:10:b8:8a:47:14:ac:90:ab:2d:8b:73:5b:93:76:63:d6:e2:
cd:bd:34:1f:e8:11:92:ec:5c:7c:1c:ec:1d:2a:1f:4a:9f:48:
ef:df:d0:e8:1c:68:ef:fc:53:05:9f:0d:18:12:f6:15:a2:d6:
81:de:15:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:46:53 2025 by rpki-client