Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/8os-NpuILNvqDyTeSnH61mh98yo.roa
File: 8os-NpuILNvqDyTeSnH61mh98yo.roa (raw, json)
Hash identifier: ksD80xa+w+yJQFVslStfkSvol3ISOtWlEBQhvowzQ/U=
Subject key identifier: F2:8B:3E:36:9B:88:2C:DB:EA:0F:24:DE:4A:71:FA:D6:68:7D:F3:2A
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 6798
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/8os-NpuILNvqDyTeSnH61mh98yo.roa
Signing time: Tue 03 Jun 2025 08:11:38 +0000
ROA not before: Tue 03 Jun 2025 08:11:38 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26520 (0x6798)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jun 3 08:11:38 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=F28B3E369B882CDBEA0F24DE4A71FAD6687DF32A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:c1:98:28:c0:9f:20:90:c8:3e:64:ef:5f:45:
77:90:53:40:47:58:7b:1b:89:b1:f0:c9:2c:70:40:
3b:59:12:09:f9:5b:b2:e1:3a:62:c2:2a:76:5b:a4:
65:a4:e3:ed:f0:15:9b:02:35:37:eb:f9:74:ee:38:
31:8d:99:e0:36:7e:7d:94:2f:86:57:08:10:c4:73:
2d:f1:18:3b:29:9f:97:1b:24:ce:92:91:7e:53:5f:
c3:41:50:01:6d:79:ae:94:52:aa:06:d1:e2:30:27:
84:76:f7:dd:da:48:8b:f5:f6:1b:79:82:7c:4b:86:
40:84:0d:c1:31:23:50:28:21:63:d9:95:bc:1e:78:
6a:dd:6e:b4:f9:f5:44:d6:fa:bf:59:cd:6b:5a:5f:
ac:9a:af:c1:b4:4a:c6:1d:f3:56:74:87:10:a7:dd:
9b:00:1f:48:f2:80:f4:fc:08:7e:ba:d3:dd:15:92:
a0:59:75:86:e1:22:4a:49:44:ca:87:2d:34:ca:8c:
98:c2:6a:42:c6:8f:9d:af:8a:f9:df:63:c5:bb:9e:
bd:ca:ca:64:8b:36:04:69:2f:38:21:39:ec:0b:15:
a4:2e:78:73:0f:8e:29:a2:38:2b:ca:c9:c9:94:7a:
f1:29:88:f3:81:76:d3:0a:bb:f4:13:7e:f7:a3:10:
ce:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:8B:3E:36:9B:88:2C:DB:EA:0F:24:DE:4A:71:FA:D6:68:7D:F3:2A
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/8os-NpuILNvqDyTeSnH61mh98yo.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
61:a1:23:38:4d:c0:4e:0f:26:a0:10:10:4c:c9:0e:58:98:fe:
4a:5c:94:8b:46:88:0f:e8:c5:e5:05:c7:44:72:b5:c8:9a:75:
31:4f:4d:c0:6e:95:ab:71:2d:10:61:f4:b7:84:f1:0e:11:0c:
05:fb:9a:43:c2:00:df:88:d8:0b:08:99:c6:58:bb:6f:00:eb:
43:9e:4e:96:d4:3e:e3:79:5c:23:88:ed:26:34:76:35:e9:00:
89:82:ae:d3:e7:70:42:97:ee:99:98:c4:ac:48:86:a3:ef:8c:
da:ac:7c:51:c0:6f:d7:b5:c7:c9:ba:2c:6d:9e:c9:c1:62:ba:
c4:57:45:3b:74:8b:17:2b:35:1a:57:8f:bd:4e:70:49:fa:2e:
f9:a5:b0:14:a1:63:8a:9b:c1:85:b4:27:7b:a5:2d:2d:e8:8a:
da:eb:37:8e:8f:f0:88:63:4b:2c:d6:2e:58:1c:2d:eb:89:2c:
fe:dc:91:34:e7:08:1a:13:ab:c3:75:47:53:ab:dd:f2:90:d5:
db:42:15:e0:18:11:63:f8:4f:67:77:f6:70:26:15:2b:c3:a0:
ec:15:d3:a2:ed:21:d8:6a:30:da:bc:f8:24:23:f9:37:ce:eb:
35:5c:34:1e:7e:a5:0f:34:98:6d:f7:4f:5a:e0:13:e8:84:95:
ad:2a:18:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 18:11:50 2025 by rpki-client