Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/A1z3C37eHcz2hBkl4gSlHsXk43A.roa
File: A1z3C37eHcz2hBkl4gSlHsXk43A.roa (raw, json)
Hash identifier: 9oLoE+5XUDXiqDD+1ffzH3wlvH+TSBAMFx1uZ741UHM=
Subject key identifier: 03:5C:F7:0B:7E:DE:1D:CC:F6:84:19:25:E2:04:A5:1E:C5:E4:E3:70
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 6B5A
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/A1z3C37eHcz2hBkl4gSlHsXk43A.roa
Signing time: Fri 13 Jun 2025 08:42:18 +0000
ROA not before: Fri 13 Jun 2025 08:42:18 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27482 (0x6b5a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jun 13 08:42:18 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=035CF70B7EDE1DCCF6841925E204A51EC5E4E370
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:2e:3b:98:4f:ab:ae:8d:72:8c:61:5a:64:9f:
9b:7f:c8:d1:70:c3:09:f4:22:8b:2b:e9:95:2c:21:
3c:ce:00:c6:ee:b9:7d:36:16:95:11:b0:0f:9c:8d:
87:f2:66:24:54:0d:d7:6d:83:b6:76:4f:50:ad:e6:
df:7a:c1:51:b8:52:5e:fd:5e:4a:85:02:97:7a:5f:
74:59:e3:13:51:ff:7e:26:56:18:c8:4a:88:ff:05:
50:d9:09:2d:40:b5:4b:81:8c:25:64:cd:4f:55:1d:
a5:d1:98:81:61:92:be:61:ea:23:4e:64:37:1a:ce:
20:ed:b5:32:94:af:e0:49:6a:46:03:a0:f7:c6:b4:
55:31:8d:e2:40:42:c4:aa:7d:b4:d4:ef:bf:85:48:
02:3e:ec:a9:97:7d:dd:a8:92:df:f5:58:9a:76:44:
c5:b0:c3:c2:f0:7c:07:27:b4:d8:44:28:25:8f:07:
81:e0:55:51:95:a9:d8:fe:df:e5:46:71:b6:c6:2f:
59:ad:43:49:fa:2f:c9:f7:0b:25:cf:28:4d:78:48:
e1:f0:d2:38:d8:40:0f:b1:68:9a:1e:78:2c:40:f9:
f3:06:7c:80:aa:65:da:dd:e1:da:2c:76:67:da:b1:
b1:50:c8:97:70:d8:b0:74:34:40:d9:97:dc:94:69:
57:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:5C:F7:0B:7E:DE:1D:CC:F6:84:19:25:E2:04:A5:1E:C5:E4:E3:70
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/A1z3C37eHcz2hBkl4gSlHsXk43A.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
aa:9d:01:5c:dd:08:5c:bf:90:96:f6:f4:ef:d0:71:48:46:a8:
e1:90:5c:a5:22:d9:1e:e6:a4:8e:05:41:29:c5:98:7e:71:d9:
26:00:58:c7:a5:03:e8:b4:e1:a4:5b:ca:32:eb:a4:97:75:72:
cc:0e:f1:a0:e6:3c:f4:83:32:c8:c0:49:a0:9e:e7:89:3a:53:
79:e7:2b:58:78:6d:97:80:af:61:62:85:76:ad:6b:7e:80:88:
b8:d6:6b:e3:3c:91:0c:d8:8f:02:f8:e5:f6:7e:53:d8:6f:9c:
80:67:47:24:e1:63:62:d1:a2:12:a7:1e:ec:68:f9:96:af:7f:
ef:18:65:a5:50:21:33:60:1c:93:fa:8d:cf:68:f7:fb:55:c8:
6d:03:f8:68:97:a5:69:9f:e8:13:c3:ab:34:21:6e:1b:7f:ef:
c1:b6:da:7d:54:0e:00:5d:4f:57:4d:e6:d6:90:ac:c5:f2:5b:
89:ec:f2:d6:ca:26:61:03:0e:5a:66:4f:01:77:73:59:35:3b:
08:84:4b:68:cc:69:a4:91:21:6f:2b:6c:c8:25:ba:49:f5:9c:
68:11:95:27:4e:be:20:ba:5a:ce:02:f1:a7:9b:26:cf:36:99:
89:ec:93:3d:40:80:e5:63:f2:34:eb:99:3f:ca:fd:8c:75:21:
ee:91:36:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 16:33:44 2025 by rpki-client