Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/NqHUAmJt_C-x3Trhzz44UEUg9mY.roa
File: NqHUAmJt_C-x3Trhzz44UEUg9mY.roa (raw, json)
Hash identifier: /4gDUXFor8IFMLfNP3xdmkg9I6kkf6DleewLiHFbyvI=
Subject key identifier: 36:A1:D4:02:62:6D:FC:2F:B1:DD:3A:E1:CF:3E:38:50:45:20:F6:66
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 6BDE
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/NqHUAmJt_C-x3Trhzz44UEUg9mY.roa
Signing time: Sat 14 Jun 2025 17:57:07 +0000
ROA not before: Sat 14 Jun 2025 17:57:07 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27614 (0x6bde)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jun 14 17:57:07 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=36A1D402626DFC2FB1DD3AE1CF3E38504520F666
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ba:21:01:b5:77:fa:b8:de:f5:6f:d1:b8:c8:
16:93:82:ae:11:55:61:55:67:36:1f:cf:fd:ce:b3:
3e:19:10:45:9c:65:7f:94:f6:4c:e0:ff:9f:77:59:
5c:1a:e4:c0:50:b1:23:65:b4:0d:5e:f1:9f:4c:1a:
81:74:a2:3a:d5:37:60:97:3b:60:a9:60:3f:7e:71:
83:42:e8:b6:89:5a:e5:2f:2c:62:5d:f0:f4:11:59:
a6:d7:c9:7d:42:97:42:22:b8:a6:01:2b:8e:41:05:
d6:83:c4:46:91:ef:24:05:f5:79:89:ad:12:e5:32:
c7:44:7e:3b:84:a9:73:32:b8:4b:a5:9c:4b:e9:9f:
16:46:d1:17:a6:e6:8c:85:8e:e2:16:ff:7d:80:9c:
d5:86:fb:86:b3:5d:26:cd:35:66:95:45:5a:cd:33:
0a:1a:cf:d2:a5:c9:f3:f4:f2:a4:d7:0f:82:80:31:
ed:0f:b1:23:86:a3:5b:f8:26:dd:94:66:d8:aa:59:
18:14:10:fc:fd:1b:87:79:3f:1a:c5:85:36:f3:44:
19:c2:3b:f2:bf:ee:6e:be:3e:47:89:27:85:aa:26:
85:17:14:71:df:06:bb:77:5b:05:e0:91:ca:fd:89:
22:f0:99:af:18:23:b1:fb:0c:b8:22:14:aa:53:29:
f2:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:A1:D4:02:62:6D:FC:2F:B1:DD:3A:E1:CF:3E:38:50:45:20:F6:66
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/NqHUAmJt_C-x3Trhzz44UEUg9mY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
1e:d4:dd:5a:f2:fc:5a:8c:8b:21:a4:eb:b5:01:87:cf:cd:a3:
33:47:a0:0d:4b:47:5b:fc:9e:5c:f6:57:46:13:24:95:8e:4e:
ac:f2:bb:0b:75:5b:6c:99:de:51:71:04:77:dd:88:c7:bc:45:
df:27:e0:fd:ea:fa:24:8d:13:8f:2e:d0:a0:3a:f1:5c:5f:e9:
85:c5:a7:b8:a1:c6:3f:39:83:86:6f:51:14:5f:fb:b3:22:82:
fc:53:24:dd:78:dd:11:fb:d5:6d:68:21:00:ac:d3:35:6c:26:
fa:ee:40:bd:a8:14:7b:9a:71:78:f6:b7:01:fd:c1:22:4d:76:
45:52:6f:bd:f2:d8:d5:4f:ae:77:21:4a:76:37:07:80:1f:7c:
d6:7b:1e:1a:fd:03:36:ec:79:0b:d8:a3:b0:ac:73:6c:10:a6:
c3:75:34:d0:a6:02:25:0e:ab:73:49:4f:dc:37:64:c0:f0:22:
47:3c:87:b1:53:87:98:65:4a:3d:63:47:d2:59:3f:6b:39:d8:
c9:fb:6d:0b:72:28:f1:3a:60:18:71:ce:79:bc:30:1c:e3:77:
c9:83:03:09:a0:a9:0d:57:45:bc:8a:51:b8:e1:c1:9a:2c:6f:
e2:73:5b:e1:b4:6f:85:56:84:f4:fb:db:6c:6a:78:a2:88:88:
8d:1a:59:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 08:34:29 2025 by rpki-client