Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/qfrdyERPXCqbxJ_Ved5-84shpi8.roa
File: qfrdyERPXCqbxJ_Ved5-84shpi8.roa (raw, json)
Hash identifier: 9CMe1K+5UQYZF2nnPNvsZ8upEEH1m8VcyPYmPvcam1A=
Subject key identifier: A9:FA:DD:C8:44:4F:5C:2A:9B:C4:9F:D5:79:DE:7E:F3:8B:21:A6:2F
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 77FA
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/qfrdyERPXCqbxJ_Ved5-84shpi8.roa
Signing time: Thu 17 Jul 2025 06:42:02 +0000
ROA not before: Thu 17 Jul 2025 06:42:02 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30714 (0x77fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jul 17 06:42:02 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=A9FADDC8444F5C2A9BC49FD579DE7EF38B21A62F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b9:0a:b8:60:ba:51:aa:5d:40:7a:bd:e4:53:
8a:80:17:10:7d:0e:d2:3a:fd:7c:f6:d0:15:d3:db:
92:a9:71:8c:f8:38:5a:b6:c7:88:07:d8:3b:23:9e:
ba:65:62:4e:c3:2e:2d:32:64:61:73:74:7f:3b:99:
a4:b3:6f:3e:0f:85:77:55:c6:cb:72:03:0e:b7:f2:
7f:f2:81:84:1a:9f:48:40:18:6d:94:52:ea:d8:94:
1d:9d:69:67:7f:99:52:12:74:a6:23:8d:71:9f:c1:
27:38:22:41:24:62:cc:a0:2e:f8:a0:a6:44:a7:b7:
33:11:f8:a3:58:09:fe:f2:ba:88:d1:58:67:73:8c:
ab:df:80:d1:2b:d9:bf:df:dc:64:76:eb:37:e7:da:
96:6e:f2:a9:9f:b2:3e:53:02:b8:30:07:ff:94:4a:
aa:01:c4:e5:60:4d:b6:35:29:48:d4:79:4f:9a:ad:
e4:69:71:bc:3a:df:75:16:4b:38:e8:5c:6e:b6:4d:
42:ae:94:1e:16:58:e3:1f:e9:f7:c9:a8:16:c2:64:
b4:0c:8c:18:65:25:25:8c:2f:44:97:e1:eb:74:54:
b9:e5:a3:c3:08:21:0c:c5:0b:d1:a9:4c:20:6f:fc:
32:ff:53:71:5d:db:c2:f9:bd:74:9c:4b:ac:c7:f6:
75:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:FA:DD:C8:44:4F:5C:2A:9B:C4:9F:D5:79:DE:7E:F3:8B:21:A6:2F
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/qfrdyERPXCqbxJ_Ved5-84shpi8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
57:75:d5:d6:6c:85:8b:8b:27:7e:66:d6:08:68:a1:4b:85:be:
6c:6a:49:bb:15:26:6e:0b:ae:a1:1f:2a:1a:85:51:35:48:6a:
c1:43:fe:44:59:61:d3:f1:b5:6c:b1:b4:72:bf:10:18:9b:22:
51:a3:6f:72:31:17:38:27:c9:75:45:8b:ec:86:2d:d5:51:f0:
53:23:53:9f:7c:8f:82:48:45:63:37:ac:24:41:40:fd:f8:00:
26:f9:03:06:ad:3b:9b:fe:80:e3:cb:00:bf:52:1b:37:9d:da:
85:a8:e3:dd:d5:62:aa:f2:25:87:86:52:a8:a6:cb:64:ea:06:
f4:b0:4a:c7:ea:69:93:60:89:9a:81:94:7d:02:2c:03:4d:64:
04:51:31:7a:fb:26:62:aa:62:76:7e:79:04:06:c5:d3:43:16:
dc:b2:f3:6d:d2:db:c4:eb:0f:d2:cf:29:73:7d:8a:92:ad:26:
20:c4:12:ce:59:a1:4e:e7:93:4c:8a:20:08:5a:13:9b:29:c9:
eb:f3:ca:7a:17:57:57:f0:b9:d2:c9:9f:c4:6e:eb:6b:64:1f:
09:81:57:9e:18:ba:8a:a5:4c:bc:98:d0:97:86:38:9a:82:43:
2d:db:8b:3d:2e:df:7c:1c:32:4b:98:86:a3:0b:18:9a:09:09:
6f:9d:ff:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:45:33 2025 by rpki-client