Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/GIqj1pcLrK1Vr9yVWIFr4IcIUuo.roa
File: GIqj1pcLrK1Vr9yVWIFr4IcIUuo.roa (raw, json)
Hash identifier: kPnOU3RsmQXBz4sy/4S4fqOzqJwNL5rU/ohy+S60QMU=
Subject key identifier: 18:8A:A3:D6:97:0B:AC:AD:55:AF:DC:95:58:81:6B:E0:87:08:52:EA
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 6800
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/GIqj1pcLrK1Vr9yVWIFr4IcIUuo.roa
Signing time: Wed 04 Jun 2025 10:11:58 +0000
ROA not before: Wed 04 Jun 2025 10:11:58 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26624 (0x6800)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jun 4 10:11:58 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=188AA3D6970BACAD55AFDC9558816BE0870852EA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:1f:19:97:6b:3a:2c:b6:37:f5:9a:31:a5:be:
3b:28:4d:9a:af:93:c8:d8:e1:fc:fe:5f:3f:f8:07:
2a:e3:31:89:eb:7b:09:a2:12:0f:12:e9:a5:13:21:
3a:d6:a6:ed:99:82:a7:71:e4:7a:4a:8b:c6:dc:f1:
da:b6:60:27:b1:5c:84:e1:d6:09:82:70:03:9c:7a:
bf:de:3c:01:ed:fe:61:6c:fd:48:50:5a:c4:82:8b:
0e:b0:0d:a3:57:a1:a4:51:7d:bb:17:44:f0:be:34:
ec:62:c0:69:a5:c5:10:84:f4:c8:9f:d6:41:02:7e:
82:5e:76:b6:ab:16:6b:f1:ca:fb:ad:bc:ff:c6:58:
08:18:94:e0:28:f3:7a:eb:68:21:77:4f:80:f6:47:
59:3b:58:03:48:12:ff:0f:13:c9:75:87:cb:b8:ce:
fb:37:7a:c3:17:14:ab:97:e6:42:a8:05:89:c4:d6:
e0:2e:df:0a:08:94:df:00:80:bf:5c:f0:69:47:40:
42:c9:26:8c:29:ac:cb:e9:16:ed:02:92:a4:89:3f:
8f:da:f7:2e:f8:ab:59:7e:91:76:c4:d2:c5:69:e2:
f3:42:d9:7b:fe:ac:8a:a6:4c:26:df:a4:21:68:1a:
57:42:d6:25:24:2f:8c:a5:13:ec:88:d5:33:21:9f:
f4:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:8A:A3:D6:97:0B:AC:AD:55:AF:DC:95:58:81:6B:E0:87:08:52:EA
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/GIqj1pcLrK1Vr9yVWIFr4IcIUuo.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
07:0a:95:92:d4:36:65:7d:20:d8:9f:93:04:97:63:6e:ef:0d:
4a:19:22:2f:03:39:5c:09:ce:17:92:dd:40:13:82:30:66:4b:
3e:ad:9f:d7:2b:1c:52:ef:11:ec:f2:6a:e3:9f:2f:ca:d3:68:
4a:98:10:39:ad:60:40:59:68:e8:55:1f:75:ca:32:fc:e8:37:
47:ed:88:a7:29:43:fd:a6:13:3f:da:5b:3d:78:a6:eb:17:78:
54:6f:27:db:2f:6f:cf:22:46:69:0e:d1:8b:d5:4d:4d:09:f2:
0c:65:ba:05:ff:96:86:c6:b0:5d:ec:e6:12:fd:15:f0:9d:dd:
8e:b3:6b:d3:c8:76:e9:22:b9:39:07:1d:e9:d8:5f:e2:c6:41:
2b:0b:b7:85:e1:d0:d6:70:0f:92:26:bb:54:84:ee:9d:ce:c7:
0f:50:32:a7:65:2a:e1:be:ac:aa:e5:3f:f3:b4:56:9e:50:5b:
3e:8f:c9:77:b8:65:38:e6:31:6c:bf:73:2e:8d:8c:fd:cd:06:
77:33:00:68:10:2a:f6:ca:09:2d:76:27:46:90:ee:3e:27:5e:
cd:c0:b2:2c:e4:1a:ea:d5:b7:f1:29:b6:57:c8:14:fb:64:83:
6b:85:f0:d5:b9:fa:a5:fb:30:a1:f4:8a:0a:de:c3:43:d9:5d:
4a:e6:27:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 09:17:44 2025 by rpki-client