Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/vb8Bp_P1MOV1ceNnKJYKKRiW4oc.roa
File: vb8Bp_P1MOV1ceNnKJYKKRiW4oc.roa (raw, json)
Hash identifier: WZmTJRxOZom5xgxTVqv7vd4m8pgoXR8kCh4rtkY6tew=
Subject key identifier: BD:BF:01:A7:F3:F5:30:E5:75:71:E3:67:28:96:0A:29:18:96:E2:87
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 785E
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vb8Bp_P1MOV1ceNnKJYKKRiW4oc.roa
Signing time: Fri 18 Jul 2025 07:42:03 +0000
ROA not before: Fri 18 Jul 2025 07:42:03 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30814 (0x785e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jul 18 07:42:03 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=BDBF01A7F3F530E57571E36728960A291896E287
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:c5:ad:56:25:93:ec:e4:9e:bf:82:68:99:d8:
fb:1f:3a:ec:51:b0:6c:2c:a9:e5:b9:8e:b9:e3:34:
29:21:da:45:86:25:94:02:b4:90:db:03:a9:4a:08:
a0:03:68:22:2a:cf:04:b1:f9:30:d7:3b:07:8e:e7:
fb:60:f8:c7:e1:6b:81:47:9e:7f:f7:8d:c8:09:55:
71:91:48:02:b0:68:23:22:31:54:6a:23:59:6b:03:
9e:83:bc:20:96:ad:54:ca:cc:21:b6:3e:74:98:29:
0b:6b:8b:0a:bb:47:d7:ff:5e:d6:3b:6a:d5:42:05:
6d:94:30:d7:cf:66:8c:63:68:37:a1:6d:79:ee:5c:
2c:3d:3b:b3:de:9b:13:c9:29:a3:4b:0e:32:38:5d:
5e:11:5f:18:6f:94:ae:2b:92:b8:b1:a6:8e:6d:f8:
34:62:88:68:c7:f7:d6:e0:78:c3:7b:b8:ab:14:6a:
3a:be:ad:e1:2b:93:96:36:48:a8:46:78:a1:89:c9:
17:50:c4:10:51:ac:65:bf:ae:d5:ba:e5:1d:b9:6d:
70:e4:a5:bb:60:f7:a1:17:06:6b:a3:30:ab:c1:72:
9c:77:2d:eb:0e:62:dd:5e:f5:47:a5:0d:87:d4:96:
e4:bc:69:4b:75:b9:8f:62:2c:99:5f:bb:71:c7:2b:
79:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:BF:01:A7:F3:F5:30:E5:75:71:E3:67:28:96:0A:29:18:96:E2:87
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vb8Bp_P1MOV1ceNnKJYKKRiW4oc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
1c:4d:ea:09:1a:bf:d2:ac:5d:f1:43:ee:6f:49:28:f5:c0:16:
91:fc:01:9c:f9:d2:ee:36:59:e0:ff:7f:82:85:6f:70:c2:e3:
e1:f9:8d:f3:01:39:3e:35:90:23:73:b3:58:bd:f1:43:2d:94:
81:ba:a5:3f:3a:8d:eb:85:86:f1:be:1d:b6:1a:d3:13:44:d0:
19:fc:30:b1:fd:61:04:4f:5c:68:5c:98:76:e7:04:79:ab:89:
3d:4a:1f:b6:a4:06:dd:85:52:b8:88:cb:46:19:85:19:a0:99:
bf:75:d9:86:b9:7b:89:9a:ba:3e:ea:57:22:97:bc:4e:8a:29:
38:87:1e:b4:14:fa:bb:af:ea:02:78:b0:82:b0:7e:45:a6:e5:
60:35:3c:67:f1:7a:8e:70:c3:d9:d2:5f:d2:2c:ad:1f:5a:51:
a2:ed:d2:af:71:ea:39:28:76:12:68:df:c9:e7:d6:42:54:90:
a2:0b:3b:75:e4:2b:9f:b3:bf:ef:78:93:fe:85:18:12:50:b9:
98:90:c2:3d:73:05:41:81:93:28:1c:0a:bc:ff:86:bf:fe:f5:
ee:b3:4c:1e:74:40:56:d5:be:fb:71:d2:b5:8b:42:78:7a:8d:
a0:fc:f8:53:62:47:1d:0e:51:e5:76:16:bf:61:8e:89:4e:68:
f5:42:7f:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:32:08 2025 by rpki-client