Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/k9UOqqtenepJ2N0Bmx87w7UCQXA.roa
File: k9UOqqtenepJ2N0Bmx87w7UCQXA.roa (raw, json)
Hash identifier: 7fvyH6pPdprCAsEIlowHqgzlhWRKg8W0zcn6lrlLYfc=
Subject key identifier: 93:D5:0E:AA:AB:5E:9D:EA:49:D8:DD:01:9B:1F:3B:C3:B5:02:41:70
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 6B50
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/k9UOqqtenepJ2N0Bmx87w7UCQXA.roa
Signing time: Fri 13 Jun 2025 06:12:16 +0000
ROA not before: Fri 13 Jun 2025 06:12:16 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27472 (0x6b50)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jun 13 06:12:16 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=93D50EAAAB5E9DEA49D8DD019B1F3BC3B5024170
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ce:c5:a7:bc:69:07:f4:18:9a:ad:fd:c4:19:
7f:a2:c2:bf:bb:59:6d:7e:62:26:c4:8d:2c:84:2a:
cc:2f:9f:c1:9b:93:7c:94:08:d6:1f:0e:d9:4c:62:
ba:12:13:b1:42:a1:9d:28:f6:cc:72:e9:bd:7b:7f:
d9:8c:0d:df:2e:ae:6a:c1:18:dd:15:4d:91:84:b9:
ca:d6:8e:bf:92:c9:03:77:24:09:c1:c6:97:e1:64:
2e:da:29:69:53:b8:3f:38:c5:54:49:57:35:1e:02:
6d:d8:a4:76:4b:70:9e:d0:7d:e6:c1:ee:a4:af:eb:
57:6d:57:eb:65:b2:51:db:51:20:c5:bb:e4:90:48:
00:34:e0:bc:93:d7:2a:45:7e:2a:f1:4c:da:0c:32:
b9:72:74:19:bf:ba:e9:23:da:80:cc:49:dd:fc:db:
04:d9:b4:9b:59:38:c7:85:ae:02:de:51:e2:5b:41:
3c:63:84:0e:12:74:ca:62:63:34:28:94:c1:19:de:
e1:ce:ff:36:23:3b:fe:84:48:f3:a3:69:5d:7d:24:
55:a8:2c:73:51:cd:01:1d:c3:fb:cf:d8:c4:e1:5c:
40:e6:a8:78:0c:69:ef:3e:18:f0:8b:f3:98:b4:59:
e5:6f:d6:2b:6c:c0:13:65:56:b1:c1:07:3d:6a:02:
01:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:D5:0E:AA:AB:5E:9D:EA:49:D8:DD:01:9B:1F:3B:C3:B5:02:41:70
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/k9UOqqtenepJ2N0Bmx87w7UCQXA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
ab:f8:9e:7a:56:d5:6f:a7:56:2d:25:9e:cc:ec:f4:0a:66:d1:
37:a2:7b:3d:55:46:97:63:9d:54:d0:17:06:df:e6:a1:79:f2:
0e:11:7b:c9:65:c6:07:ab:28:cc:4a:af:9c:a9:c7:6b:ba:51:
2b:80:1a:af:96:4d:8c:96:f5:77:08:40:c4:63:00:19:f5:3d:
84:11:e0:56:62:4d:b4:a5:9a:f1:e8:9d:f3:f1:e9:75:63:cd:
bd:61:c2:71:d7:36:9d:83:79:5e:3b:6f:88:93:15:81:36:bc:
00:1f:9b:0a:b8:df:7a:bd:bc:5e:78:2d:c6:fd:3a:93:a8:1b:
e7:00:22:d6:10:fb:0d:04:35:3e:08:65:7f:3a:f6:ac:3c:85:
df:3b:0c:e0:6d:93:6a:1f:55:32:61:cd:43:87:7d:5c:80:a2:
3f:dd:9f:b9:40:07:6a:14:74:63:f4:1d:6d:19:bf:a7:32:4e:
8b:7b:ed:ef:7f:ed:29:1d:e2:f9:81:74:92:3c:86:b1:8e:c9:
f1:05:dd:53:8b:65:5b:ba:df:39:4e:b1:96:51:43:0d:a3:ab:
fd:9e:66:41:9d:30:9f:45:c3:90:e2:f5:aa:5a:10:5b:c6:e2:
e4:72:18:92:0e:8f:68:b0:ad:cd:d0:8d:73:67:fc:bb:57:2f:
c0:1b:f1:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 02:31:08 2025 by rpki-client