Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/ppEjlT81kEfoW1pW_LHpV8y4MMc.roa
File: ppEjlT81kEfoW1pW_LHpV8y4MMc.roa (raw, json)
Hash identifier: v2vfXeQDrN8nVNKCVFYFu0G5SalSOHnBVLbc86X9Sro=
Subject key identifier: A6:91:23:95:3F:35:90:47:E8:5B:5A:56:FC:B1:E9:57:CC:B8:30:C7
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 7398
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/ppEjlT81kEfoW1pW_LHpV8y4MMc.roa
Signing time: Sat 05 Jul 2025 13:45:05 +0000
ROA not before: Sat 05 Jul 2025 13:45:05 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29592 (0x7398)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jul 5 13:45:05 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=A69123953F359047E85B5A56FCB1E957CCB830C7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:49:0d:80:52:8d:37:ec:84:f4:8a:5a:dd:5d:
b5:6e:55:16:43:f4:a4:0f:0e:4b:dc:b1:c5:60:78:
e7:d8:8d:41:8f:51:77:8d:42:0f:7c:9e:7d:84:d8:
30:ba:a5:ac:f0:00:95:f4:d3:99:fd:78:b0:55:43:
1b:ef:fe:19:f8:8e:75:ea:ec:77:10:fa:7b:40:c7:
02:3b:b2:10:ad:63:bf:7d:a5:57:50:db:53:1a:85:
fd:d0:3d:ef:5b:eb:9e:fd:1b:91:16:63:d7:36:4b:
4f:6e:dd:ca:7e:86:8e:f5:18:7c:9d:8d:ce:78:d5:
8e:4b:8d:9e:55:19:41:7f:7e:6e:96:70:40:e1:87:
78:c1:d8:cc:b7:ae:0f:76:60:d3:23:90:1f:cb:56:
70:ff:5c:ca:0f:21:d0:d5:74:3f:ae:d9:4c:fa:98:
12:69:5e:5c:b4:f0:fe:d9:61:11:d1:b6:c1:9c:a3:
84:ac:4b:08:b5:dd:a7:59:21:bb:e5:ad:8b:e6:9f:
58:39:15:ce:51:70:3b:9a:56:22:08:fa:3a:a9:f5:
71:9e:52:ce:82:7a:c4:22:36:23:b4:9d:f8:95:da:
18:35:03:32:88:3c:ab:67:bd:44:38:f4:15:7a:05:
89:d1:61:fa:4b:b3:52:b2:12:2a:9a:ed:82:db:d5:
60:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:91:23:95:3F:35:90:47:E8:5B:5A:56:FC:B1:E9:57:CC:B8:30:C7
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/ppEjlT81kEfoW1pW_LHpV8y4MMc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
23:d5:7e:a9:42:48:95:72:e9:a5:57:99:f6:87:a0:7e:bc:89:
44:4d:6b:88:27:59:59:3c:14:8f:57:4f:a7:6b:fd:bf:ee:38:
01:97:7e:9d:6c:e1:e6:e9:76:52:f3:97:f7:eb:04:7e:0c:78:
1d:3f:9d:ba:2a:2b:93:e6:5e:27:e9:3a:41:c0:86:56:ea:fe:
2a:4e:b5:7f:47:84:3b:fb:bb:c7:8c:9a:78:ad:af:86:6c:30:
30:79:0d:9a:91:7a:ca:1a:a9:71:cb:b6:f1:fe:cd:52:f3:72:
64:2e:34:f8:fc:07:12:ba:f1:d8:54:bc:34:a1:a8:a0:e6:a8:
46:9f:78:9a:6c:6e:d5:16:c2:e5:c5:b6:a0:81:77:dd:e2:e4:
f2:39:f8:6c:56:aa:12:16:01:32:0a:7d:2c:07:73:14:6a:3b:
d1:de:15:60:bf:69:2a:f8:f4:b0:24:95:71:a7:e1:c5:b0:85:
c3:d6:9a:d9:e9:a0:15:48:ef:5d:0b:2d:66:03:52:93:71:3a:
47:de:c6:16:bf:2f:73:fb:d6:b0:65:a3:ab:5b:4b:0d:99:b0:
00:f4:70:8d:2a:5d:31:41:ae:66:47:93:74:f4:f5:8f:1c:e3:
f0:ea:82:d4:24:7f:71:7a:dd:15:04:8c:c4:65:96:6a:d5:88:
49:f4:fa:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:54:32 2025 by rpki-client