Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/vkkuT-NJZIpE0rIUIkluxoTqZko.roa
File: vkkuT-NJZIpE0rIUIkluxoTqZko.roa (raw, json)
Hash identifier: N5t9kzI8x/18s9/VMOEHNSpnQ1VlCYJiISSouLlNSJw=
Subject key identifier: BE:49:2E:4F:E3:49:64:8A:44:D2:B2:14:22:49:6E:C6:84:EA:66:4A
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 7706
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vkkuT-NJZIpE0rIUIkluxoTqZko.roa
Signing time: Mon 14 Jul 2025 17:41:53 +0000
ROA not before: Mon 14 Jul 2025 17:41:53 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30470 (0x7706)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jul 14 17:41:53 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=BE492E4FE349648A44D2B21422496EC684EA664A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:17:d0:63:b7:e3:0a:ab:81:af:51:19:4d:96:
3a:b0:82:c3:96:1a:27:d6:40:19:44:55:8e:f1:ad:
84:be:58:f3:a7:6d:4a:67:91:20:cf:3d:41:24:ee:
bc:45:5f:41:0f:47:ec:cd:e9:5b:00:43:f6:58:f3:
c3:da:75:13:c7:c1:34:9a:25:3f:c9:31:91:0a:42:
93:1d:d7:c1:67:87:f4:54:8c:af:2b:8f:d3:88:ec:
1d:14:04:d6:a9:e6:d6:ab:85:65:be:d0:0d:35:c0:
b3:c6:f8:1e:6d:ab:eb:ef:4b:36:9a:e0:58:95:4c:
1d:c8:3e:a8:6a:b0:40:de:3f:89:fe:36:6f:ba:50:
07:a2:07:84:dd:06:b8:39:52:19:ca:e1:2b:6f:ec:
fc:b7:9c:15:e0:7a:a7:d0:bb:52:76:08:5e:f1:3f:
be:9d:08:32:f7:c2:c4:07:e4:b0:39:9e:ef:d6:66:
fa:93:d9:70:be:a9:f9:29:f9:de:e4:b7:f5:b4:06:
78:68:70:55:bb:d3:b9:7c:8e:59:9b:f4:5d:36:24:
18:ac:9c:d5:75:cd:22:c9:76:4f:7d:c3:d0:d8:8b:
18:f7:ce:a5:3d:1a:f9:64:20:69:b4:f4:62:3d:8c:
80:8a:73:a5:2a:b0:07:c8:a8:87:b1:25:2a:5c:f7:
22:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:49:2E:4F:E3:49:64:8A:44:D2:B2:14:22:49:6E:C6:84:EA:66:4A
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vkkuT-NJZIpE0rIUIkluxoTqZko.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
26:b9:ed:de:df:97:58:0b:a8:a0:55:78:c5:01:f5:9b:3e:33:
e2:37:fe:e8:74:fb:6c:ca:91:01:da:73:e7:84:4e:91:81:4c:
98:97:bd:b8:4e:89:a2:15:48:94:db:a1:5b:32:3f:ec:f0:28:
1c:fa:dc:c8:c5:86:7b:ec:7d:13:e5:8c:0f:68:cb:bf:f3:e0:
3b:0d:61:50:af:1c:8f:14:15:48:26:f3:2d:3b:ca:20:40:ce:
60:93:7a:95:e4:da:cb:a3:a3:2c:84:0c:4c:07:b0:fc:78:a1:
4d:cf:af:c5:5b:2b:02:52:92:26:bf:94:50:a1:57:17:68:36:
20:f2:ef:76:cc:b2:e7:ee:09:37:ea:83:20:79:df:c0:32:2b:
1c:7c:59:f0:08:dd:ca:90:94:60:4b:d4:e5:1e:0a:f1:f0:91:
43:11:7c:3f:f2:63:04:11:89:3b:94:af:f2:ce:9e:b6:46:98:
60:6b:e1:9d:51:64:2d:5b:2f:92:78:7f:50:cf:1a:42:21:03:
90:66:c2:44:65:37:a8:64:72:6c:fc:30:0e:4e:17:c9:41:0e:
26:9e:af:04:df:0e:0c:b4:01:17:a2:39:a9:de:8d:60:57:eb:
7e:aa:45:3f:62:36:90:d2:ba:bf:48:40:27:28:a1:0b:8d:c7:
69:e9:88:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:50:48 2025 by rpki-client