Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/kc2x7ho3VRReoDcCnV_7urPDuZ8.roa
File: kc2x7ho3VRReoDcCnV_7urPDuZ8.roa (raw, json)
Hash identifier: fj4q3ZtrnAx6TmfKyHnBkcXJeIzEzyh+hPJNm8mZ8Ek=
Subject key identifier: 91:CD:B1:EE:1A:37:55:14:5E:A0:37:02:9D:5F:FB:BA:B3:C3:B9:9F
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 6B4A
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/kc2x7ho3VRReoDcCnV_7urPDuZ8.roa
Signing time: Fri 13 Jun 2025 04:42:22 +0000
ROA not before: Fri 13 Jun 2025 04:42:22 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27466 (0x6b4a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jun 13 04:42:22 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=91CDB1EE1A3755145EA037029D5FFBBAB3C3B99F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:59:2b:91:b2:66:ac:29:9e:09:97:d8:2d:ce:
ee:41:b8:2e:68:a4:9d:93:53:58:d2:d3:90:6e:8b:
c2:d4:33:4b:78:30:24:26:57:10:4a:c9:90:93:94:
52:a9:75:8e:9c:db:d4:12:b6:62:7a:9c:3a:78:4a:
d2:29:75:ac:83:4e:fb:b4:b6:08:9a:89:2a:ec:4d:
13:f6:ff:06:07:75:c4:8e:1e:d4:8d:80:2e:e4:17:
2b:01:60:9d:42:23:67:11:85:a7:0e:87:ba:0e:f5:
a7:a0:df:82:11:b4:f0:4f:60:a1:6a:5a:4c:78:97:
8c:67:a8:6c:8c:8e:44:5c:79:e6:05:5e:37:f4:4a:
ed:26:d7:d8:ec:9a:ee:da:1e:60:83:ad:42:f0:49:
15:c4:e4:21:4b:28:66:65:5d:00:25:7f:bc:27:33:
76:1b:0c:39:e7:b7:ee:bf:0a:2b:45:28:64:38:23:
01:2c:79:b3:cc:bb:ed:fb:a7:4d:de:96:54:16:0e:
b8:8f:73:63:80:f7:28:27:0a:c5:1f:1f:94:1e:ea:
8d:ef:a3:db:70:a2:7d:62:93:6f:3c:e9:ed:f0:3c:
7f:d9:ac:e8:68:c0:f1:13:20:d3:12:f4:0e:96:c8:
8b:f2:bf:a5:6d:5f:a6:ec:41:14:42:25:e0:c1:2b:
77:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:CD:B1:EE:1A:37:55:14:5E:A0:37:02:9D:5F:FB:BA:B3:C3:B9:9F
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/kc2x7ho3VRReoDcCnV_7urPDuZ8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
00:44:d2:4c:9d:a5:58:62:94:7b:cc:8f:41:aa:4e:47:e8:8c:
82:5a:16:32:d5:18:cd:43:e1:5d:4b:bc:61:69:76:d2:cf:9d:
db:27:16:44:44:57:0f:24:8e:95:1b:1a:f0:61:ce:92:16:ff:
9e:98:21:b2:28:db:ef:f9:9a:54:df:02:04:08:d8:ff:64:dc:
5f:de:15:e2:c9:94:a9:97:32:c3:af:90:3e:e0:f2:9e:e5:ba:
71:0e:bb:70:ec:91:f8:a7:99:e9:8b:e4:70:10:7f:70:65:b8:
67:cc:73:f8:ff:dc:91:c0:44:b4:1f:e4:11:00:48:c4:50:c6:
4b:0e:cc:87:db:4c:22:53:a0:51:44:e6:9a:8a:73:b5:e8:b6:
e8:c1:5c:63:27:75:24:91:97:07:b3:2b:78:e9:83:51:7f:46:
77:2f:3f:9b:57:d1:2c:35:9d:43:f0:7f:ac:f1:9a:ff:10:3b:
f0:4b:f7:8d:ad:ac:16:11:17:de:8f:ff:0c:bc:63:ba:0e:f9:
eb:6b:99:df:a6:8e:82:07:f1:65:da:8f:db:04:a4:21:31:58:
4d:67:40:35:12:c9:89:0d:97:33:89:f3:3a:1f:38:27:6d:ab:
04:3a:2c:e8:06:69:a7:8f:b0:08:4d:4f:db:91:c9:b8:0f:e0:
17:cb:ee:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 05:51:24 2025 by rpki-client