Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/t4sB7OJpq9jOC4v64lET9S_iEMM.roa
File: t4sB7OJpq9jOC4v64lET9S_iEMM.roa (raw, json)
Hash identifier: d38ps/HnfZdsWhZlKx/keGsVlTZFUSqMxf9UMSeiDMM=
Subject key identifier: B7:8B:01:EC:E2:69:AB:D8:CE:0B:8B:FA:E2:51:13:F5:2F:E2:10:C3
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 6ED0
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/t4sB7OJpq9jOC4v64lET9S_iEMM.roa
Signing time: Mon 23 Jun 2025 01:49:55 +0000
ROA not before: Mon 23 Jun 2025 01:49:55 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28368 (0x6ed0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jun 23 01:49:55 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=B78B01ECE269ABD8CE0B8BFAE25113F52FE210C3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:75:20:0f:97:0e:b0:d3:7c:b4:88:55:5b:f8:
17:ad:46:88:33:36:6d:cf:33:84:ec:38:f6:81:ca:
90:32:e0:49:88:e3:f6:f1:ed:e8:48:13:8f:05:15:
ac:c8:83:16:fb:55:bd:ef:19:db:60:9c:44:87:63:
6f:62:77:6d:21:b1:04:aa:6d:d5:64:be:1a:68:67:
9b:ec:8f:0b:4a:36:79:6c:cb:ea:94:46:2d:54:dd:
8c:f2:3d:fe:bf:0e:e2:19:c9:4a:e7:a9:c3:a9:cc:
a4:20:1f:0e:96:fe:78:41:a2:34:8b:8b:c1:79:64:
38:e5:12:65:89:b6:6f:3a:43:88:6c:0d:04:10:f1:
85:be:d5:cd:69:5b:0b:db:78:c1:2f:f6:af:43:b6:
f3:20:1a:f6:77:de:82:ad:36:58:0b:68:f8:f0:31:
a7:77:f8:69:4e:b9:e7:0d:82:6b:56:2e:ba:ab:d7:
f0:40:b1:7d:57:9b:5d:85:bc:af:ac:b2:d8:c5:68:
81:d5:e9:f6:bd:f8:91:f9:c3:d0:98:8b:5f:ad:f7:
81:05:c9:cc:ed:ab:52:25:9b:bb:ef:71:03:ba:13:
8e:34:3e:66:35:97:46:cd:0a:bc:db:8a:a4:b6:bc:
9d:e4:5d:a0:d4:66:df:df:e5:6e:16:8e:c2:0f:7d:
7d:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:8B:01:EC:E2:69:AB:D8:CE:0B:8B:FA:E2:51:13:F5:2F:E2:10:C3
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/t4sB7OJpq9jOC4v64lET9S_iEMM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
1d:e0:d7:4b:c6:96:25:c1:9c:c5:fa:58:4d:56:17:78:41:0c:
e7:05:26:50:dd:83:8d:89:ba:b5:5c:fc:cb:f2:cd:2e:c0:17:
00:05:78:b4:de:98:e4:03:0e:ed:51:13:d6:ea:38:9d:e8:67:
30:f0:d4:d7:af:d2:4c:97:f2:e7:e2:58:38:74:5f:7a:ce:ba:
90:88:6a:74:b9:27:f4:b1:a6:9c:eb:0b:1c:9c:22:8d:b7:12:
bc:48:a8:40:17:07:14:45:5a:03:a0:8a:14:f3:26:49:5a:f9:
d3:b2:41:2f:fa:59:e0:4d:47:08:a9:c5:4c:c7:af:d3:fe:e6:
9e:0f:d6:6f:80:60:23:6f:b4:02:b3:4e:db:5c:7e:37:92:90:
ab:c1:b6:07:db:9e:b0:27:e7:f1:82:e7:2b:51:36:41:5a:c7:
d9:19:f7:e3:03:57:05:bd:41:ac:82:4a:b4:51:e3:86:c6:ea:
24:c8:46:1c:d5:82:12:ca:c8:16:b8:f0:71:a6:5d:e1:ec:c1:
6f:df:cb:3e:b2:f6:a9:05:2f:b7:56:f5:d4:88:db:a9:e5:6a:
eb:ac:a2:09:98:aa:a5:02:82:40:2b:ad:df:83:56:f9:cf:a5:
42:75:42:ac:ee:26:55:95:e6:38:5c:78:2a:ac:dd:93:b8:2c:
cb:e0:5c:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:41:11 2025 by rpki-client