Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/OKGrTzJszEqdUVzd4kcV9Kp0Euo.roa
File: OKGrTzJszEqdUVzd4kcV9Kp0Euo.roa (raw, json)
Hash identifier: uHkVsE5DiyrRN2HMmN4NRK9lpOVtqivM96g0j13yfKo=
Subject key identifier: 38:A1:AB:4F:32:6C:CC:4A:9D:51:5C:DD:E2:47:15:F4:AA:74:12:EA
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 67BE
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/OKGrTzJszEqdUVzd4kcV9Kp0Euo.roa
Signing time: Tue 03 Jun 2025 17:41:41 +0000
ROA not before: Tue 03 Jun 2025 17:41:41 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26558 (0x67be)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jun 3 17:41:41 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=38A1AB4F326CCC4A9D515CDDE24715F4AA7412EA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:26:8d:9d:15:82:05:66:7d:b9:f7:aa:b1:67:
4f:83:01:98:6c:27:7c:dc:93:91:f7:87:5b:00:ee:
12:a9:6c:36:79:6d:90:23:5f:b7:f3:44:32:60:92:
a8:e8:5a:e9:42:d3:7b:31:0f:be:86:e9:9f:bf:32:
29:12:45:65:d1:75:73:bf:e6:03:87:b9:a4:f4:7a:
09:29:b5:1e:34:fc:ce:c6:82:ff:49:ad:31:0f:77:
86:c8:0f:28:55:b7:9c:a1:a6:68:1c:07:14:68:4d:
13:28:39:10:51:2a:b9:8a:d8:93:3d:42:ce:3a:5d:
f7:b2:51:20:ad:f8:19:4c:76:69:3d:5a:9d:40:35:
03:2e:08:cb:de:5a:bf:c7:68:9e:b8:b5:74:2c:77:
67:fd:2c:f4:5b:92:38:b5:e1:02:e1:ca:7f:45:ea:
d3:1d:2d:28:d2:d9:9b:9b:f3:b2:05:84:7b:b6:f9:
01:65:d7:13:2c:fe:29:fb:94:20:18:9e:b4:12:7c:
a3:01:a4:2c:0c:4d:d0:fd:1c:af:ba:ec:47:30:ed:
4d:d4:a3:73:40:43:07:8a:73:b8:14:2d:32:aa:f1:
95:c1:f3:90:dc:4d:ab:91:ef:14:0d:6e:6c:34:9b:
46:fc:f6:b2:77:38:f1:3f:ac:e5:e2:fe:73:08:78:
36:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:A1:AB:4F:32:6C:CC:4A:9D:51:5C:DD:E2:47:15:F4:AA:74:12:EA
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/OKGrTzJszEqdUVzd4kcV9Kp0Euo.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
41:59:64:44:f3:df:a0:8c:29:67:19:9c:fd:5f:02:09:c6:f5:
08:51:3d:a5:42:47:a3:9a:b2:c4:0e:e1:56:75:6e:24:ec:f9:
82:c5:47:1e:c2:88:b2:be:db:3d:ca:61:e6:93:d1:92:65:76:
fc:15:75:83:e8:81:3e:ee:3d:98:76:6e:f2:77:ef:84:3f:77:
29:38:e4:6f:98:59:ca:75:a3:d9:ec:c0:da:4e:76:e3:75:7f:
61:06:21:ae:bd:df:6d:a3:89:b9:11:d3:a0:fa:eb:a1:b8:b8:
68:e8:06:e3:f2:8f:c8:3a:fa:5a:a2:83:3b:c7:4b:e3:1c:00:
ce:7e:b4:75:3d:d3:4e:ed:34:4a:b6:91:9d:4e:16:db:44:d4:
a4:9d:cc:1c:12:09:6e:c2:fc:3f:68:9c:8d:8d:7e:42:51:e2:
43:c0:d1:14:04:04:bc:33:fb:47:8a:11:28:83:4b:88:50:81:
3e:51:04:c0:60:38:65:2c:5e:77:26:fe:27:90:94:5c:3a:d5:
69:23:24:4c:ed:d7:07:44:68:f4:93:00:e7:7b:af:01:33:a9:
7e:9a:c2:62:ba:31:4d:15:0b:66:01:f1:58:78:47:58:be:94:
fa:d2:2b:69:98:85:49:d5:45:54:38:a4:45:86:d6:c4:05:41:
a0:46:1f:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 22:42:28 2025 by rpki-client