Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/RXQozTijsPbvYDCJcLMSvudjsPE.roa
File: RXQozTijsPbvYDCJcLMSvudjsPE.roa (raw, json)
Hash identifier: 3rv/tAwF87Mkha0jwgoSVB3ayEix9gzIIxKxQYBl5pw=
Subject key identifier: 45:74:28:CD:38:A3:B0:F6:EF:60:30:89:70:B3:12:BE:E7:63:B0:F1
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 62A4
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/RXQozTijsPbvYDCJcLMSvudjsPE.roa
Signing time: Wed 21 May 2025 03:10:47 +0000
ROA not before: Wed 21 May 2025 03:10:47 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25252 (0x62a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 21 03:10:47 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=457428CD38A3B0F6EF60308970B312BEE763B0F1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:7d:12:61:a1:e1:06:ed:48:e2:1c:4a:66:cc:
a9:10:f5:2c:27:6e:a4:a2:1e:3c:08:ec:ef:36:47:
e7:16:ef:c8:4e:10:22:d7:d6:d0:11:3a:9e:fb:7d:
9f:4d:11:76:bb:9c:3e:36:6b:8c:f4:38:da:cc:38:
02:d8:34:0b:80:89:a2:56:c3:10:36:22:19:86:a2:
38:a3:66:01:33:55:b0:4f:34:79:71:83:77:0c:1c:
0a:93:14:30:fc:e9:d1:97:70:1a:32:35:75:81:e9:
32:74:04:53:ac:6f:4b:b2:d7:f1:2b:b6:a7:78:79:
bc:f6:da:f3:e8:2e:02:fd:97:15:e1:1e:4d:f7:4f:
bc:ea:9f:e2:93:ea:80:fe:6a:50:4d:ab:54:19:29:
d0:7b:c6:bc:3c:de:66:88:aa:b9:f9:1b:c6:e5:ba:
0d:f6:bb:11:f0:4a:72:ea:94:8c:d3:01:2f:7c:f3:
55:b5:5a:0a:b4:fd:b8:f1:13:51:28:2f:42:a8:50:
25:97:a5:a0:f4:ed:ce:55:b6:44:78:55:09:d7:94:
b4:11:90:14:3b:d7:3d:7a:63:eb:81:f9:29:c8:dc:
88:24:05:4e:67:d0:bc:aa:7d:ef:91:bc:07:1d:f0:
c7:5f:4e:9d:c7:dd:dc:22:96:10:40:b6:6f:23:70:
b1:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:74:28:CD:38:A3:B0:F6:EF:60:30:89:70:B3:12:BE:E7:63:B0:F1
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/RXQozTijsPbvYDCJcLMSvudjsPE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
26:1b:ab:8c:26:d4:80:4a:d6:a8:5a:12:7c:89:47:66:3c:7b:
a6:f0:cf:33:2b:35:83:22:ef:5f:bf:35:21:5a:16:9d:a3:08:
e2:cf:58:c5:66:38:0b:45:a7:13:60:16:9e:8f:f2:19:2c:f1:
13:6a:1f:d8:8b:cf:25:cd:88:90:05:cc:9e:d3:6b:c7:d2:8e:
4d:14:aa:0b:7a:b5:08:f4:16:68:cf:d8:68:92:c1:83:06:f5:
1b:5f:3a:eb:15:b5:5d:ea:00:fd:33:ba:98:68:98:b7:6f:57:
56:86:e9:c1:ab:82:7e:68:6f:a7:c9:1a:2d:5d:1a:0f:6c:ab:
69:9f:c6:c7:da:d3:fd:53:59:69:b3:59:c4:27:6c:ed:38:bd:
e0:02:ae:a1:3a:cf:56:9e:d9:44:58:78:59:5c:8b:8e:af:48:
ae:34:3c:5e:79:7c:fc:a0:97:2d:05:2b:c2:26:64:d7:e0:3b:
34:ad:91:f7:db:54:7e:05:e0:c2:89:c3:c9:34:96:03:72:42:
14:fd:d2:5a:a2:07:b5:ad:e2:52:ef:be:ae:53:ba:cf:12:02:
b4:2d:a8:9f:d9:c0:56:03:83:dc:57:3b:38:64:13:76:2b:db:
0a:35:7a:cb:cf:a1:33:5f:da:53:f5:33:7f:df:39:99:3f:55:
2d:64:e3:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 05:15:07 2025 by rpki-client