Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/x_24EuRDebZ6e-l0LyJE_GxN-mU.roa
File: x_24EuRDebZ6e-l0LyJE_GxN-mU.roa (raw, json)
Hash identifier: 4JLhwnLDlZ41eQFeXmSoOC+b44TezIetMHaUHcDzjaU=
Subject key identifier: C7:FD:B8:12:E4:43:79:B6:7A:7B:E9:74:2F:22:44:FC:6C:4D:FA:65
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 7816
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/x_24EuRDebZ6e-l0LyJE_GxN-mU.roa
Signing time: Thu 17 Jul 2025 13:42:02 +0000
ROA not before: Thu 17 Jul 2025 13:42:02 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30742 (0x7816)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jul 17 13:42:02 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=C7FDB812E44379B67A7BE9742F2244FC6C4DFA65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:67:75:24:a9:d2:d6:af:23:34:31:ce:84:e6:
82:dc:9c:2d:d2:43:7a:f1:c3:35:7e:df:96:84:c2:
6e:a2:90:d2:28:60:bc:05:3f:4e:70:dd:6e:44:09:
5a:0f:5a:4b:26:23:ff:c7:6f:a7:c6:fd:09:1b:9d:
d9:a2:e9:d7:f1:02:fe:f4:32:b8:02:9e:b2:78:21:
c0:82:f9:76:57:76:8d:02:dd:30:21:d7:b9:68:51:
87:c4:12:36:fd:a0:df:17:9e:83:fd:e8:d1:92:21:
81:0e:3d:13:4e:7f:42:c0:e4:22:d8:5d:1a:af:60:
da:6d:39:7a:b3:1f:cb:fc:a3:24:9c:6a:9b:d8:23:
59:82:d2:2d:c0:fe:60:96:ef:9a:b2:6d:e0:f5:e3:
e7:ec:40:72:02:a3:f2:a4:e7:52:d2:62:10:ae:3a:
1b:4b:ef:f1:7d:05:97:18:01:55:e3:19:40:1b:48:
64:e0:92:fe:89:bd:90:e3:fc:c1:97:0f:45:10:0b:
08:38:99:5e:cc:d2:c4:54:26:ea:1e:f5:f3:44:92:
c3:35:66:56:9a:95:10:c7:84:42:62:55:e3:1d:ee:
a3:3a:d7:9d:9a:f0:5c:d3:40:76:e1:d8:5f:8e:50:
fd:2b:29:f4:28:67:13:1c:8d:54:9d:7b:bc:16:16:
48:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:FD:B8:12:E4:43:79:B6:7A:7B:E9:74:2F:22:44:FC:6C:4D:FA:65
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/x_24EuRDebZ6e-l0LyJE_GxN-mU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
9a:a7:02:55:4e:76:4c:f5:8c:d4:f7:ef:71:9d:ac:a2:f5:6a:
a3:e6:59:9f:eb:4e:c6:80:8e:fd:d2:a5:69:2a:5a:31:3e:e3:
81:13:ab:f2:42:3d:51:6a:4d:2b:aa:c4:2d:74:c8:e8:13:0c:
04:ac:0d:50:32:c4:99:70:1c:af:9e:29:74:9d:88:d3:9b:58:
8a:13:7f:fa:ce:40:1c:ff:5c:83:99:96:e5:61:bf:47:99:f0:
90:a0:d0:59:16:5c:52:fb:30:34:ec:fc:de:10:ae:e1:56:70:
72:8b:2e:98:a5:5c:eb:b8:c2:45:ca:21:a6:ef:0e:93:3c:9a:
ca:54:21:c9:69:7d:04:ae:1c:30:50:1e:e9:2c:54:14:bf:b1:
ad:3b:24:56:f6:7b:34:ea:59:9c:0f:c9:b9:7a:da:03:8f:4e:
fa:12:01:dc:f5:33:59:5c:27:db:84:f8:55:c1:ce:e3:e8:73:
98:53:4e:db:1c:c8:d8:34:c9:24:fa:08:88:13:65:8c:63:56:
da:21:1b:d5:fa:c8:3f:08:24:f1:27:be:98:b1:6a:10:4b:bb:
30:ee:7d:65:84:c1:b3:0b:61:3b:cf:43:80:e6:bc:f9:e0:28:
f1:5e:c8:a9:04:f2:9d:12:3d:69:7f:eb:b4:f2:4b:e1:fd:f5:
d5:5b:09:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:45:36 2025 by rpki-client