Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/FUqC75UqIYixhmsE4ATNAIs300s.roa
File: FUqC75UqIYixhmsE4ATNAIs300s.roa (raw, json)
Hash identifier: /QiqYnQi/9Y8Y8XxzBmGptHo6Hr86P9XO/IxiDlcBtc=
Subject key identifier: 15:4A:82:EF:95:2A:21:88:B1:86:6B:04:E0:04:CD:00:8B:37:D3:4B
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 6922
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/FUqC75UqIYixhmsE4ATNAIs300s.roa
Signing time: Sat 07 Jun 2025 10:42:08 +0000
ROA not before: Sat 07 Jun 2025 10:42:08 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26914 (0x6922)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jun 7 10:42:08 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=154A82EF952A2188B1866B04E004CD008B37D34B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:e1:db:d3:bc:f6:3f:77:c8:f2:01:b2:fe:79:
5c:ba:07:65:62:45:46:2c:40:ef:ce:0c:12:c2:d9:
32:f5:30:2f:67:39:58:02:56:75:b8:77:31:88:0e:
97:7f:75:0e:ca:4d:b5:7e:a2:e3:e8:e7:af:bc:e7:
d6:e0:40:bc:da:28:e5:1f:1e:d9:16:8c:76:2b:53:
af:c1:66:16:cb:92:6a:2a:cb:26:d6:ba:72:34:eb:
52:26:3a:a2:66:66:fa:af:2c:3b:8c:07:28:df:5f:
17:a6:03:11:2f:e6:26:0e:55:ae:94:89:28:63:b0:
90:bf:a8:64:b1:80:94:2f:db:54:2f:ec:d2:e1:ae:
20:84:76:8d:fc:b0:5c:d6:83:74:31:9f:c5:05:b5:
0f:8d:04:2d:35:28:11:0e:1e:97:15:9e:bd:83:6b:
ce:15:2a:dd:9f:b2:a5:36:17:11:4f:ba:55:f1:2f:
4c:62:5a:2e:ce:c0:eb:35:b0:99:81:97:86:f2:3d:
c4:91:09:d1:c3:f7:f8:fa:c4:28:9e:e9:7a:62:66:
8a:8b:56:2c:50:36:e8:51:a5:98:1b:00:48:70:90:
2e:16:ee:88:b0:53:d7:2a:9a:8b:62:8f:f5:b0:98:
9e:cc:03:4d:63:10:96:78:bb:f5:e6:c6:2f:00:43:
af:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:4A:82:EF:95:2A:21:88:B1:86:6B:04:E0:04:CD:00:8B:37:D3:4B
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/FUqC75UqIYixhmsE4ATNAIs300s.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
3e:ea:ca:b7:3a:1d:b6:e8:a5:87:a6:86:b5:4a:1f:b1:59:27:
dd:e4:21:f2:60:1f:dd:8c:8a:77:3d:bc:54:60:a0:fa:8b:86:
95:44:f9:0b:cd:e9:70:03:03:cd:08:79:5e:34:04:78:cc:a7:
c7:48:65:0d:24:1a:9e:a7:76:ab:27:26:24:1f:8a:bd:5f:77:
05:7f:8e:ef:b6:a2:35:d3:78:9e:85:9e:1c:19:71:b4:c8:17:
c0:03:1f:2b:b7:91:f7:88:6e:40:88:46:d8:fc:c9:6f:e4:36:
ad:40:2e:04:6f:77:9f:09:61:d9:23:14:e8:af:c0:b2:96:52:
73:f0:6b:b6:82:bf:d0:33:cc:b7:bd:88:e3:4f:eb:e7:7b:63:
1a:d6:cf:ab:ee:ac:f2:a3:5a:a1:1d:ba:95:88:a2:ff:36:e3:
24:d5:ea:8f:4a:51:b2:a6:5e:c3:93:06:95:21:f7:fb:ae:04:
30:04:98:9f:16:1d:1f:80:ea:ec:cb:2d:95:92:f9:e9:c5:82:
4c:af:c2:ea:d7:46:15:f3:ca:11:5a:f8:ae:0f:dd:90:10:c4:
3c:b6:f5:19:6a:db:a1:7c:91:f1:db:73:49:7d:3c:4a:99:35:
17:d4:04:e8:9a:6e:b1:84:a5:e1:37:76:1f:59:64:56:9c:4b:
e3:d1:31:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 21:07:17 2025 by rpki-client