Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/wGyHhDsQuJgOS6RpvtbVGgcdjE4.roa
File: wGyHhDsQuJgOS6RpvtbVGgcdjE4.roa (raw, json)
Hash identifier: Q4JU/av2M306+CKqMax6N7khAY/zWSUXZiLGV82Xzp0=
Subject key identifier: C0:6C:87:84:3B:10:B8:98:0E:4B:A4:69:BE:D6:D5:1A:07:1D:8C:4E
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 76EC
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/wGyHhDsQuJgOS6RpvtbVGgcdjE4.roa
Signing time: Mon 14 Jul 2025 11:11:48 +0000
ROA not before: Mon 14 Jul 2025 11:11:48 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30444 (0x76ec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jul 14 11:11:48 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=C06C87843B10B8980E4BA469BED6D51A071D8C4E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:b2:d8:9e:b4:3a:93:1c:93:83:b5:e5:a3:7e:
56:8f:4a:ed:e9:e5:11:ae:de:4c:7d:8e:49:c8:ca:
02:d5:1a:65:1b:dd:34:cd:66:6f:79:fc:34:00:58:
34:6f:48:cf:c1:75:41:ed:65:e0:c2:9c:ee:27:5f:
9e:5a:30:d8:73:b8:6b:77:c4:f3:2c:17:1a:63:6a:
c9:af:6b:53:d4:f8:b1:be:68:17:3b:b7:ca:ea:fd:
b8:ce:97:c2:b7:c8:92:52:9b:31:57:19:02:bf:12:
c7:89:32:3c:fa:ed:58:7e:a4:9e:bc:e4:f7:77:b2:
f9:93:80:80:02:69:69:77:d6:a7:7f:58:52:b5:ef:
05:d6:8f:50:74:ed:8b:52:52:9a:5e:7a:81:80:63:
9f:84:ef:1f:8d:95:d4:0f:08:f4:72:90:b0:d4:e1:
76:47:f7:89:a3:7e:61:64:b9:21:be:db:ff:a8:17:
00:96:fd:10:ff:68:36:41:17:c2:37:4a:c8:9f:9d:
82:10:42:c8:d8:63:18:32:3c:1f:7a:d4:9d:fb:9f:
df:15:00:be:fa:a0:95:f8:7f:70:f7:86:75:50:26:
f9:7b:8c:e4:49:03:a6:79:9a:3d:36:c2:3a:9c:f3:
21:1b:cf:26:d6:a6:2a:3f:7c:dd:00:e0:f7:b0:7b:
09:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:6C:87:84:3B:10:B8:98:0E:4B:A4:69:BE:D6:D5:1A:07:1D:8C:4E
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/wGyHhDsQuJgOS6RpvtbVGgcdjE4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
aa:49:0d:ef:2c:c4:4e:5b:ad:fc:9c:bf:3d:7e:ba:fd:11:92:
3f:6c:6b:59:63:74:be:4b:a8:43:5d:66:b2:12:53:a7:c1:fc:
e1:56:0c:c2:bf:6f:b7:78:99:51:92:95:55:4b:09:35:d4:e6:
db:cd:5a:cf:d7:bd:16:81:64:b2:59:e8:d9:73:91:25:f5:30:
4a:fb:1e:ec:24:e5:a1:fa:0f:11:37:0a:56:c4:21:02:14:b6:
16:cf:41:38:14:ef:4f:c3:5b:02:99:ab:44:68:8e:de:3b:df:
af:be:70:b9:eb:16:8c:0e:24:93:c0:9c:b2:0f:be:27:a0:c0:
1a:74:71:42:f7:42:46:ee:89:e8:f1:7a:c2:0a:60:ae:0c:fe:
a2:40:6b:31:c7:1f:cf:fc:ae:8d:58:6b:3e:12:d8:5e:50:f6:
f7:43:fa:2c:80:56:7b:87:67:d6:e9:2e:59:b5:f3:71:d1:98:
8d:98:5d:c2:cf:4d:29:66:81:76:64:50:e6:28:e6:1c:29:58:
70:30:19:5d:3a:bc:9a:ce:a7:17:bf:58:da:ad:88:9d:2f:35:
fc:94:e3:86:0d:df:db:87:04:4f:c8:89:53:15:67:36:ab:79:
4c:d2:69:18:3a:90:2b:82:e7:f8:77:6b:06:3d:9d:f2:1f:0a:
7e:46:11:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:34:01 2025 by rpki-client