Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/-ifrDxBcwYFEZ9HbbjAt6uLabls.roa
File: -ifrDxBcwYFEZ9HbbjAt6uLabls.roa (raw, json)
Hash identifier: VhDyx9NQBIYBVPmN/WG3sfUBD2rAjJiEyNoy82lJUKk=
Subject key identifier: FA:27:EB:0F:10:5C:C1:81:44:67:D1:DB:6E:30:2D:EA:E2:DA:6E:5B
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 61F2
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/-ifrDxBcwYFEZ9HbbjAt6uLabls.roa
Signing time: Mon 19 May 2025 06:40:43 +0000
ROA not before: Mon 19 May 2025 06:40:43 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25074 (0x61f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 19 06:40:43 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=FA27EB0F105CC1814467D1DB6E302DEAE2DA6E5B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:80:02:1f:75:ea:c8:b9:a6:10:5f:c2:ba:01:
b0:c8:e0:74:57:8c:2d:98:fb:b1:b8:02:51:f9:c5:
20:c8:17:5b:49:1a:19:34:06:70:04:15:fa:1a:70:
7b:e9:e6:02:6d:14:0b:28:ab:95:f3:60:ad:08:51:
8a:21:45:68:01:71:3e:ad:22:2d:41:14:df:04:d6:
82:19:c7:2e:62:2c:8b:b9:e9:90:70:2c:2f:64:70:
be:bf:e2:6c:3a:00:f1:12:c4:4c:31:68:b6:c3:d3:
15:1b:a3:30:e4:9c:e5:3f:23:57:a9:cd:53:14:d4:
b0:22:1b:9e:77:f3:22:7f:2a:9b:03:0f:88:4a:a8:
6a:6f:3d:e1:42:6e:15:93:5b:25:4c:35:ea:c3:8e:
23:fe:fb:cf:00:57:b9:ff:97:7b:30:62:4e:2b:bf:
9e:d8:86:d8:de:a1:48:f7:cb:cd:dc:e2:04:bd:ab:
cf:c5:31:d7:dc:9e:38:9e:5a:be:16:f3:8b:56:c0:
ff:c4:d6:2a:4d:09:47:87:d2:61:aa:91:32:14:25:
e1:9d:94:5b:fa:e2:c4:3b:50:96:d5:ab:5a:b3:47:
c0:13:77:3e:3d:b6:55:eb:54:da:ea:c5:34:8b:3f:
c5:91:4a:bc:a7:47:22:17:ce:9b:ab:5b:37:b4:21:
c1:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:27:EB:0F:10:5C:C1:81:44:67:D1:DB:6E:30:2D:EA:E2:DA:6E:5B
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/-ifrDxBcwYFEZ9HbbjAt6uLabls.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
4d:e9:a9:62:5f:f1:04:00:2e:51:57:8d:5d:a6:2d:c3:69:bb:
56:45:19:39:bf:74:45:ec:f8:8c:84:21:7a:a7:84:99:54:f1:
c8:3e:10:14:85:c7:70:26:1c:cc:a5:61:8d:18:6b:57:9f:06:
23:2e:eb:47:10:b0:6a:c3:5f:a5:04:a2:62:ba:c1:bd:ca:32:
9a:5c:53:b7:cc:68:3a:c4:95:21:1d:04:c9:22:d2:ad:f0:0f:
75:c9:fc:5e:db:51:48:ea:2f:ee:89:62:4f:ad:d8:1e:ea:ae:
d9:26:60:0d:4e:e6:dc:8f:1e:92:b0:21:98:fc:b8:01:34:60:
df:b1:ee:0a:22:2f:e7:b8:03:c0:d4:de:15:5d:df:91:3e:4c:
a4:8a:7c:09:ab:87:45:8a:fb:80:f1:31:4b:c8:34:cf:9d:e9:
8e:f0:ad:3c:75:ca:f7:48:e5:09:6c:fb:71:aa:cc:59:31:5f:
19:ec:5d:59:4e:b2:43:a6:e1:b8:42:1a:fd:1c:6a:e3:41:c4:
6c:0a:14:6e:69:fb:9d:11:06:0f:27:8e:48:73:db:22:f5:7e:
85:7f:40:b2:fb:3b:a5:b1:86:39:6b:87:44:a2:24:7a:be:67:
e7:73:f9:1d:ed:3b:77:8e:ef:73:b2:df:93:47:92:26:06:30:
67:ad:17:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 12:21:24 2025 by rpki-client