Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/FdF8dVwYtG7Mki3Ui7ktcx6WLOs.roa
File: FdF8dVwYtG7Mki3Ui7ktcx6WLOs.roa (raw, json)
Hash identifier: MCSdk8ESRfpPZOKRvjI0X5rN80b7jTYfEs1tmlkKelQ=
Subject key identifier: 15:D1:7C:75:5C:18:B4:6E:CC:92:2D:D4:8B:B9:2D:73:1E:96:2C:EB
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 6498
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/FdF8dVwYtG7Mki3Ui7ktcx6WLOs.roa
Signing time: Mon 26 May 2025 08:11:03 +0000
ROA not before: Mon 26 May 2025 08:11:03 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25752 (0x6498)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 26 08:11:03 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=15D17C755C18B46ECC922DD48BB92D731E962CEB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b5:dd:7c:d7:95:cf:0b:0e:e3:a8:88:5a:cc:
cb:37:5b:42:cb:a1:06:eb:fc:77:93:54:c4:9a:e3:
19:e8:39:1e:8e:a1:36:06:1c:77:47:1a:1d:37:19:
d4:fa:c7:06:83:4e:bc:54:27:8f:e4:ca:bc:17:66:
62:8b:a2:f0:67:85:ec:73:5c:bf:cf:cc:9e:06:be:
f6:7b:88:1d:f5:93:12:cd:a6:13:8f:9d:4e:39:83:
82:1a:94:d6:20:58:9d:24:cb:f6:c0:c5:85:d5:fc:
de:04:31:4b:1e:c0:10:86:8c:11:a6:97:1f:d6:9b:
b7:db:d8:57:48:28:00:4f:00:4d:b7:04:f2:51:15:
80:8e:8e:e7:08:71:c0:82:b0:f7:cf:e1:6d:e7:bb:
ec:53:91:f0:f3:ba:eb:39:38:7e:79:cf:dd:b9:fa:
ab:78:a8:bf:8a:b0:87:ef:78:b5:bb:50:f9:76:cc:
a8:5a:26:81:38:1d:87:59:78:4e:a7:27:71:5a:47:
e4:5e:23:ff:e9:d2:c8:a7:b4:c6:f0:b5:74:b6:f1:
f7:1e:ef:92:84:fb:6e:ea:44:28:bd:7b:61:d1:fd:
dc:a7:60:ed:99:b5:77:52:2e:76:6e:8d:b3:60:af:
85:bb:e9:d4:2d:9d:1d:9d:a5:e6:ea:92:43:69:11:
46:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:D1:7C:75:5C:18:B4:6E:CC:92:2D:D4:8B:B9:2D:73:1E:96:2C:EB
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/FdF8dVwYtG7Mki3Ui7ktcx6WLOs.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
88:db:ba:61:2a:31:38:3e:69:01:9e:c7:7a:7f:d6:6d:07:86:
f0:7f:92:fc:1c:26:a5:3f:e8:18:0c:ed:c1:e2:a8:d5:a6:6f:
c3:11:51:8e:c1:79:d8:05:71:f5:d5:65:57:da:cf:b8:c7:ad:
88:91:c3:ca:ff:07:0f:aa:ee:45:62:62:5f:2a:a1:3d:5c:25:
71:09:67:fe:7e:5d:77:df:ad:7b:52:c2:0e:85:f8:de:9a:ef:
f0:58:89:a7:8d:14:43:d9:52:75:25:04:8c:f0:db:0e:0f:27:
e2:b0:2d:28:a4:13:6c:37:b4:3a:59:18:70:06:19:9b:57:f9:
88:40:48:a4:f7:08:25:7f:d1:7c:c4:18:8e:8e:2f:21:54:61:
12:48:4e:3b:1d:b2:04:a9:f9:4c:e3:26:3f:03:dc:25:51:6e:
59:1d:31:b1:db:ce:56:78:77:8a:9e:60:0a:02:3e:1f:4c:65:
b2:1f:35:be:80:06:68:f1:36:2b:b9:7d:39:fb:3d:d2:46:2f:
48:cd:68:f8:e4:44:38:4a:23:d5:26:aa:b6:77:2c:70:57:c7:
90:09:9f:72:a8:c0:cd:37:3b:1c:9b:fe:56:73:7c:66:57:1b:
4c:6b:70:0f:53:17:c1:db:26:43:77:4d:29:63:51:a7:42:60:
62:0b:53:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 08:10:03 2025 by rpki-client