Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/wjJRWI3nDaDTo2L1aLAj-rfgWwo.roa
File: wjJRWI3nDaDTo2L1aLAj-rfgWwo.roa (raw, json)
Hash identifier: /MQSxtYWu0CKSji8IBd953meaBdzNIJU6/p507fQ4fc=
Subject key identifier: C2:32:51:58:8D:E7:0D:A0:D3:A3:62:F5:68:B0:23:FA:B7:E0:5B:0A
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 703E
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/wjJRWI3nDaDTo2L1aLAj-rfgWwo.roa
Signing time: Thu 26 Jun 2025 15:14:35 +0000
ROA not before: Thu 26 Jun 2025 15:14:35 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28734 (0x703e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jun 26 15:14:35 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=C23251588DE70DA0D3A362F568B023FAB7E05B0A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:90:32:8d:c1:f6:08:15:75:47:64:76:25:15:
28:f1:96:d6:50:c3:6a:51:a5:de:a9:d8:80:a7:24:
a2:97:48:88:46:33:f2:00:ea:c9:f5:51:13:37:f0:
69:54:3a:16:44:ec:f9:d4:45:c5:02:1b:f7:5c:b8:
98:38:77:58:49:39:8c:3e:9d:96:63:b7:b1:33:f9:
60:9f:cc:07:78:a4:b9:63:7f:6c:6d:02:ab:ad:96:
cb:91:89:17:99:e5:20:6b:cd:00:1a:16:a9:8c:6c:
72:47:e0:c0:6b:dd:2a:df:b6:89:e1:01:42:ac:3b:
33:fe:3d:be:6e:f0:16:eb:be:c0:87:73:64:ee:6c:
50:96:c7:8d:11:09:0f:7e:b4:12:bb:f8:be:da:77:
bc:5c:ef:01:40:af:65:b9:ca:15:09:ac:ae:30:59:
b6:a3:37:59:9f:20:b1:2b:6f:37:9e:8b:e5:1f:32:
21:c1:91:42:3d:52:b6:b9:61:de:a6:8b:b4:4c:d9:
79:ed:11:81:dd:5a:ac:6a:48:ce:72:26:8f:96:6f:
bc:c7:af:b3:7e:b2:4c:9f:a5:9c:e1:63:6e:6f:d7:
26:f6:ff:08:e7:e9:df:06:18:6e:53:de:11:87:0b:
65:f3:b6:1a:fa:3f:e8:6e:09:6d:71:3c:5f:89:0d:
8d:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:32:51:58:8D:E7:0D:A0:D3:A3:62:F5:68:B0:23:FA:B7:E0:5B:0A
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/wjJRWI3nDaDTo2L1aLAj-rfgWwo.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
b7:5f:0e:07:80:12:f6:43:43:ff:96:71:3c:21:0c:8e:81:c3:
f4:c7:cd:ac:bf:e3:dc:35:19:5c:8c:c1:ce:ac:2b:41:4b:8a:
1e:97:35:bb:60:88:98:76:f0:e5:b8:dc:85:86:91:2e:20:31:
77:4d:52:d2:54:4c:b3:f8:59:45:88:b1:8c:a1:82:d9:1d:1c:
00:ff:86:da:68:aa:a3:4a:fe:a3:01:2c:fb:34:0a:5f:9a:09:
98:28:71:93:04:d8:b4:c1:4e:b1:1b:15:9f:4c:e7:4f:30:a3:
37:f5:89:54:d7:82:58:4c:ae:80:d5:bd:b5:60:1d:03:02:4b:
6a:f5:d2:7f:8d:5a:c6:12:53:70:85:ee:cd:85:c4:70:dc:60:
0c:9c:af:5f:76:0c:d4:34:c7:b6:3f:69:09:b6:2a:b3:7d:74:
af:7e:36:dc:2f:4d:6d:55:44:d2:4b:5c:19:93:1e:2c:9b:c5:
f1:20:ef:8c:28:b6:96:3c:58:22:71:d8:fd:ec:9d:fa:f2:d7:
60:46:54:49:97:b0:38:56:9b:39:fd:db:04:bf:fa:0b:c1:96:
90:8f:86:5f:7a:c0:22:6c:71:83:ad:b9:b0:fe:c6:df:18:91:
6d:15:e8:48:64:68:bf:e7:51:1c:db:f1:c1:72:6e:a2:c8:7c:
dd:af:18:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:32:03 2025 by rpki-client