Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/9JOQENzEu69Lm6gjdSGkBSHy-yE.roa
File: 9JOQENzEu69Lm6gjdSGkBSHy-yE.roa (raw, json)
Hash identifier: uauooZrzFYBCh498zSesJD9yxvGbqUflDEZrXOU0e48=
Subject key identifier: F4:93:90:10:DC:C4:BB:AF:4B:9B:A8:23:75:21:A4:05:21:F2:FB:21
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 6A06
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/9JOQENzEu69Lm6gjdSGkBSHy-yE.roa
Signing time: Mon 09 Jun 2025 19:42:04 +0000
ROA not before: Mon 09 Jun 2025 19:42:04 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27142 (0x6a06)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jun 9 19:42:04 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=F4939010DCC4BBAF4B9BA8237521A40521F2FB21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:ff:e4:39:98:21:3b:de:45:9e:f4:b5:dc:24:
06:30:10:a8:c1:61:ae:8f:88:4a:d6:67:29:d5:0f:
9d:bc:e0:6d:02:8a:ba:af:3e:62:72:53:88:12:38:
08:3c:2b:a7:97:6a:4a:9d:95:7b:a2:2c:f4:29:ea:
c2:eb:16:71:a3:de:32:81:59:4c:f8:a6:3b:0f:ed:
26:6c:36:cf:a4:15:89:76:58:40:9a:a1:e6:13:3e:
93:28:4c:06:bb:0f:3e:f2:2a:f0:e3:af:d8:1a:74:
74:e6:26:b5:0c:40:81:51:75:0e:fb:c9:a8:55:57:
c8:5e:ff:50:d3:dd:e6:fd:cd:7f:7b:77:de:1b:c6:
04:f4:15:fa:9f:91:02:f1:67:27:86:22:d4:19:3b:
ba:47:f5:35:1c:00:40:6b:86:15:2c:6b:b0:4d:9a:
3f:6f:e6:2b:7b:ee:4b:ef:7d:e4:b3:12:be:b1:93:
d9:96:88:3d:2b:ed:ec:f2:72:ee:26:dd:00:93:d2:
bb:92:44:8b:76:c1:a6:fd:d6:bf:76:62:92:22:69:
bf:25:cd:39:d7:65:0a:e8:b0:b2:43:01:95:1b:f5:
7a:80:b2:14:1d:7e:cf:1f:e1:b1:ae:47:29:59:0d:
44:e1:e4:f5:dd:bf:40:1c:b0:e1:15:76:70:83:58:
7b:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:93:90:10:DC:C4:BB:AF:4B:9B:A8:23:75:21:A4:05:21:F2:FB:21
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/9JOQENzEu69Lm6gjdSGkBSHy-yE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
7d:46:d2:f5:a6:0a:e7:5f:8a:d7:15:0d:14:9f:41:91:e9:c4:
e3:24:db:1e:2d:df:64:4d:59:d2:b9:83:ea:02:a0:34:c6:65:
a3:01:f5:30:78:b9:6e:35:7a:70:6b:b1:93:e0:cd:4d:d9:78:
a2:37:38:94:02:c2:74:02:f1:58:9a:bd:97:b9:88:3f:fa:78:
ad:69:87:ea:d1:b8:0f:d8:ad:d2:2a:69:ec:db:5c:54:4f:2a:
ce:eb:98:65:77:2b:72:91:f6:da:3f:95:56:dc:b7:8b:b6:3c:
4c:b1:d0:26:c7:25:c6:98:74:d9:e2:50:dd:2d:7c:94:76:31:
33:8e:bb:0d:b6:d5:bc:3d:0a:a5:dc:8e:9f:87:0c:89:fd:f6:
15:97:e1:4c:a0:6a:46:1f:bf:90:e8:a0:07:fb:54:ed:0e:5d:
9f:ab:4a:dc:bb:bc:ee:51:6d:16:c8:58:d1:ed:36:2b:50:ba:
5f:d4:12:cc:6d:e9:b7:f6:b8:8c:87:c6:c0:a9:a7:54:64:d0:
ca:cf:fb:4e:9a:5c:42:d8:17:f3:90:f4:c6:dc:38:bb:e0:3f:
35:d3:36:fb:cf:cb:b7:25:37:7a:c2:60:7c:c3:b3:e5:fe:9e:
5f:1c:63:e3:5d:e2:ad:0c:6e:85:66:d9:5c:60:a9:56:ec:7d:
11:84:a3:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 00:57:04 2025 by rpki-client