Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/a8Ky92KASFWuBYLdvptS4qyuPAg.roa
File: a8Ky92KASFWuBYLdvptS4qyuPAg.roa (raw, json)
Hash identifier: cGc69yGy5EfekoTtD2ADbbHE1BQ57a0BHinFiObGeFc=
Subject key identifier: 6B:C2:B2:F7:62:80:48:55:AE:05:82:DD:BE:9B:52:E2:AC:AE:3C:08
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 694C
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/a8Ky92KASFWuBYLdvptS4qyuPAg.roa
Signing time: Sat 07 Jun 2025 21:12:02 +0000
ROA not before: Sat 07 Jun 2025 21:12:02 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26956 (0x694c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jun 7 21:12:02 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=6BC2B2F762804855AE0582DDBE9B52E2ACAE3C08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:b0:40:1d:08:1a:81:8a:f9:12:a0:5f:4b:0c:
fc:2b:d8:bf:e6:ab:01:17:22:84:25:2d:2c:c4:62:
10:d8:b1:9a:9a:20:cf:5c:e1:56:89:d9:d9:c2:ee:
c1:08:a0:3c:be:42:eb:97:87:7a:5a:b5:a9:f0:29:
c5:63:96:f7:5c:2c:fb:79:ef:15:b0:d3:ea:59:00:
2d:c4:21:66:fe:d5:80:a8:75:46:17:81:68:7f:37:
6d:2a:7f:cb:99:0b:ac:0f:6b:cd:25:2a:4c:f6:69:
01:53:78:0b:6d:a0:a2:4d:e8:8b:31:be:01:d0:8b:
98:d5:67:a1:4f:f0:a0:b8:c8:cb:c4:12:18:ee:bc:
b9:ee:f1:3f:cc:72:0c:3f:32:04:c9:47:0c:8f:30:
e5:25:05:7c:19:4f:6e:f8:63:a8:f0:29:3f:d8:f1:
59:78:51:92:21:da:1e:54:09:c2:ed:80:61:45:9f:
49:63:52:c9:ca:79:22:12:e8:00:ec:66:94:1b:45:
5a:69:52:cc:f6:9d:47:e8:80:af:85:79:6a:ee:65:
12:78:ee:b7:38:79:50:53:8c:56:73:8d:71:47:6a:
92:b9:3d:65:d5:b2:4b:6a:55:ca:60:16:79:10:5d:
9f:9f:9a:a3:5a:df:5c:1e:74:8b:a9:5e:dd:4f:1d:
a4:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:C2:B2:F7:62:80:48:55:AE:05:82:DD:BE:9B:52:E2:AC:AE:3C:08
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/a8Ky92KASFWuBYLdvptS4qyuPAg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
96:fc:f7:70:d9:bc:4c:af:4e:17:ab:37:2d:b3:5e:38:8e:66:
4b:8a:ec:90:55:d2:11:b4:14:4d:e8:c2:1b:01:f7:8e:90:a2:
96:90:09:42:51:d3:d7:32:0d:66:4e:e2:4d:ab:f4:33:f0:b5:
ea:b5:c5:bc:62:09:fe:20:c9:9c:81:96:c6:09:71:2f:b2:39:
24:f7:68:4c:8e:60:6f:eb:38:2e:3f:20:10:bd:5e:87:ee:31:
18:5a:81:b3:5d:fa:c9:e0:75:11:32:00:41:64:d2:a1:5d:fa:
a9:dd:e3:1c:19:3e:c5:cb:ca:e7:a6:79:a3:98:50:e5:a3:54:
ee:4d:a4:62:e2:8e:31:a6:ca:c0:56:88:9b:ab:fc:6f:27:13:
8a:eb:9e:4a:16:18:f0:84:1b:da:77:ea:00:8a:c6:9d:12:1d:
5c:4f:35:55:62:84:f4:50:0f:08:4f:66:42:1d:4d:2c:01:6f:
cb:0c:eb:06:05:55:29:b9:d3:d9:ac:4b:98:db:79:d7:b2:e5:
d9:23:ef:d4:fb:73:a2:95:cb:71:53:8d:e9:e4:28:32:58:10:
1d:be:27:cb:8f:e8:4c:3d:c4:2c:29:5d:33:3f:45:9c:1e:ab:
bb:ea:ad:86:3b:d7:aa:73:b5:41:ad:8d:1b:f2:4f:ed:b2:b2:
98:52:ad:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 23:06:01 2025 by rpki-client