Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/1nYA8mHzDSjChO-AKHQUH3twdqc.roa
File: 1nYA8mHzDSjChO-AKHQUH3twdqc.roa (raw, json)
Hash identifier: /y6Ewg8yOjNluO8OTwcvLrCQUwxcNK3W7i9nz2QdTqM=
Subject key identifier: D6:76:00:F2:61:F3:0D:28:C2:84:EF:80:28:74:14:1F:7B:70:76:A7
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 688E
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/1nYA8mHzDSjChO-AKHQUH3twdqc.roa
Signing time: Thu 05 Jun 2025 21:45:24 +0000
ROA not before: Thu 05 Jun 2025 21:45:24 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26766 (0x688e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jun 5 21:45:24 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=D67600F261F30D28C284EF802874141F7B7076A7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:46:cc:a8:53:a4:d5:9d:42:05:84:a3:0e:d9:
73:f7:88:af:ea:b3:f3:20:57:27:27:5f:3c:24:ff:
a1:98:a3:8e:3f:87:de:1c:99:ef:72:20:dc:fa:39:
b3:30:5b:29:9a:9d:e1:fd:5a:42:69:61:11:72:44:
aa:0a:3b:2e:f3:7b:8d:2a:8c:f6:10:33:f8:ee:3b:
05:96:ed:cf:17:19:a4:08:63:27:c4:f2:ef:73:24:
5b:11:80:6f:3c:d1:5d:de:08:86:e6:68:02:00:0e:
92:a6:8a:bc:8e:4d:ea:8d:61:01:f6:d4:ee:0b:77:
41:e2:31:f2:aa:b4:62:0b:6a:fb:44:9a:27:8f:87:
6d:3a:52:2b:57:42:e0:ee:a8:c0:61:4b:ea:c6:04:
35:01:93:7e:31:06:56:5b:72:98:8c:c9:5d:60:cf:
89:ab:75:51:3b:d2:ba:96:72:8c:dd:27:ae:ff:41:
ff:d8:d7:e7:e5:cf:13:98:54:d0:91:af:e1:3a:ad:
b2:76:8c:7d:9a:e8:c6:db:e4:4e:e6:d6:cb:2d:5c:
d7:ed:61:ba:05:1a:84:f3:dd:ee:eb:f0:7c:7d:6e:
36:05:55:72:5b:95:e7:b5:5a:73:ba:98:fb:53:6d:
d8:75:e8:92:82:56:53:78:1b:fa:9b:b2:e0:f0:b1:
b6:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:76:00:F2:61:F3:0D:28:C2:84:EF:80:28:74:14:1F:7B:70:76:A7
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/1nYA8mHzDSjChO-AKHQUH3twdqc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
2c:23:37:b8:2b:25:59:ff:1a:98:18:80:32:33:6c:a4:9d:28:
e4:0d:89:9a:65:b4:20:73:a7:7e:b2:30:40:39:58:19:1d:25:
4f:1a:37:6f:7a:5c:0a:35:2f:ec:21:d9:b1:a7:36:2d:ab:1d:
5d:01:4d:5a:4d:49:ed:5b:10:6b:82:af:ee:53:84:66:50:bf:
7e:3b:1a:35:4c:34:4a:cc:c8:10:9e:40:d4:cd:82:81:dc:27:
13:4d:dc:e8:d9:1e:3e:e2:e4:a0:b0:90:90:c3:cb:77:0e:94:
d3:13:49:c4:07:fe:ae:73:23:8d:19:54:e5:d8:1c:ea:60:29:
79:68:c3:42:2b:2c:b4:7d:94:9b:53:32:10:20:3c:36:49:32:
fc:d9:a8:08:91:9b:45:f8:61:c7:23:f3:69:de:72:67:a7:c5:
39:a4:b0:e3:57:1f:42:32:43:58:86:99:33:cf:18:61:ac:26:
50:a8:f8:29:7c:8b:55:57:2a:c4:23:85:bf:e7:1c:b1:d6:99:
36:6a:8b:f0:4b:82:8e:0f:9d:cc:9f:03:9f:b3:e0:53:86:ff:
28:a0:cf:51:2e:49:5c:0a:fd:b5:72:81:77:75:62:46:04:f3:
9c:99:6a:d0:ac:7e:b7:71:de:1b:02:67:b1:cb:60:9c:bd:87:
d6:6b:30:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 16:56:40 2025 by rpki-client