Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/zifbCykF3GufbcILfOxcxksY78k.roa
File: zifbCykF3GufbcILfOxcxksY78k.roa (raw, json)
Hash identifier: fHNgc64bato78G7UkUhLGieL2SVLEDz4PER6l+yJtPc=
Subject key identifier: CE:27:DB:0B:29:05:DC:6B:9F:6D:C2:0B:7C:EC:5C:C6:4B:18:EF:C9
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 7694
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/zifbCykF3GufbcILfOxcxksY78k.roa
Signing time: Sun 13 Jul 2025 13:11:46 +0000
ROA not before: Sun 13 Jul 2025 13:11:46 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30356 (0x7694)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jul 13 13:11:46 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=CE27DB0B2905DC6B9F6DC20B7CEC5CC64B18EFC9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:79:d8:5a:0a:e8:1c:3b:09:6e:d3:0e:96:ad:
ea:f0:54:5d:72:9b:3d:dd:45:17:ad:aa:a9:f2:d2:
08:79:f8:9a:eb:7e:48:b3:b7:c6:c0:a0:22:3d:3a:
4f:69:32:ac:39:2c:f3:76:23:d6:0a:c2:0b:56:65:
12:ef:02:9a:94:bc:b1:6c:e4:0f:e2:43:47:fb:24:
f6:eb:d5:77:24:1f:c7:aa:e1:a2:da:2f:06:c1:b6:
fd:fc:1e:33:48:a5:f0:7b:c7:95:e9:d3:c3:99:f3:
e2:a6:ea:45:ad:7d:de:45:02:c3:ad:b6:7e:9a:df:
85:ce:15:d6:6e:b2:c5:6a:7f:56:1b:3f:1f:75:0e:
7b:82:05:f8:75:df:2e:6b:28:86:0d:85:79:61:41:
5c:81:7a:c0:12:e6:2a:ed:ad:9d:b9:90:ca:27:cf:
da:56:bb:18:bc:c4:87:46:49:78:b2:2e:72:80:04:
0f:e7:be:2b:13:16:09:11:8b:fc:da:ca:8c:fa:ef:
ab:c4:6a:79:b2:b1:d4:ea:27:25:6e:82:4d:cc:63:
be:45:3a:9f:96:f9:da:4a:6d:0e:3a:cf:9a:bf:b9:
54:d1:2f:20:9d:d3:81:6a:8d:52:03:7a:85:1e:bf:
33:d5:30:ea:95:69:52:7e:ad:85:f6:e2:80:c7:fd:
98:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:27:DB:0B:29:05:DC:6B:9F:6D:C2:0B:7C:EC:5C:C6:4B:18:EF:C9
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/zifbCykF3GufbcILfOxcxksY78k.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
4f:72:11:74:c1:c6:9c:d4:3e:5a:f7:6b:ef:84:af:37:a5:f7:
66:a1:93:88:b8:ef:d8:b0:cc:7d:2e:6e:93:08:e7:6b:9a:7a:
7a:8c:f2:1c:86:21:54:33:c1:0b:dc:56:f0:70:9e:23:8e:ab:
a8:89:f8:50:a9:79:85:43:a4:ef:40:cf:00:69:d4:47:d7:4f:
67:6b:71:ef:ae:8e:41:34:2d:6d:42:46:81:56:58:c9:00:43:
bc:29:6a:58:c4:6a:05:a2:7e:08:c0:e2:d3:16:fc:48:50:30:
9e:fd:0b:25:00:bb:dd:13:12:c7:f7:09:5b:d7:a4:06:f0:46:
ae:39:2d:e9:69:53:6b:d4:24:b4:ea:f8:42:7c:4c:6e:8c:06:
db:76:c1:41:6c:dd:66:87:69:6f:d1:45:b7:ce:67:6b:71:2b:
d5:30:85:79:26:5f:13:1b:57:f4:5b:ab:59:3c:8e:a9:15:61:
9f:16:40:a2:ae:66:2d:e2:db:52:46:38:db:b1:f5:23:2b:c9:
cd:4a:04:52:44:c2:fe:5e:96:06:bf:e3:d4:ff:a8:19:4e:15:
bd:cf:2e:f0:8e:a9:82:b7:74:e5:cb:6f:64:0f:0c:3c:6a:eb:
9c:cf:e5:33:09:a8:9a:b3:96:9a:06:4b:34:66:d4:a8:a0:37:
36:86:3e:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:43:00 2025 by rpki-client