Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/cDwSwnqCM5SPBEBGztEq62AqmJk.roa
File: cDwSwnqCM5SPBEBGztEq62AqmJk.roa (raw, json)
Hash identifier: Jnua/mQ9B/yha0VFbPSZG4Web2Y+/vabrdJMYNZjNbI=
Subject key identifier: 70:3C:12:C2:7A:82:33:94:8F:04:40:46:CE:D1:2A:EB:60:2A:98:99
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 63F8
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/cDwSwnqCM5SPBEBGztEq62AqmJk.roa
Signing time: Sat 24 May 2025 16:10:54 +0000
ROA not before: Sat 24 May 2025 16:10:54 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25592 (0x63f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 24 16:10:54 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=703C12C27A8233948F044046CED12AEB602A9899
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:5a:aa:7b:70:4c:2e:e4:d0:2a:c0:03:62:a4:
08:79:e7:bf:49:8f:60:8b:92:e9:00:75:c0:b9:3a:
f0:c9:c9:68:71:29:02:58:6e:82:8e:ed:64:8c:84:
37:98:57:18:6e:f5:13:43:97:89:f2:6c:d8:4d:9a:
3a:ca:9a:89:e0:87:13:d3:3c:b5:8c:54:18:91:9f:
e5:73:e6:1d:ef:4c:de:c6:85:96:21:0c:3e:de:6b:
44:ff:63:09:db:87:46:27:c4:25:40:41:ae:3a:b8:
8e:07:a3:ee:ef:1d:39:cd:4d:a4:04:7b:3b:ab:7d:
28:ac:5f:d6:29:e6:65:83:33:12:7e:bc:a5:65:ef:
4a:b8:b0:1b:ed:39:3c:aa:df:91:71:f2:d2:86:1d:
79:d9:cf:57:50:dc:2d:20:11:94:e0:06:9c:5b:84:
8e:6e:9a:d5:38:6a:23:ff:66:3c:d1:0f:80:2c:a0:
88:7f:20:ac:f7:ef:4c:98:54:0f:9c:53:eb:6e:d3:
0f:0f:49:69:ac:e3:b7:bf:67:ae:50:59:66:4e:c8:
01:b2:de:9a:6a:5a:1e:5f:f0:0a:dc:23:e5:d9:6f:
07:f4:c1:41:4e:38:dc:ef:5f:f3:f4:ec:af:5f:d0:
c9:c3:03:9c:5e:08:4b:d6:61:63:ae:5a:55:e9:a9:
99:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:3C:12:C2:7A:82:33:94:8F:04:40:46:CE:D1:2A:EB:60:2A:98:99
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/cDwSwnqCM5SPBEBGztEq62AqmJk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
b5:6d:b9:2d:70:93:24:52:29:54:a2:62:c2:ce:a9:20:25:ab:
2d:88:29:31:56:2e:6e:4f:da:c4:02:f5:7a:7d:da:0b:9f:3e:
a4:31:06:55:f4:7f:ca:92:67:e6:f5:09:af:82:15:3f:a2:b6:
5d:45:98:fe:41:80:e1:b0:39:a0:8e:fd:d4:0a:b4:c8:18:5d:
a0:fd:c3:43:7c:2b:c5:43:e9:4c:75:5c:72:fe:be:6b:c0:69:
6b:41:82:49:b5:8a:ba:18:46:8f:c7:65:8c:67:fe:65:89:69:
2a:67:7f:6d:45:19:ff:fa:9a:23:65:b0:41:62:f9:ef:cf:98:
e0:a9:bf:ad:14:7e:9c:59:97:7b:22:97:d3:be:3b:1e:c1:4b:
83:67:26:a0:03:8f:65:2b:90:00:0b:0d:b6:32:9d:64:33:f3:
d3:18:b3:95:9a:72:59:c1:13:bc:4d:cb:14:81:3a:90:3c:d7:
c2:0e:c6:25:e6:39:8f:af:39:d2:c0:4e:63:2e:2f:bb:f6:84:
40:f4:29:06:12:93:e9:33:bd:fa:59:08:7a:05:4d:e9:ec:f8:
f4:66:47:e5:a2:d9:71:7f:0f:fa:88:23:e8:29:1b:e3:ee:1b:
d0:ba:ef:21:c9:a5:69:2d:b2:50:2c:c2:28:a9:06:b1:a5:51:
34:6e:4f:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 03:31:16 2025 by rpki-client