Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/XeoIXl6cTM_UIOyTd92P8D1-jis.roa
File: XeoIXl6cTM_UIOyTd92P8D1-jis.roa (raw, json)
Hash identifier: OxN7HZ3j6/B99mX8WJtkpe1AswrlqJBWM7BXggNi8J8=
Subject key identifier: 5D:EA:08:5E:5E:9C:4C:CF:D4:20:EC:93:77:DD:8F:F0:3D:7E:8E:2B
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 6BC2
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/XeoIXl6cTM_UIOyTd92P8D1-jis.roa
Signing time: Sat 14 Jun 2025 10:42:20 +0000
ROA not before: Sat 14 Jun 2025 10:42:20 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27586 (0x6bc2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jun 14 10:42:20 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=5DEA085E5E9C4CCFD420EC9377DD8FF03D7E8E2B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:6b:4e:58:3d:0f:f3:55:ac:1c:9e:fe:f5:3d:
5b:ed:1d:2e:f3:ca:bf:61:4e:42:88:2e:f0:1a:8d:
2d:4a:02:02:5b:c7:dd:b7:99:96:2d:bb:ed:65:53:
3e:73:69:65:17:72:19:f4:4e:bf:7b:6b:a9:bc:b2:
85:22:e3:86:9a:e0:f5:9f:90:ba:77:35:b2:f0:27:
63:41:42:11:79:48:69:9e:6d:a8:23:9e:6c:39:0a:
ee:b8:57:19:f2:e6:9a:d0:dd:90:43:02:80:fb:d8:
e5:43:0f:8b:61:77:7e:ae:f3:f9:3e:ec:b6:59:56:
41:fe:18:df:da:8a:45:80:7b:4f:08:1a:b0:25:f5:
d2:8e:bb:76:c2:c5:0f:d7:48:b0:0d:3f:b4:5c:12:
0a:4d:f1:b2:0a:93:be:db:d9:4e:2f:72:4f:56:ba:
9d:66:a8:2d:d4:f3:de:dd:18:cc:1c:e9:83:6a:1f:
c2:18:56:3f:88:9e:c3:f4:c7:d7:ff:90:b3:88:45:
6d:35:69:60:40:b7:22:be:85:30:2c:0a:98:a8:73:
49:b4:43:62:37:f1:42:1e:ff:07:df:88:57:7c:d7:
6a:88:0e:92:5f:35:94:06:32:2a:79:02:20:91:8c:
9d:3e:ae:5a:71:ad:52:19:12:43:b9:a0:d0:95:8f:
d9:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:EA:08:5E:5E:9C:4C:CF:D4:20:EC:93:77:DD:8F:F0:3D:7E:8E:2B
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/XeoIXl6cTM_UIOyTd92P8D1-jis.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
42:6c:55:7f:9d:24:a4:ac:33:d1:39:f1:d4:74:0f:d1:3b:03:
16:db:5f:0c:f5:69:92:4f:91:88:32:94:ac:ed:ce:c6:6d:78:
7a:51:f3:45:45:e2:f5:73:b9:be:73:75:40:a6:32:bf:d2:b1:
c5:37:b2:b1:4c:5e:dc:40:05:96:3b:f5:55:7c:65:23:78:d5:
d3:ff:ba:63:30:a8:18:53:25:da:e4:83:5b:24:b5:c4:fd:4d:
7a:03:ef:66:99:c4:ae:02:12:01:a9:17:22:a0:c4:26:d6:17:
bf:37:ea:c3:c4:61:97:67:32:c8:75:23:b7:06:7e:a6:22:0d:
4d:a4:f0:58:3c:26:7b:ce:2a:7f:6e:b0:09:e0:e1:97:10:4b:
dd:da:97:6e:4d:89:e5:36:af:38:52:c7:6a:ba:dc:c4:3a:55:
69:d8:27:22:28:9d:1f:9a:73:79:cd:e3:d3:fe:70:ec:ae:05:
d1:23:1a:f5:49:73:f4:79:eb:46:62:a6:04:97:28:b0:99:82:
11:3b:4c:81:99:ff:6e:0d:b3:17:2c:a9:ea:2b:0c:42:04:d6:
7f:66:12:19:e6:04:21:a7:ee:42:3d:23:ae:a9:76:1b:12:f1:
42:f4:e9:42:80:b6:82:45:14:c1:e4:d6:90:0c:2a:e2:74:8d:
25:c3:4f:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:25:53 2025 by rpki-client