Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/7wxVvT2zaAhQCUCXrfglse49c0Y.roa
File: 7wxVvT2zaAhQCUCXrfglse49c0Y.roa (raw, json)
Hash identifier: QKkG5ZLcXikTzN7nLYgBdvQpdxfCgGM35r+Qwc6MwWE=
Subject key identifier: EF:0C:55:BD:3D:B3:68:08:50:09:40:97:AD:F8:25:B1:EE:3D:73:46
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 6A5E
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/7wxVvT2zaAhQCUCXrfglse49c0Y.roa
Signing time: Tue 10 Jun 2025 17:42:13 +0000
ROA not before: Tue 10 Jun 2025 17:42:13 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27230 (0x6a5e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jun 10 17:42:13 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=EF0C55BD3DB3680850094097ADF825B1EE3D7346
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:de:a2:c9:da:cf:13:05:f0:15:7b:f6:65:b9:
fa:11:d8:58:2f:bd:87:be:a9:20:33:d5:45:53:12:
23:3a:bb:95:38:ee:bd:26:97:cc:7c:1e:18:9d:72:
cb:a6:08:f1:6a:32:90:5a:a5:d4:2b:70:4e:7a:38:
1f:de:15:72:95:e9:be:bc:bc:2e:f9:78:3b:ae:c9:
f4:7c:52:33:00:73:2d:b9:07:97:c8:fb:f2:45:e2:
6f:36:7e:26:16:98:23:10:4d:d6:12:70:50:35:3c:
3f:33:0a:02:84:49:73:12:67:54:0e:dd:47:d8:b1:
f9:fa:57:51:90:af:a5:47:e8:95:9b:95:fc:37:76:
6e:c8:78:ad:2b:6c:8d:e9:a2:8c:49:8c:37:62:a1:
f5:26:04:5e:e2:84:31:ea:cb:49:5e:15:e6:37:44:
ed:a6:e7:3f:68:3d:58:71:de:d4:04:d4:08:4d:2f:
55:70:01:3c:40:47:66:49:75:f9:0c:50:1a:31:6e:
9e:81:ef:c3:a7:91:ca:dd:2b:eb:63:03:5a:fd:83:
c6:a4:63:9d:cb:1e:53:d3:4a:78:1f:35:a2:1c:a1:
ac:0c:42:b4:c5:e2:1b:ab:3c:3d:af:67:da:48:11:
7e:af:74:89:32:94:68:59:b0:39:2f:c8:b9:ad:a1:
42:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:0C:55:BD:3D:B3:68:08:50:09:40:97:AD:F8:25:B1:EE:3D:73:46
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/7wxVvT2zaAhQCUCXrfglse49c0Y.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
8d:b1:60:e8:e2:f4:b4:e7:29:c5:01:6b:3a:4c:95:03:f1:ef:
e9:ad:ff:32:2e:cd:1b:3e:7b:72:71:e7:59:5e:68:f6:f6:dc:
b1:81:a4:f1:58:a2:93:a1:68:75:81:74:85:3d:f8:09:5a:a9:
22:54:d2:0d:2e:7e:b3:ce:26:3f:29:53:6a:39:4b:76:b4:90:
b1:18:f6:67:cc:57:5e:64:76:f7:c3:5f:b2:2d:22:2a:0c:5e:
2e:b5:1c:2f:2f:be:9e:f8:43:3e:b3:03:3c:3a:e0:d7:ba:6e:
33:cb:dd:83:67:d9:e2:88:b4:cb:3a:32:c3:6a:0b:f7:20:a6:
4c:d1:1c:ec:8c:9e:b4:94:ee:e1:21:46:e6:ff:fd:02:b2:f7:
50:d8:c9:68:6d:fc:46:b3:f9:3e:1d:39:2c:96:a7:6b:44:a3:
74:37:5c:9d:c5:55:77:8a:52:9c:55:6a:68:65:cf:d3:a0:fd:
c8:8c:70:84:82:fb:b8:22:fc:f9:65:ea:57:95:73:c5:4e:e8:
ba:ee:ea:a8:dc:1d:81:27:9d:b7:3a:8e:e2:3e:73:9a:21:96:
72:8a:9a:97:04:b0:68:0a:73:dd:19:8d:09:da:e2:23:93:dd:
71:37:02:01:68:d3:73:e5:b3:f6:49:b8:21:db:b6:5c:76:f0:
c3:3c:62:87
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgICal4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNTA2MTAx
NzQyMTNaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKEVGMEM1NUJEM0RCMzY4
MDg1MDA5NDA5N0FERjgyNUIxRUUzRDczNDYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDD3qLJ2s8TBfAVe/ZlufoR2FgvvYe+qSAz1UVTEiM6u5U47r0m
l8x8HhidcsumCPFqMpBapdQrcE56OB/eFXKV6b68vC75eDuuyfR8UjMAcy25B5fI
+/JF4m82fiYWmCMQTdYScFA1PD8zCgKESXMSZ1QO3UfYsfn6V1GQr6VH6JWblfw3
dm7IeK0rbI3pooxJjDdiofUmBF7ihDHqy0leFeY3RO2m5z9oPVhx3tQE1AhNL1Vw
ATxAR2ZJdfkMUBoxbp6B78OnkcrdK+tjA1r9g8akY53LHlPTSngfNaIcoawMQrTF
4hurPD2vZ9pIEX6vdIkylGhZsDkvyLmtoULZAgMBAAGjggI0MIICMDAdBgNVHQ4E
FgQU7wxVvT2zaAhQCUCXrfglse49c0YwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3Lzd3eFZ2VDJ6YUFoUUNV
Q1hyZmdsc2U0OWMwWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwYgYIKwYBBQUHAQcBAf8EUzBRME8EAgABMEkD
BAIr7zADBAMr9gAwDAMEAiv2DAMEBCv2IDAMAwQCK/Y0AwQCK/ZgAwQCZyMwMAsD
AwJn7AMEA2fsEDAMAwQCZ+wcAwQCZ+xgMA0GCSqGSIb3DQEBCwUAA4IBAQCNsWDo
4vS05ynFAWs6TJUD8e/prf8yLs0bPntycedZXmj29tyxgaTxWKKToWh1gXSFPfgJ
WqkiVNINLn6zziY/KVNqOUt2tJCxGPZnzFdeZHb3w1+yLSIqDF4utRwvL76e+EM+
swM8OuDXum4zy92DZ9niiLTLOjLDagv3IKZM0RzsjJ60lO7hIUbm//0CsvdQ2Mlo
bfxGs/k+HTkslqdrRKN0N1ydxVV3ilKcVWpoZc/ToP3IjHCEgvu4Ivz5ZepXlXPF
Tui67uqo3B2BJ523Oo7iPnOaIZZyipqXBLBoCnPdGY0J2uIjk91xNwIBaNNz5bP2
Sbgh27ZcdvDDPGKH
-----END CERTIFICATE-----
Generated at Sun Jun 22 16:47:04 2025 by rpki-client