Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/zFwH6Xtdm9fGWRNiaORZjZBcE8A.roa
File: zFwH6Xtdm9fGWRNiaORZjZBcE8A.roa (raw, json)
Hash identifier: 1EB+H1L6SxDILOPwQy2HkCq2gRyc7RquVCwJBvfVM4s=
Subject key identifier: CC:5C:07:E9:7B:5D:9B:D7:C6:59:13:62:68:E4:59:8D:90:5C:13:C0
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 7596
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/zFwH6Xtdm9fGWRNiaORZjZBcE8A.roa
Signing time: Thu 10 Jul 2025 21:18:18 +0000
ROA not before: Thu 10 Jul 2025 21:18:18 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30102 (0x7596)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jul 10 21:18:18 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=CC5C07E97B5D9BD7C659136268E4598D905C13C0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:62:c3:09:aa:fc:8f:a0:d3:39:e0:0b:8c:6d:
e1:51:6a:0f:ed:c2:4a:4b:19:2e:84:b1:98:61:48:
8e:37:58:ee:7c:37:71:05:09:bd:2f:c0:5e:e1:f0:
42:31:22:70:b0:16:8d:cd:ba:d1:d3:95:0d:51:96:
e6:ca:fc:1b:04:59:ee:28:bb:7f:03:7b:83:b1:ee:
fc:64:59:27:b5:cb:e3:c6:71:91:6a:03:e5:8e:0c:
72:5a:8d:fc:02:83:f5:c9:54:1e:cf:97:f7:48:e8:
3b:5a:f8:66:ca:a7:e3:08:29:48:0b:2a:84:32:72:
f8:ab:10:6d:8a:dc:76:81:7c:b8:a2:f7:4b:f4:5f:
7b:95:83:30:21:f3:1e:6c:e5:b0:db:c2:40:e8:ed:
8f:df:3c:44:c9:f6:f6:fa:04:f4:35:87:46:60:00:
7f:03:bf:aa:c3:c5:ce:35:10:37:49:0b:a7:0b:b6:
cb:59:c4:a1:56:d4:0d:ba:ad:b0:8a:b1:d6:55:e0:
f6:9c:3c:50:cf:fc:af:96:b4:b3:82:cd:8f:9c:a5:
50:61:18:5c:63:dd:d3:c4:46:69:7e:5f:3e:11:28:
33:ef:b2:c9:e6:0a:a3:e8:3e:06:74:25:8d:c9:b3:
06:20:90:da:d8:7e:c5:ad:85:6d:21:bb:62:c1:78:
d8:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:5C:07:E9:7B:5D:9B:D7:C6:59:13:62:68:E4:59:8D:90:5C:13:C0
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/zFwH6Xtdm9fGWRNiaORZjZBcE8A.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
9b:aa:6f:c8:3a:8f:15:67:17:01:87:38:55:c2:0f:78:85:e0:
12:71:46:41:8a:95:fb:a0:d9:e9:8b:66:18:2e:6d:fa:f7:68:
3b:25:f9:fd:15:50:93:a4:1e:fd:1b:3e:84:ef:23:b8:a4:37:
58:9c:be:d5:dc:0b:20:87:55:09:0d:00:c7:f0:7d:d2:e4:b7:
14:27:83:b4:a5:85:76:10:13:6f:ac:c7:44:74:51:a8:b7:af:
8f:a9:72:c8:2b:8f:6e:d4:ae:3e:b9:9f:1d:57:05:cb:fc:af:
15:e2:6e:c2:95:e8:66:32:7c:78:ee:29:5d:fc:2c:3b:2b:56:
19:67:6d:4a:10:95:8e:d7:c8:9b:f4:0d:89:90:4b:dc:17:a6:
b9:c8:4e:64:d6:9d:20:de:08:4c:4f:ff:21:b7:8d:10:e6:fa:
ff:da:4b:d8:19:56:12:8b:f0:0a:f0:a4:be:a4:2f:79:c3:83:
67:98:7a:49:d6:e6:b3:3a:9c:34:bd:4c:b7:f3:54:c8:84:3a:
15:b4:9f:e1:9c:65:3a:71:f1:2c:29:5b:0b:c4:d0:c9:0d:7f:
9b:9a:81:5e:53:68:f7:8b:3e:67:75:80:d2:93:fe:ac:36:68:
34:94:9a:77:88:29:7b:85:65:af:68:49:c4:f0:54:c6:25:62:
e8:1f:b3:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:46:37 2025 by rpki-client