Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/_i3IptgyokFuSmlz1UWbgy9LGbk.roa
File: _i3IptgyokFuSmlz1UWbgy9LGbk.roa (raw, json)
Hash identifier: IJTPQil9PpAlAVZsU29/mXpdSjfDRrswepyMprJwnhI=
Subject key identifier: FE:2D:C8:A6:D8:32:A2:41:6E:4A:69:73:D5:45:9B:83:2F:4B:19:B9
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 68B8
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/_i3IptgyokFuSmlz1UWbgy9LGbk.roa
Signing time: Fri 06 Jun 2025 08:11:48 +0000
ROA not before: Fri 06 Jun 2025 08:11:48 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26808 (0x68b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jun 6 08:11:48 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=FE2DC8A6D832A2416E4A6973D5459B832F4B19B9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:5e:e2:a9:a9:63:7b:d6:b7:a5:08:40:ae:08:
de:4a:2d:6a:32:64:07:6d:84:ae:fd:ed:ac:b7:2c:
8c:1e:80:8d:db:68:c6:6b:eb:3e:04:4d:3c:7b:7c:
36:11:1a:90:16:b5:2b:11:17:ed:7e:ac:e4:28:a4:
ab:60:07:b2:5a:a2:ec:24:8f:71:02:ee:71:ae:a0:
c4:e4:da:a0:8e:75:5e:25:62:e3:94:8e:c6:28:25:
f7:2c:53:84:27:4f:fe:c1:91:19:a5:c8:a7:5d:83:
f5:17:63:19:13:7c:76:be:63:fe:03:8c:d7:38:07:
f2:f4:92:62:f1:2e:e2:ca:48:4b:a8:0b:0e:ca:72:
1f:ea:40:c1:b2:1e:0e:92:cd:84:6e:cf:35:a5:1c:
f2:96:8c:93:91:da:23:31:eb:a4:1b:fe:90:04:fa:
a6:b1:51:0b:8b:64:4f:ca:88:ee:10:91:8a:98:4d:
72:6e:42:53:86:67:ea:78:c9:45:ea:6e:fb:96:5b:
55:53:d1:d3:74:b6:69:f7:a5:d1:79:d6:d9:f9:7e:
29:ff:e9:23:0b:59:aa:5f:be:ba:86:8d:79:06:6b:
09:fb:28:a1:c9:c2:a4:c5:8b:40:74:3c:44:00:1a:
c6:93:66:72:3b:b3:74:ac:f2:1f:5e:df:d7:21:c6:
72:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:2D:C8:A6:D8:32:A2:41:6E:4A:69:73:D5:45:9B:83:2F:4B:19:B9
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/_i3IptgyokFuSmlz1UWbgy9LGbk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
1a:da:3a:f4:1d:5f:d0:e0:77:ae:a8:04:77:1f:68:22:46:62:
bd:32:25:99:6a:f3:90:e3:bf:dc:ec:a7:f5:71:2a:0f:c8:59:
d2:11:fb:77:fa:a9:dc:50:99:ac:68:0f:cf:58:fb:ab:27:de:
01:de:46:74:d2:e8:b2:d2:fb:3c:80:09:d8:1c:d5:5b:14:27:
ad:4b:64:e8:bf:07:f9:71:00:02:46:f7:54:55:ac:f8:41:e9:
6c:90:3b:d4:eb:cb:3c:d2:ef:18:04:d6:c6:88:a6:08:e9:06:
5a:f6:d1:72:70:6f:15:66:fb:1f:b8:56:9b:c6:d7:59:27:fa:
58:90:01:46:ae:50:d0:d6:a7:03:ec:9c:0a:c4:b3:5f:14:ed:
b7:d7:0f:e7:9a:a4:64:69:aa:e4:ac:2a:25:74:16:14:29:9a:
9c:39:df:31:af:c1:dd:21:10:00:e3:d2:13:e2:29:87:c7:dc:
00:ce:74:07:42:22:a0:14:81:ee:9c:48:9e:37:17:88:09:e8:
a7:cb:31:b9:3d:01:e2:22:5c:9d:26:16:c7:5e:dd:d5:50:e2:
6f:a0:27:4c:37:3a:1f:1d:fe:22:e3:d0:24:be:23:72:7e:01:
0d:b2:bd:3a:29:8d:4b:32:28:da:a1:2f:5b:54:76:16:32:cb:
bd:7d:95:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 16:21:31 2025 by rpki-client