Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/qx9aVhrfXPO79tGSX46V5n8R2Sg.roa
File: qx9aVhrfXPO79tGSX46V5n8R2Sg.roa (raw, json)
Hash identifier: 0uoeCLHBnLRO2jNo9fXfVOiymm0+hPbZ1sWYVc5Cdco=
Subject key identifier: AB:1F:5A:56:1A:DF:5C:F3:BB:F6:D1:92:5F:8E:95:E6:7F:11:D9:28
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 711E
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/qx9aVhrfXPO79tGSX46V5n8R2Sg.roa
Signing time: Sat 28 Jun 2025 23:14:40 +0000
ROA not before: Sat 28 Jun 2025 23:14:40 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28958 (0x711e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jun 28 23:14:40 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=AB1F5A561ADF5CF3BBF6D1925F8E95E67F11D928
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:8a:c3:d3:88:15:00:03:72:02:37:24:4b:40:
2e:8d:25:51:64:f3:30:4e:84:f9:f9:bb:13:35:32:
2a:67:31:5b:6a:b7:17:74:ff:b2:12:9a:d8:95:a8:
43:b8:16:38:60:bf:93:8d:2c:f5:00:66:f6:a9:a7:
35:b3:2d:28:5e:ba:6d:ba:f4:91:a0:31:1f:fe:70:
35:c7:89:ed:5b:85:ab:27:1e:33:b5:c7:9f:a9:53:
0d:ee:68:a0:22:bc:e4:bf:fd:9a:d8:12:79:61:a4:
3e:38:fa:51:2d:1b:85:1d:82:1d:58:e2:6a:78:b1:
3b:6f:ba:38:38:43:c7:5e:d1:e3:45:16:65:ba:5e:
af:d4:52:c5:df:90:87:3c:45:af:6f:ee:d8:d6:86:
50:8a:6b:25:79:e0:12:25:df:61:61:1c:67:f4:20:
6d:fa:3e:ce:65:5d:c1:2f:3b:32:da:92:ef:4a:06:
d2:bb:da:98:31:ba:6b:68:15:06:d8:10:79:fd:60:
e5:ee:ab:7e:e7:4e:43:9d:c2:15:12:e6:69:3d:a6:
0f:ac:b5:63:af:3e:20:54:89:10:5f:2a:79:f2:3c:
df:71:e6:fe:12:49:f5:a3:84:3e:27:c0:a4:0b:0a:
c3:9d:d2:34:8f:53:6c:59:a0:5e:5f:b2:58:b6:ac:
f6:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:1F:5A:56:1A:DF:5C:F3:BB:F6:D1:92:5F:8E:95:E6:7F:11:D9:28
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/qx9aVhrfXPO79tGSX46V5n8R2Sg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
19:9f:87:cd:71:f7:32:94:be:30:30:4a:bd:0b:55:9f:e8:eb:
96:5a:4b:97:9d:e1:97:76:5a:c4:48:1d:12:10:a4:0f:6e:87:
4b:68:e5:fe:d2:32:0d:f2:e5:86:5d:64:a4:f4:dc:8b:99:ed:
33:34:2f:99:0b:d4:5b:0e:24:3f:2c:84:24:bb:aa:8b:37:71:
70:a9:c4:97:24:76:43:83:c1:e6:0b:a0:28:b0:ce:48:6f:00:
fd:a1:89:b4:d6:be:ec:6f:ed:e7:e5:70:94:ca:f3:1a:9c:11:
f8:7d:cc:46:11:47:d7:e2:77:21:18:81:64:7b:3b:43:a3:b2:
2d:53:07:28:18:a6:83:5b:9a:18:65:d6:c9:7e:0b:85:01:71:
09:40:0e:5b:de:6b:35:23:f4:96:4d:79:14:b0:ca:60:40:37:
e0:ae:d9:79:d9:db:6c:d7:61:ed:26:3a:8a:8c:75:55:db:fc:
b9:99:d8:b5:eb:ea:95:24:86:b5:d2:b4:28:a3:84:a9:55:aa:
3e:13:b8:a2:1c:f2:ad:85:96:d6:3c:3a:75:cb:54:35:e3:be:
18:3b:0d:06:57:46:ff:37:e0:4a:e9:0c:29:7c:ff:4c:42:70:
01:db:03:6a:2f:37:ce:36:90:c3:e8:ea:c0:21:82:6a:97:ab:
22:d4:58:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:35:10 2025 by rpki-client