Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/z3cRzZlhM5vmshVxR8AAyYL2Omg.roa
File: z3cRzZlhM5vmshVxR8AAyYL2Omg.roa (raw, json)
Hash identifier: ecDR0RvUZCf6AON5W48shn1hwHpK2ngqrNW+HjQcH+Y=
Subject key identifier: CF:77:11:CD:99:61:33:9B:E6:B2:15:71:47:C0:00:C9:82:F6:3A:68
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 780E
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/z3cRzZlhM5vmshVxR8AAyYL2Omg.roa
Signing time: Thu 17 Jul 2025 11:42:02 +0000
ROA not before: Thu 17 Jul 2025 11:42:02 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30734 (0x780e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jul 17 11:42:02 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=CF7711CD9961339BE6B2157147C000C982F63A68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:89:23:df:f7:83:06:64:e9:93:bf:42:e3:39:
e4:61:53:8c:fa:80:56:87:b4:7b:d4:92:24:eb:ee:
d8:2e:a2:f5:6e:85:41:d5:30:5b:c3:cf:f7:d3:eb:
fc:79:5b:c4:d2:34:f0:0f:63:eb:3c:f3:05:5b:ee:
16:3c:4e:6d:ca:52:d8:72:5b:e5:0c:42:ad:3b:af:
d5:e2:22:2e:f0:6a:45:f4:24:88:a7:a3:4b:a9:b1:
63:24:67:72:f7:7e:f8:be:07:dd:5b:ad:19:a3:e0:
c2:48:c3:83:54:fd:6b:17:99:2c:80:67:97:63:7a:
18:19:3c:40:c7:33:79:56:32:99:3a:ac:54:68:f8:
a9:24:bb:ed:fb:db:4d:dd:df:b5:c9:57:55:d6:27:
25:c7:0e:ec:47:c5:cc:e7:4a:4a:a0:db:d1:1b:f9:
db:b9:e3:52:ee:f3:c4:c3:1e:6b:61:35:1d:16:49:
2a:41:00:c6:84:bc:e0:94:8a:24:80:7b:ac:b1:1c:
e2:ab:8a:9c:e4:b1:71:57:2b:98:55:6f:88:91:83:
0a:1d:56:8d:07:21:e1:8b:cb:ae:b3:77:98:00:3b:
13:ef:33:7f:4f:ed:f5:35:16:f9:5d:d5:8b:f8:69:
6f:06:b9:20:f7:fe:b3:5d:06:5a:39:ef:4c:47:77:
40:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:77:11:CD:99:61:33:9B:E6:B2:15:71:47:C0:00:C9:82:F6:3A:68
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/z3cRzZlhM5vmshVxR8AAyYL2Omg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
b9:aa:24:30:14:af:7d:f1:8c:3a:d4:54:c4:52:b4:2b:12:72:
4e:e0:91:ab:cc:9f:99:c4:91:32:06:73:eb:4e:a7:6e:22:78:
74:9e:01:06:d3:5d:e0:55:8e:a4:59:44:1e:d0:b7:2a:e4:e5:
4a:0b:8e:19:0a:98:27:8e:b6:bf:3a:fd:67:ef:01:cd:d0:64:
0c:b2:41:12:64:95:54:7d:e6:2c:97:67:1f:fe:4e:5e:e7:9f:
46:14:b6:da:74:43:d5:ca:ab:51:ef:5e:00:98:c7:6d:ff:b9:
34:72:09:32:00:d5:49:66:92:91:8c:1e:6c:93:d1:41:95:5e:
00:7a:a9:ed:1c:69:1f:61:31:82:64:31:63:a5:d3:14:71:0c:
8c:21:66:8e:aa:18:2a:33:14:5b:08:5c:ee:5b:f9:4e:3a:41:
f7:27:77:53:5b:ba:93:05:62:bf:0f:25:38:ba:45:0a:51:73:
63:48:5b:73:72:66:2d:5a:99:4c:ee:a9:ab:df:12:1d:1f:15:
d4:42:92:fb:af:b6:cc:44:f9:a8:d7:7d:16:67:13:2d:06:1e:
e1:1b:6a:97:95:ea:2a:4c:e5:d8:c3:2e:31:1c:43:d9:90:d1:
4e:d9:76:55:d9:6f:d6:c6:64:8e:d0:b8:ef:6a:cc:0e:21:ba:
c6:34:07:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:49:38 2025 by rpki-client