Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/qQome5q-Ju4juXE_LxJlPXeqyDA.roa
File: qQome5q-Ju4juXE_LxJlPXeqyDA.roa (raw, json)
Hash identifier: eMVieSZjZD3yYkdFtAj4QQhcd7Hi5IrF81MNgHEWQXU=
Subject key identifier: A9:0A:26:7B:9A:BE:26:EE:23:B9:71:3F:2F:12:65:3D:77:AA:C8:30
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 73A8
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/qQome5q-Ju4juXE_LxJlPXeqyDA.roa
Signing time: Sat 05 Jul 2025 17:45:00 +0000
ROA not before: Sat 05 Jul 2025 17:45:00 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29608 (0x73a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jul 5 17:45:00 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=A90A267B9ABE26EE23B9713F2F12653D77AAC830
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:c5:3b:8b:89:d2:df:85:87:12:42:ce:fc:06:
f9:94:9a:dc:92:6f:2c:21:c7:b9:2e:ac:30:cc:8d:
76:a8:24:11:cf:88:9b:ef:62:82:48:2e:01:7d:c7:
95:eb:2a:cc:e2:4b:83:00:00:58:db:9a:c4:65:a8:
1c:0e:25:c4:12:1e:b2:72:0b:4d:f7:51:32:07:26:
95:fc:d1:ab:91:9e:0d:b3:78:02:f5:67:bb:33:7c:
68:52:88:59:9c:4f:51:4d:b1:ff:cd:14:4e:f2:07:
9d:3e:15:c6:96:50:5b:73:68:d7:12:c3:b3:60:d5:
74:4b:00:84:30:43:69:8e:bf:d6:3b:37:4b:e5:d7:
98:03:b7:46:75:64:cf:07:bf:af:6f:44:bd:ab:51:
bf:20:7d:1a:4b:79:e4:7c:46:18:2c:f7:e7:ea:62:
9a:9c:d6:89:e1:42:ba:b7:b8:e5:a9:f6:1a:e6:60:
06:60:2a:0b:5a:58:cc:cb:a5:4c:e3:7a:c3:bb:8a:
4a:2b:b1:50:ec:ec:60:48:2c:d7:0f:7a:28:36:f0:
07:eb:d9:0f:e7:63:b0:a2:c9:06:52:3a:39:93:c7:
03:0c:75:63:9f:03:92:a4:33:55:36:23:6b:90:06:
ab:a0:72:6b:e1:f9:7d:78:e5:d5:58:8f:01:4e:19:
8e:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:0A:26:7B:9A:BE:26:EE:23:B9:71:3F:2F:12:65:3D:77:AA:C8:30
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/qQome5q-Ju4juXE_LxJlPXeqyDA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
4b:f8:91:ee:9e:36:21:ca:50:09:8e:3b:6c:16:b7:57:32:38:
26:4c:a7:56:5f:50:8b:53:6c:f7:8d:a0:32:8d:9d:0c:b6:8b:
45:8c:24:cf:59:7b:01:df:6d:09:2a:c1:f0:26:b3:d9:c8:93:
92:ce:93:d2:2b:ba:0e:ab:8b:cf:25:f2:91:25:a7:f1:62:13:
88:d0:70:28:5b:b7:35:8f:61:ab:38:c1:53:7f:97:4c:cf:5e:
fc:17:93:03:ed:f0:5e:b7:44:8e:d3:2f:10:ed:98:7c:80:84:
24:14:22:6e:31:08:26:18:a8:37:c8:e7:9c:05:97:c8:a7:ca:
96:95:68:b7:4e:49:c6:0a:ca:2f:64:16:6d:c2:5a:00:69:d6:
95:34:6a:5e:b7:bd:db:73:0f:be:30:1d:56:80:b8:94:0d:d6:
4b:c0:19:81:9f:77:bc:75:89:10:82:5b:68:50:36:6f:79:42:
3a:58:8d:d7:f2:3a:de:06:68:1f:31:4b:43:da:8a:95:d6:d8:
1e:5b:bf:2a:d8:10:ba:46:a5:6c:d4:e5:29:51:33:bf:42:f2:
0f:2c:50:76:a6:0e:c4:5e:0a:b6:66:5d:17:22:dc:42:c0:80:
84:b0:db:b9:a6:72:ac:bd:d4:59:78:b7:de:86:12:25:f9:83:
d0:b7:8a:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:57:35 2025 by rpki-client