Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/q-G0IURLupNOwIbLkiouPq1xJkg.roa
File: q-G0IURLupNOwIbLkiouPq1xJkg.roa (raw, json)
Hash identifier: rMXKQH6IoDh/06GmofxpqBRqzs+WOWLgh4vp8ZxPhCU=
Subject key identifier: AB:E1:B4:21:44:4B:BA:93:4E:C0:86:CB:92:2A:2E:3E:AD:71:26:48
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 779A
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/q-G0IURLupNOwIbLkiouPq1xJkg.roa
Signing time: Wed 16 Jul 2025 06:41:57 +0000
ROA not before: Wed 16 Jul 2025 06:41:57 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30618 (0x779a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jul 16 06:41:57 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=ABE1B421444BBA934EC086CB922A2E3EAD712648
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:52:12:81:aa:30:bc:8b:4e:7e:e0:b5:44:ad:
82:c2:4a:ca:11:5e:1e:5a:35:e0:d9:f0:b2:26:c8:
bb:62:31:26:3a:cb:71:a5:a8:e2:1a:9c:c3:81:ae:
e7:4c:4b:8e:53:ef:1c:de:5b:1d:fa:bf:4d:4c:73:
d0:e1:63:fb:0a:91:ce:4d:4b:ae:95:d3:29:f3:8e:
5c:f0:b9:db:07:56:2a:ea:1a:c2:f3:e4:9b:87:26:
7c:e7:28:e4:ab:2e:ea:8d:96:d4:aa:7a:03:73:5a:
ca:b4:89:30:87:2e:fc:fa:6c:e3:c0:a7:8d:7e:6c:
72:f2:7d:c9:c9:25:db:9d:23:8e:87:16:cf:3f:19:
aa:bc:ef:45:95:1a:d7:94:06:c2:6c:01:25:d7:96:
3e:89:da:f3:2d:84:08:cf:a2:e8:20:05:63:75:dd:
00:80:17:72:b8:30:a4:8c:41:41:29:d9:af:75:29:
dc:4e:72:ae:31:08:a2:dd:e6:a6:7b:3a:ed:00:36:
71:71:8d:43:47:91:c9:b4:8f:26:25:a3:77:3b:9f:
68:97:6f:9a:a5:8a:75:fb:c7:ba:e4:ed:04:93:46:
77:d5:09:5b:e0:53:1d:c3:3c:06:09:60:0e:f5:70:
00:e3:44:9e:63:a1:e9:77:7c:98:67:f7:cd:2c:ce:
12:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:E1:B4:21:44:4B:BA:93:4E:C0:86:CB:92:2A:2E:3E:AD:71:26:48
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/q-G0IURLupNOwIbLkiouPq1xJkg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
78:e6:88:83:e7:1c:77:22:27:f3:e0:68:cb:04:1d:1c:0e:1f:
b1:66:3a:b6:d8:d4:bf:df:16:92:7e:0c:67:1b:26:e1:a3:dc:
18:55:86:60:bc:a6:a5:c3:a6:21:05:e1:a3:6e:d0:11:22:05:
63:94:df:d6:5e:ae:b3:b6:61:0f:d0:59:8c:7a:ba:34:48:bd:
44:a8:78:c0:76:d5:d1:27:59:52:27:a9:8a:60:a1:a4:d6:b3:
f2:ee:3b:6b:41:60:d5:66:9b:1b:a2:1d:56:e0:c6:c0:83:a5:
22:f2:08:0e:cc:0d:b9:16:5c:13:8d:1e:81:b0:73:ef:22:97:
12:5d:f9:17:31:d6:c8:7c:9e:40:88:36:ca:38:e5:0f:e3:11:
66:59:4e:e9:4a:ea:02:1e:e1:e2:95:3d:70:97:c0:e6:5a:36:
07:7e:5c:9b:22:2b:f3:13:3e:07:47:4f:e8:b4:da:de:de:a8:
86:ca:a8:de:35:50:69:fa:1f:42:0a:41:e5:7b:d8:31:c7:90:
4f:3c:46:a6:d8:b7:7e:05:87:f3:6e:c4:30:8c:44:04:ec:6b:
71:54:4b:a4:41:99:21:dd:6b:2a:81:2c:c5:b6:5e:19:37:0e:
fd:42:ee:54:85:49:22:10:d4:ad:5e:66:b8:5e:fa:0f:46:72:
e7:be:62:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:41:06 2025 by rpki-client