Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/wN1tQqZLQaEQmUL8LNJghYmHD8Q.roa
File: wN1tQqZLQaEQmUL8LNJghYmHD8Q.roa (raw, json)
Hash identifier: /ZNBdTs1k2OdW7PVjAVt2pXL8KF1/2eeB67h3WsD3F8=
Subject key identifier: C0:DD:6D:42:A6:4B:41:A1:10:99:42:FC:2C:D2:60:85:89:87:0F:C4
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 6D12
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/wN1tQqZLQaEQmUL8LNJghYmHD8Q.roa
Signing time: Tue 17 Jun 2025 22:42:36 +0000
ROA not before: Tue 17 Jun 2025 22:42:36 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27922 (0x6d12)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jun 17 22:42:36 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=C0DD6D42A64B41A1109942FC2CD2608589870FC4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:a5:44:c3:84:e8:08:7c:75:13:4e:f4:1e:fa:
ef:45:a2:0c:f1:cd:c1:4c:45:dc:4e:a1:6c:e7:12:
76:b0:18:d3:d8:b0:e2:df:fb:d1:3d:0a:3a:8f:4f:
ec:9c:d9:17:78:23:63:b4:54:e9:ce:1d:3a:86:90:
d6:be:cc:84:9d:c3:a0:29:71:82:71:43:79:02:3e:
6a:e7:ae:0b:e5:30:25:79:b2:d3:d0:d2:1e:24:ca:
00:8b:b5:8f:d9:39:e6:35:52:e8:e3:dc:54:e0:15:
7b:ba:93:fc:be:a2:81:75:cd:c8:e8:2c:6c:cb:f9:
f9:43:07:98:6b:a6:a7:8b:79:72:2a:c2:74:03:61:
9b:ad:80:d8:c1:2b:ae:ec:bd:c4:75:74:25:5d:f5:
e1:f3:31:6c:06:ef:59:b9:4f:a4:79:40:e1:d4:23:
13:a8:0e:ac:59:14:a9:fc:d6:66:69:95:74:95:06:
d0:74:9f:92:b7:5e:18:3a:ca:7d:64:ad:6e:1e:9e:
93:8f:8c:03:42:62:02:a4:80:fd:5d:94:70:57:7a:
41:08:e2:b0:f3:be:f4:15:8d:ae:b1:f6:65:9f:25:
c1:b1:0c:43:59:61:10:a9:0b:87:46:25:da:a0:65:
81:c4:94:0a:aa:97:56:06:2d:75:d9:3b:61:6a:53:
19:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:DD:6D:42:A6:4B:41:A1:10:99:42:FC:2C:D2:60:85:89:87:0F:C4
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/wN1tQqZLQaEQmUL8LNJghYmHD8Q.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
7e:94:1b:4f:05:e3:a2:a6:a5:91:00:3c:84:f1:82:43:c0:87:
f9:47:e2:54:fa:5a:47:c3:5a:a4:91:40:e0:48:4a:ab:43:68:
81:7b:cd:1e:97:87:bd:94:c2:72:38:90:ee:98:c2:a6:d0:42:
8f:94:36:91:78:01:be:87:97:8d:26:5c:c3:6e:7c:f2:ab:b3:
1c:0d:85:28:61:74:62:f5:b4:63:99:17:a6:61:12:4d:c9:93:
84:11:61:b8:d9:08:21:40:62:fd:8c:a0:58:16:22:6a:5b:68:
a1:bd:10:1a:69:b9:0a:8a:09:35:ef:89:bb:ae:a0:70:ba:78:
b9:53:f7:16:0a:f5:88:01:f0:6b:f7:3b:5f:8e:21:bf:34:31:
c0:bc:2d:01:8d:37:c9:a3:01:b1:f6:f4:fd:1a:25:5f:06:17:
51:1f:b5:f9:e0:12:da:29:99:8f:9f:20:08:74:e2:ff:95:08:
f5:89:44:9f:31:2e:06:f6:2d:55:d4:1b:6b:8c:80:c3:49:f2:
ef:91:6f:5d:bb:c8:57:63:17:64:27:3c:aa:24:b4:64:c5:78:
17:27:00:5b:3d:ae:78:26:37:0a:a4:a7:fa:f3:0e:2b:86:2b:
95:0c:b1:f8:be:19:39:68:7d:f9:72:a4:90:91:df:c0:b8:cd:
66:01:e0:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:53:31 2025 by rpki-client