Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/s7OtGMWUpwiVRdI8Di0HxjhPlu4.roa
File: s7OtGMWUpwiVRdI8Di0HxjhPlu4.roa (raw, json)
Hash identifier: ncTe2ekoXZoOvTHu3ChOqmpmLNWch2BtICP/llbFe9M=
Subject key identifier: B3:B3:AD:18:C5:94:A7:08:95:45:D2:3C:0E:2D:07:C6:38:4F:96:EE
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 783C
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/s7OtGMWUpwiVRdI8Di0HxjhPlu4.roa
Signing time: Thu 17 Jul 2025 23:13:38 +0000
ROA not before: Thu 17 Jul 2025 23:13:37 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30780 (0x783c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jul 17 23:13:37 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=B3B3AD18C594A7089545D23C0E2D07C6384F96EE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:22:84:56:3a:ea:fc:25:8b:72:9b:91:91:34:
cb:2c:16:e8:e8:6e:3e:a1:dc:48:3b:b2:cf:3b:55:
bb:ab:32:7c:a1:85:4d:de:7a:12:79:0f:42:43:16:
e1:17:86:95:49:8f:81:13:af:8b:b4:e2:57:23:21:
a2:a4:71:90:25:07:98:6f:e3:63:9b:33:05:81:a4:
77:e7:82:fb:34:e7:41:dc:42:d3:6b:3e:81:ea:b2:
11:58:98:18:d0:cd:5d:84:07:30:92:0a:55:bf:35:
85:1f:51:c8:ef:93:90:f9:d5:4c:5c:58:4a:69:6e:
a0:cf:98:46:c4:93:05:5b:f6:ac:ff:f0:33:0e:ca:
42:8b:40:16:da:c5:c1:10:27:7b:af:bb:1a:8b:dd:
d9:26:46:b5:19:6a:31:3e:8e:7e:a9:1c:78:5b:57:
f9:16:94:be:73:69:1c:4f:40:c8:ad:0f:78:ec:5b:
87:7c:b8:6c:a6:be:bc:55:f2:84:b9:3a:fb:04:ce:
c1:98:54:a1:cf:c9:9c:81:e3:1c:0b:8e:61:96:4b:
19:5b:cb:ba:2a:c4:c0:33:a3:eb:68:da:2e:d5:7f:
14:17:60:36:a5:c0:b7:fe:29:53:d5:cf:e0:e2:5f:
67:1c:71:f1:00:a7:cf:dd:75:f0:61:bc:c3:57:71:
85:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:B3:AD:18:C5:94:A7:08:95:45:D2:3C:0E:2D:07:C6:38:4F:96:EE
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/s7OtGMWUpwiVRdI8Di0HxjhPlu4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
50:88:e5:5e:4b:7c:4d:51:be:e1:53:3a:dc:1f:52:f6:49:91:
d6:5f:87:d7:72:0f:e6:c2:9d:88:0f:04:fe:ce:a9:30:e7:af:
24:e0:93:d6:9a:15:dd:7f:9e:e9:c6:82:ee:5b:85:c5:1e:cd:
3e:6c:8e:c9:50:f8:a6:99:78:87:c0:17:24:8b:25:99:7f:56:
1e:af:b8:27:d4:cf:f0:ad:8f:14:eb:15:4e:3d:4f:08:30:be:
1a:0f:db:bc:61:34:40:00:7f:44:e1:23:ad:32:aa:d1:f4:d3:
df:8f:4c:ad:f3:a7:75:09:10:35:22:e6:0c:57:d1:b6:67:96:
05:db:26:0f:a3:e2:14:07:48:b0:28:e7:1f:6a:60:59:44:a7:
be:16:4c:30:b8:37:cc:3a:c6:ca:a1:ed:56:e3:59:93:17:22:
69:cd:1e:dd:a8:0e:33:6d:8a:c2:71:d3:03:8c:9c:9c:66:b6:
19:1d:8c:07:b5:5b:1d:8d:6c:94:7b:81:f2:4f:ff:02:89:26:
c8:41:eb:5b:e7:79:54:94:fe:eb:e8:93:a7:8d:11:ef:ee:e0:
39:8a:a8:7f:77:03:ae:9d:84:08:20:73:20:09:e1:01:c0:e3:
b0:aa:9f:a7:07:0a:bc:b6:31:24:62:aa:0f:12:41:61:82:1f:
8d:e2:18:c3
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgICeDwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNTA3MTcy
MzEzMzdaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKEIzQjNBRDE4QzU5NEE3
MDg5NTQ1RDIzQzBFMkQwN0M2Mzg0Rjk2RUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCWIoRWOur8JYtym5GRNMssFujobj6h3Eg7ss87VburMnyhhU3e
ehJ5D0JDFuEXhpVJj4ETr4u04lcjIaKkcZAlB5hv42ObMwWBpHfngvs050HcQtNr
PoHqshFYmBjQzV2EBzCSClW/NYUfUcjvk5D51UxcWEppbqDPmEbEkwVb9qz/8DMO
ykKLQBbaxcEQJ3uvuxqL3dkmRrUZajE+jn6pHHhbV/kWlL5zaRxPQMitD3jsW4d8
uGymvrxV8oS5OvsEzsGYVKHPyZyB4xwLjmGWSxlby7oqxMAzo+to2i7VfxQXYDal
wLf+KVPVz+DiX2cccfEAp8/ddfBhvMNXcYUTAgMBAAGjggI0MIICMDAdBgNVHQ4E
FgQUs7OtGMWUpwiVRdI8Di0HxjhPlu4wHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L3M3T3RHTVdVcHdpVlJk
SThEaTBIeGpoUGx1NC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwYgYIKwYBBQUHAQcBAf8EUzBRME8EAgABMEkD
BAIr7zADBAMr9gAwDAMEAiv2DAMEBCv2IDAMAwQCK/Y0AwQCK/ZgAwQCZyMwMAsD
AwJn7AMEA2fsEDAMAwQCZ+wcAwQCZ+xgMA0GCSqGSIb3DQEBCwUAA4IBAQBQiOVe
S3xNUb7hUzrcH1L2SZHWX4fXcg/mwp2IDwT+zqkw568k4JPWmhXdf57pxoLuW4XF
Hs0+bI7JUPimmXiHwBckiyWZf1Yer7gn1M/wrY8U6xVOPU8IML4aD9u8YTRAAH9E
4SOtMqrR9NPfj0yt86d1CRA1IuYMV9G2Z5YF2yYPo+IUB0iwKOcfamBZRKe+Fkww
uDfMOsbKoe1W41mTFyJpzR7dqA4zbYrCcdMDjJycZrYZHYwHtVsdjWyUe4HyT/8C
iSbIQetb53lUlP7r6JOnjRHv7uA5iqh/dwOunYQIIHMgCeEBwOOwqp+nBwq8tjEk
YqoPEkFhgh+N4hjD
-----END CERTIFICATE-----
Generated at Sun Jul 20 12:53:33 2025 by rpki-client