Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/KWADjjiGGQ-ZkYsStgp2DUVyCWg.roa
File: KWADjjiGGQ-ZkYsStgp2DUVyCWg.roa (raw, json)
Hash identifier: MGhxAjdDZ+eJQcFIGhMBMR3Qys5fSRH9nDDRcD69NGs=
Subject key identifier: 29:60:03:8E:38:86:19:0F:99:91:8B:12:B6:0A:76:0D:45:72:09:68
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 6B16
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/KWADjjiGGQ-ZkYsStgp2DUVyCWg.roa
Signing time: Thu 12 Jun 2025 15:42:20 +0000
ROA not before: Thu 12 Jun 2025 15:42:20 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27414 (0x6b16)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jun 12 15:42:20 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=2960038E3886190F99918B12B60A760D45720968
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ac:7d:ef:d4:56:ba:44:c1:ec:d7:e8:c0:27:
bd:d8:78:96:c1:8a:5b:15:5d:6b:4d:44:de:eb:26:
62:a5:1e:b5:49:44:19:bb:ae:99:8f:8c:eb:38:8e:
f7:85:1f:dc:9c:27:5f:f9:17:e9:5b:96:68:01:47:
63:6c:cb:c2:a5:4a:75:b5:c1:0a:b0:05:8f:ba:fb:
ec:e3:75:49:a8:d3:3a:73:df:fb:49:0d:02:23:2a:
ad:3b:57:86:95:5f:a6:51:4b:bc:68:19:8c:46:01:
4d:99:07:58:9b:cc:11:5f:b4:1b:37:7e:da:a3:77:
41:0a:e2:a1:26:24:57:19:a6:ed:33:ec:48:45:d8:
b5:57:f4:34:aa:69:17:17:27:1a:d9:48:74:ec:a0:
3e:02:55:a9:98:25:b8:6f:39:c1:00:49:a5:1f:c6:
9d:43:80:dd:70:df:d4:dd:69:56:ba:3d:4d:a1:7f:
68:36:9c:84:8c:ca:98:86:e3:89:af:58:28:65:3d:
2d:ed:be:0d:6d:ab:4c:58:6a:01:f3:cc:8d:72:fb:
91:4d:4c:e4:af:f1:0c:8c:51:d5:0d:e1:6b:7a:2e:
d3:df:70:8a:ec:4f:f8:a6:46:75:bb:10:8f:e3:55:
31:1a:6c:ab:9a:50:c1:b0:48:ba:90:17:af:33:a5:
5c:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:60:03:8E:38:86:19:0F:99:91:8B:12:B6:0A:76:0D:45:72:09:68
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/KWADjjiGGQ-ZkYsStgp2DUVyCWg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
1e:5a:cb:c0:da:26:75:64:6a:11:02:5f:4b:77:57:38:a0:47:
c5:f3:6c:96:6c:85:b2:d7:10:8a:7b:5b:6c:36:61:36:0b:5b:
26:93:3c:b8:95:ce:35:2d:6f:8a:66:75:11:d7:17:34:06:43:
9e:4e:7d:c1:04:e6:d1:b8:6d:63:ce:f1:34:28:eb:ef:ab:0f:
cb:e5:0b:5a:9a:28:31:d1:1d:3f:f3:e0:14:66:52:fb:1b:33:
45:c6:37:b4:27:ce:b5:63:35:c5:3f:d0:b5:26:cd:98:40:f1:
ae:75:78:98:6b:6f:b4:9e:4b:c5:72:ec:39:6a:fa:f9:85:d3:
3e:75:58:79:fc:1e:69:83:eb:87:94:04:ae:bd:17:b5:f9:b9:
8a:69:bc:46:e9:52:52:0f:20:e6:4d:66:c4:ca:90:93:e9:43:
60:ca:90:60:7b:d8:ef:49:f8:73:4b:9a:b9:42:2a:a0:89:56:
b1:72:42:a8:4c:9d:a0:45:f0:c2:f7:c1:19:84:f9:e3:c6:03:
ce:87:5f:db:51:7c:be:0d:e7:bd:08:35:93:a7:8a:98:bf:78:
12:c5:7b:62:e2:36:4e:d8:3f:d5:e5:7b:d7:ae:f9:aa:e8:41:
25:c2:bb:e4:53:c7:29:dd:44:a5:76:66:82:eb:bb:ca:89:52:
f9:8d:b5:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 14:34:09 2025 by rpki-client