Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/tlqOfekX61e0uxB9BqY6xVX1QcE.roa
File: tlqOfekX61e0uxB9BqY6xVX1QcE.roa (raw, json)
Hash identifier: 3s4o3qk0EL985QddPfkgMuY4XTZ9RmkwJohsKSns/k8=
Subject key identifier: B6:5A:8E:7D:E9:17:EB:57:B4:BB:10:7D:06:A6:3A:C5:55:F5:41:C1
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 7912
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/tlqOfekX61e0uxB9BqY6xVX1QcE.roa
Signing time: Sun 20 Jul 2025 04:42:08 +0000
ROA not before: Sun 20 Jul 2025 04:42:08 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30994 (0x7912)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jul 20 04:42:08 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=B65A8E7DE917EB57B4BB107D06A63AC555F541C1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:cf:c3:4d:5d:dc:f5:e4:0c:f5:8e:34:2a:22:
39:b6:ef:92:c0:6a:4f:74:1b:07:dd:03:48:c0:58:
53:af:5d:8e:48:a0:8e:49:7a:a6:79:4e:73:5d:e9:
99:4f:20:86:c6:14:62:1b:54:31:20:b1:a2:7e:58:
e0:14:46:cb:f3:d4:4f:8a:e4:5a:4e:9a:67:88:19:
73:07:bb:f7:d3:ae:45:31:4e:18:51:4b:f1:49:3e:
5f:d7:9d:c5:dc:27:ff:f9:4b:b1:ae:7e:63:88:22:
a1:f5:1f:90:74:73:7b:2c:4a:f3:0d:f1:2c:94:9b:
f0:74:9e:e8:f9:8c:0d:1c:c0:18:91:f8:d7:60:4a:
d1:8d:c7:a0:b6:a2:7b:10:cf:ba:ee:9e:6d:3b:9b:
33:9d:06:25:fa:35:d4:5c:8b:34:38:8b:ca:58:c6:
0a:d6:ca:5c:cb:a6:ff:29:14:c4:9e:3c:b3:ab:24:
c8:f7:f6:ae:55:c4:03:94:20:03:00:a0:8b:5f:27:
6d:05:ee:fd:e2:3f:72:ed:66:a9:74:f5:96:60:3c:
11:29:42:b2:d8:51:9e:c6:45:3b:a8:55:61:04:d2:
c8:bf:3b:0a:c8:e0:5c:5b:6f:b2:52:ff:70:2a:b8:
7d:c6:92:11:7c:d0:59:a7:c0:d8:dc:6d:70:82:c3:
37:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:5A:8E:7D:E9:17:EB:57:B4:BB:10:7D:06:A6:3A:C5:55:F5:41:C1
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/tlqOfekX61e0uxB9BqY6xVX1QcE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
91:79:4e:e4:6c:37:cc:49:69:b2:22:74:5d:7a:d4:ac:ab:1a:
31:f0:22:34:0f:b5:16:f1:0a:18:44:1a:1b:de:8d:a5:d6:7d:
db:05:e3:e6:8e:e5:8c:b0:fc:43:1f:d0:d4:5d:3a:2a:8a:09:
ff:c3:00:51:ca:8b:64:9f:ac:1f:68:14:41:68:26:7f:04:a6:
fd:dd:09:29:a5:8b:f4:2f:7f:45:16:d0:06:f7:de:da:8c:4a:
8e:64:7c:c1:08:5e:9b:b2:77:3e:67:31:0d:dd:9e:e5:cb:9e:
67:8e:10:77:42:b7:1c:e7:8a:d9:99:9e:e2:12:95:c0:d2:48:
79:2e:8d:85:40:99:af:c6:ce:b5:9e:6c:28:53:76:74:fa:e8:
f4:42:87:e0:cd:cf:cd:7c:15:6e:91:66:28:a2:46:96:7f:04:
82:5c:08:34:7f:89:b8:bb:83:b9:3c:8b:3e:17:c6:f2:d8:ce:
82:b7:7c:6d:f1:b3:c0:67:71:c3:8e:bb:8b:93:14:e2:1c:75:
43:05:68:4e:16:3f:2a:e6:9a:13:e1:84:ee:21:dc:f7:e1:5c:
ed:5e:7e:08:e3:03:40:ff:54:23:d1:f7:3c:e6:c7:a5:10:e8:
c0:ff:cb:2f:13:4c:43:08:95:cb:9a:59:30:f4:ef:a3:94:c6:
5a:76:8d:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:51:15 2025 by rpki-client