Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/sB_3cvd2vy9JoqDxvBmefAl-RVM.roa
File: sB_3cvd2vy9JoqDxvBmefAl-RVM.roa (raw, json)
Hash identifier: LMaYL41aGppYZkA+d27gHwwCgNqUi+X9D09SlbB/XTw=
Subject key identifier: B0:1F:F7:72:F7:76:BF:2F:49:A2:A0:F1:BC:19:9E:7C:09:7E:45:53
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 77F0
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/sB_3cvd2vy9JoqDxvBmefAl-RVM.roa
Signing time: Thu 17 Jul 2025 04:12:55 +0000
ROA not before: Thu 17 Jul 2025 04:12:55 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30704 (0x77f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jul 17 04:12:55 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=B01FF772F776BF2F49A2A0F1BC199E7C097E4553
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:42:30:df:e3:99:6b:f6:d8:88:62:ad:9b:91:
82:e5:0d:99:50:ef:72:53:8a:77:79:41:10:35:78:
d4:9e:2c:c8:2a:fa:cb:dc:75:98:3a:af:51:9d:d9:
7d:85:25:3c:2e:d4:d6:29:3d:4c:74:6e:c7:c0:0a:
61:70:da:cf:1a:1e:c2:64:1f:3c:a5:6e:d9:2d:d9:
3e:fd:f3:9d:7a:e9:e9:79:ef:c5:ba:2c:55:ff:46:
26:84:b1:a8:a5:ce:01:2a:86:88:a8:78:7a:d0:41:
bb:c8:a0:87:53:bf:a5:dc:99:67:43:1a:3e:8a:8e:
b5:6c:f3:88:be:52:b0:de:2c:2a:a4:e7:f4:62:92:
6f:e9:5f:cc:af:b8:6e:47:fa:8e:cf:ba:23:c0:54:
ab:ee:85:72:75:ba:dd:87:14:3c:5b:37:d1:61:d1:
70:fb:c4:9f:a9:f8:28:b1:72:2b:fc:61:9c:d9:39:
83:df:a3:7f:d6:eb:90:53:93:ad:7c:8f:a8:ea:c0:
26:88:f7:06:f5:5a:1c:6c:d8:23:ce:a1:f7:7c:c4:
6b:ee:0c:a0:51:c3:0f:76:f1:c0:8c:d4:49:5f:1a:
57:88:cf:17:7d:5e:c1:27:41:42:f6:80:2e:33:9c:
41:6f:e1:8a:7f:01:7c:f7:0f:d2:b5:8a:26:d4:3d:
55:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:1F:F7:72:F7:76:BF:2F:49:A2:A0:F1:BC:19:9E:7C:09:7E:45:53
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/sB_3cvd2vy9JoqDxvBmefAl-RVM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
02:c9:13:e7:6c:fa:98:7c:b3:67:2f:6b:72:2a:61:ea:99:a9:
e2:40:bf:57:e8:cb:04:a3:21:a5:e3:53:2f:2f:93:4c:2b:bb:
86:b0:f7:02:82:bb:00:10:99:87:c5:a9:50:4c:ef:1c:67:b1:
47:72:09:e3:a4:1b:cc:7b:35:16:96:81:66:f2:27:e5:63:a6:
b5:e0:66:17:0b:8d:b0:3e:2c:ae:70:e6:41:16:3b:5c:bf:c1:
2f:86:2d:a1:de:88:45:c1:95:f4:09:d6:fd:42:f9:f3:06:a5:
01:e6:39:6c:a9:e5:fe:9a:50:ad:a0:60:d7:13:e6:f6:2f:31:
5e:d1:7f:c4:af:02:d1:39:af:d8:37:05:31:c6:4a:f2:db:a1:
3f:08:56:01:f0:ec:9e:c5:b7:ce:a3:33:26:ee:01:c7:c7:ad:
18:f3:25:12:6d:3e:16:0c:b1:0e:55:74:e0:67:5d:ce:db:e6:
3d:fb:91:bf:8c:25:e7:14:61:81:ac:ca:9e:a7:8e:7a:e4:84:
22:d6:d2:6c:78:a0:50:ae:45:7c:d7:b9:8a:e1:19:19:ea:6f:
57:25:19:80:2b:11:49:24:88:b6:8b:cf:13:bb:2a:4f:fa:89:
28:86:e2:46:6f:57:95:1b:0b:a7:d3:45:06:88:36:55:c2:2f:
87:d3:d1:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:36:12 2025 by rpki-client