Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/pnulO4VD0NWOhOGm9NpkKXTy-pI.roa
File: pnulO4VD0NWOhOGm9NpkKXTy-pI.roa (raw, json)
Hash identifier: FBgjXBW4ooGW3JtG4FEFkdKnDgwxLSSRqU4fPWp6jh0=
Subject key identifier: A6:7B:A5:3B:85:43:D0:D5:8E:84:E1:A6:F4:DA:64:29:74:F2:FA:92
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 746C
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/pnulO4VD0NWOhOGm9NpkKXTy-pI.roa
Signing time: Mon 07 Jul 2025 18:45:05 +0000
ROA not before: Mon 07 Jul 2025 18:45:05 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29804 (0x746c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jul 7 18:45:05 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=A67BA53B8543D0D58E84E1A6F4DA642974F2FA92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b5:45:b0:a6:7f:af:e8:ef:0f:78:36:35:19:
0e:0d:08:27:af:b5:d3:9a:9b:9c:f2:f6:15:47:8b:
74:15:13:0a:87:ed:de:7d:27:10:7d:9d:85:f6:1e:
33:e4:64:7e:08:ef:b0:88:b5:34:9c:8c:39:4c:c0:
3f:58:58:d2:85:e6:b1:66:06:36:94:12:b8:60:46:
17:f2:a6:8a:84:c2:e6:9f:41:9f:e8:c1:2e:25:f1:
ed:94:93:f7:4e:6c:c6:9a:fe:65:24:ea:63:12:13:
00:e8:6d:41:3e:a3:f0:4c:a7:99:44:d6:3d:98:d6:
65:90:d1:77:a8:eb:c5:76:55:ad:9e:19:16:80:6c:
61:4f:58:f9:2d:4d:3f:ef:46:84:29:df:99:ae:91:
49:81:2d:99:4e:81:b9:3d:70:91:24:d3:80:49:92:
0e:2a:7f:e1:08:38:6b:6c:7d:ee:b8:ca:63:aa:c8:
9e:ca:fe:24:92:96:c2:6c:ed:51:00:c9:22:2a:3e:
4b:ac:63:eb:9b:18:b6:61:6a:7b:2a:fa:a2:cb:6c:
79:2d:a4:80:60:2d:38:43:c3:b2:83:97:db:56:91:
48:56:c3:76:0b:e3:68:c7:59:d4:c8:ba:11:1a:48:
67:00:07:d3:aa:fe:5f:7f:e5:93:7c:60:c3:72:d0:
9d:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:7B:A5:3B:85:43:D0:D5:8E:84:E1:A6:F4:DA:64:29:74:F2:FA:92
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/pnulO4VD0NWOhOGm9NpkKXTy-pI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
00:74:13:6a:b9:e6:6a:1d:10:72:f2:a6:d6:b6:88:00:90:fe:
f2:6e:66:4b:d1:c5:a4:4e:f6:e2:de:ce:af:cd:30:f5:cb:ea:
c4:f2:f5:ac:1b:bb:56:b4:a5:88:10:71:a1:db:ea:10:86:ee:
10:33:5b:f5:ff:77:b2:96:76:f5:b1:34:b9:75:5a:f1:8d:2a:
01:a2:7b:7a:9a:04:9b:05:24:c5:c1:fd:64:86:9a:b0:83:b7:
3a:dd:d1:50:c0:3a:eb:56:fa:3f:ab:27:cf:69:10:f6:e8:59:
de:04:76:37:da:55:fb:ff:15:a2:ed:ef:dc:90:0f:88:8a:55:
2d:ad:c1:b8:1d:d7:04:67:71:0d:5d:c8:1a:a6:3c:e3:04:c1:
cd:24:77:8e:2b:db:e5:5d:34:7b:ab:d3:cf:b2:25:f7:43:89:
17:b6:97:e7:ba:d6:7b:a9:30:db:06:f5:48:1c:94:b7:0d:71:
fb:70:21:1e:61:2e:b9:9a:a3:6d:f5:5f:ca:a3:cf:df:74:47:
72:fe:b9:c6:c9:eb:42:ea:64:68:12:4e:bf:67:8a:d0:f8:c2:
f8:0c:96:4f:80:b6:95:83:ee:86:6f:d2:2c:4f:27:b4:7d:85:
40:bf:50:2d:c0:5b:b5:98:f6:4d:06:f5:f3:9f:6f:69:0e:7c:
40:01:bc:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:46:28 2025 by rpki-client