Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/Xqjp7dSeNyHFeipAcmepSLgPpOc.roa
File: Xqjp7dSeNyHFeipAcmepSLgPpOc.roa (raw, json)
Hash identifier: qM4bSGOTaAweP3+ZtQXLbgKowAmHWpBl3zxV35PcAsU=
Subject key identifier: 5E:A8:E9:ED:D4:9E:37:21:C5:7A:2A:40:72:67:A9:48:B8:0F:A4:E7
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 6972
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/Xqjp7dSeNyHFeipAcmepSLgPpOc.roa
Signing time: Sun 08 Jun 2025 06:41:57 +0000
ROA not before: Sun 08 Jun 2025 06:41:57 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26994 (0x6972)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jun 8 06:41:57 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=5EA8E9EDD49E3721C57A2A407267A948B80FA4E7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:e9:de:81:d8:dc:49:e0:ac:8b:7e:b2:7a:2a:
d7:53:50:f6:74:5f:7c:a0:5b:16:a9:53:3c:43:b2:
bc:b8:db:38:99:41:64:8a:c8:b3:c8:67:1b:84:11:
75:58:02:c5:7a:9d:88:f9:49:bf:5a:8b:4b:be:53:
59:cc:7a:e2:ae:c2:9a:b1:12:33:c5:1f:2f:5c:97:
31:8b:70:2f:d1:73:12:91:91:e1:79:db:9f:0d:dd:
a0:fc:66:96:4a:c1:0c:ef:96:b8:2a:0f:c4:5e:58:
40:82:d1:74:d7:57:98:41:c2:ea:d9:63:b2:00:cd:
28:80:d0:51:1a:fd:23:0d:4c:49:da:e4:9c:36:55:
dd:7f:87:c0:aa:c8:d7:84:1f:af:f5:c9:f3:02:46:
00:13:ab:d7:73:b8:d0:ad:f4:06:36:1d:ed:65:e8:
ce:41:1c:f3:e7:a7:d3:03:e4:fd:68:26:9a:04:a0:
35:62:d4:be:fd:93:67:f4:2d:15:14:42:fb:34:5e:
7e:a1:5a:be:b4:27:bb:4b:a4:ae:8d:a2:52:da:d6:
e6:52:9d:f0:23:a0:3b:57:b7:72:3c:1e:fb:71:5b:
56:09:f4:fe:7c:24:ba:34:b2:6f:93:9c:ad:76:ce:
1b:8b:dd:d7:f7:09:d1:83:f4:03:ce:bb:82:8a:9e:
73:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:A8:E9:ED:D4:9E:37:21:C5:7A:2A:40:72:67:A9:48:B8:0F:A4:E7
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/Xqjp7dSeNyHFeipAcmepSLgPpOc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
ad:9e:02:db:1e:bc:58:a4:b1:e0:3f:96:e0:ea:ee:16:62:26:
23:dc:95:c3:4f:81:6e:f2:52:85:d7:48:47:c2:55:04:5a:bb:
7c:07:d2:91:d0:a1:46:9f:8a:f5:89:8d:04:bf:cb:b0:46:0d:
7a:17:b5:d6:63:0a:d7:2b:99:2c:4a:2c:64:2a:61:f0:95:fc:
54:b7:54:fc:29:2e:01:2b:d4:fd:00:8f:82:33:e2:37:59:55:
21:68:7e:e0:c2:c5:9a:10:2b:38:bb:02:4d:30:ff:14:ec:fa:
4f:03:83:16:ed:92:f4:2e:90:86:cb:54:f8:3a:c6:6d:29:05:
90:24:d0:ff:88:25:d8:f8:7d:f7:7f:e1:11:75:3e:81:e1:9e:
39:4c:16:ba:17:b7:a6:63:82:66:27:25:1b:20:95:09:ec:c1:
d5:23:92:bc:c7:51:9a:4b:99:63:ec:7e:00:02:17:1f:af:33:
17:3b:f0:da:d0:54:1f:7b:dc:3b:eb:66:f2:86:e1:8e:85:b9:
69:cc:25:90:aa:1f:cd:de:9c:5a:1f:c2:79:bb:c5:ff:21:bf:
74:1a:fc:0a:34:dd:d3:74:af:0f:6f:27:5c:44:a3:2a:4d:ca:
8f:c4:0d:8c:bf:b8:07:71:02:6f:9c:40:6f:66:be:bc:84:ad:
e2:f8:a1:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 13:25:23 2025 by rpki-client