Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/NdTAJl64IiNvP4jN12ZGrTa8izE.roa
File: NdTAJl64IiNvP4jN12ZGrTa8izE.roa (raw, json)
Hash identifier: VH5TyHSORlimxNjR0nhZIF0LfXggUPUBdmfjeCRf9o0=
Subject key identifier: 35:D4:C0:26:5E:B8:22:23:6F:3F:88:CD:D7:66:46:AD:36:BC:8B:31
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 6ADE
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/NdTAJl64IiNvP4jN12ZGrTa8izE.roa
Signing time: Thu 12 Jun 2025 01:42:07 +0000
ROA not before: Thu 12 Jun 2025 01:42:07 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27358 (0x6ade)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jun 12 01:42:07 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=35D4C0265EB822236F3F88CDD76646AD36BC8B31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:7b:49:99:dd:a9:9a:42:05:22:b7:66:a5:6d:
dd:4f:56:61:5d:a6:9f:28:a2:d0:71:6c:3b:c6:ef:
5b:3a:0f:d0:7f:e5:65:2e:25:c1:f3:cc:c0:71:47:
14:c3:54:b8:21:e1:8f:24:df:32:9c:3b:f5:a1:27:
dc:b8:87:70:e1:11:09:0f:ac:5e:14:e5:c1:cf:5b:
04:4e:1b:06:cd:8c:14:3c:94:7b:9b:c4:fb:a3:18:
f5:37:e6:56:a3:3b:30:89:c1:71:7f:32:4b:08:33:
51:25:b5:d9:c4:2a:78:07:1c:c0:8d:e2:2a:b7:0e:
f9:d9:16:35:32:7e:a7:8c:c1:df:d4:e8:c3:2c:06:
40:99:bf:f4:2e:0a:87:4e:19:f6:2b:6d:e8:b7:40:
f9:8e:17:88:fc:5a:3e:64:8a:2e:06:e9:aa:2e:60:
10:fa:82:95:f1:fc:3b:1a:e3:44:65:a5:d2:b8:7e:
63:e4:19:3c:0f:cd:6c:52:0a:74:2b:49:5a:ab:b8:
bf:8d:47:33:bf:92:73:7a:98:da:65:d3:30:ee:54:
3e:d2:b7:d4:3a:20:9e:bf:ca:9f:79:6e:97:5a:85:
1b:47:c2:0b:00:76:eb:cd:1b:40:15:37:fc:07:35:
7f:9a:d4:2b:c2:20:5e:fe:4d:1f:35:b5:a7:a1:a6:
7c:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:D4:C0:26:5E:B8:22:23:6F:3F:88:CD:D7:66:46:AD:36:BC:8B:31
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/NdTAJl64IiNvP4jN12ZGrTa8izE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
62:89:41:cc:41:44:cd:9a:6e:87:57:4b:2c:b6:c4:7e:89:b9:
ca:33:9b:08:81:36:07:cc:c4:4c:59:46:d8:86:0a:0b:75:a0:
c6:f3:65:f9:cb:60:85:bb:40:95:ec:55:9b:54:ce:95:80:70:
17:43:a3:de:80:c7:1e:4a:c8:3f:d9:c3:45:db:4d:ac:9e:40:
21:7f:16:c8:f0:04:f3:fa:de:f4:4d:4b:d9:24:c1:de:2f:3a:
0d:dd:2a:47:a8:98:d9:39:ff:8f:eb:92:95:a0:de:7a:c0:38:
81:d4:e5:af:1d:71:51:e9:2b:b6:d5:1f:ac:24:a4:a4:de:d5:
4c:a2:30:3c:50:01:aa:e9:17:8c:d9:a3:e9:d8:34:d8:a5:6f:
3e:df:8d:b3:eb:2b:c2:35:14:9b:d7:bb:e7:9f:fa:3f:d8:07:
aa:7c:4a:75:cd:23:84:a2:88:d9:71:2f:d0:ea:d6:76:17:45:
c1:18:28:eb:1b:8d:4e:ab:ef:3c:74:8a:7f:1d:87:0c:bd:bb:
80:96:4e:b4:8e:fa:4d:b8:f3:c7:7a:d8:12:54:10:f3:63:c8:
54:14:76:66:ae:6c:ef:6e:27:26:3e:f7:b9:e3:df:fc:be:d8:
95:8f:e8:67:c5:b1:a6:98:0b:3a:11:4d:14:3a:3d:52:61:b9:
9a:da:c4:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 13:51:29 2025 by rpki-client