Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/qcoV1W3MOA7k72J5nGTSF7Ab3AE.roa
File: qcoV1W3MOA7k72J5nGTSF7Ab3AE.roa (raw, json)
Hash identifier: PyWtLLk4CiaXCTXIC8+KnAjQxOZhHQizD3YekxSMa78=
Subject key identifier: A9:CA:15:D5:6D:CC:38:0E:E4:EF:62:79:9C:64:D2:17:B0:1B:DC:01
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 64B8
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/qcoV1W3MOA7k72J5nGTSF7Ab3AE.roa
Signing time: Mon 26 May 2025 16:11:26 +0000
ROA not before: Mon 26 May 2025 16:11:26 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25784 (0x64b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 26 16:11:26 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=A9CA15D56DCC380EE4EF62799C64D217B01BDC01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:7e:e8:12:73:cc:8a:7b:ee:f6:e5:d9:d7:2c:
15:e5:35:31:77:b7:24:d0:d0:ce:32:df:c4:33:f5:
e8:b4:f5:eb:53:cb:c9:38:5d:6d:fb:f5:31:61:dc:
0b:2e:6b:b3:8b:d4:df:d6:be:e4:7e:fd:76:6b:78:
65:48:88:93:1a:b1:eb:de:a5:29:d6:af:05:ee:52:
fd:7a:c0:54:98:ee:d8:7e:ae:77:9a:d5:3a:c0:bf:
28:b6:ee:bf:ee:74:98:f4:be:f4:6b:e3:79:43:54:
01:fb:f7:3b:be:4c:c2:e5:f5:61:f5:4e:3e:c1:b2:
84:d9:5d:61:3a:0e:9f:0e:ab:b4:d6:60:9f:a2:02:
b0:5e:6e:64:a3:68:84:24:77:a4:f3:28:60:bf:91:
09:02:c0:99:9b:09:51:ee:ab:b2:3a:4d:04:19:70:
f5:61:d0:c6:a0:fc:f6:38:a3:15:c4:bb:a9:dd:3d:
90:2e:a1:c6:cc:94:a4:13:4a:a9:33:22:1b:82:9d:
a9:1d:7c:34:a0:e2:ab:5a:ba:d8:84:a2:2c:c5:46:
0d:91:52:02:71:92:94:83:6b:36:69:9c:d5:ab:4e:
df:d7:20:df:7f:c2:e2:94:39:d0:9a:e9:36:81:c2:
a7:7c:7c:b6:b7:71:17:69:c3:1f:e3:a8:04:d1:61:
0e:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:CA:15:D5:6D:CC:38:0E:E4:EF:62:79:9C:64:D2:17:B0:1B:DC:01
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/qcoV1W3MOA7k72J5nGTSF7Ab3AE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
40:2e:8b:4a:77:8d:15:c6:df:e5:ec:0b:1d:6a:ab:d7:d7:d9:
51:85:4a:bc:2d:98:8c:44:0e:6b:2a:49:6b:a8:53:42:7b:d1:
0f:cb:53:df:54:5a:a2:1c:7c:1e:b7:b8:7e:18:d6:ef:cd:25:
26:ec:31:c1:40:bb:c0:a2:98:ee:89:2c:23:73:97:05:33:f0:
33:ef:8a:4b:bd:f7:95:17:35:08:6a:cf:4d:a6:a0:33:c0:4e:
93:f8:43:0b:d3:f3:24:08:d8:5a:85:27:e0:79:1e:a3:4d:3a:
4f:93:84:a7:f2:2e:46:f2:e9:18:82:f9:5c:6d:e2:6f:ee:9d:
c7:0d:6e:a0:ad:79:e3:9f:3d:85:ce:77:b7:5c:7a:a5:d2:45:
ba:ca:4b:51:63:b9:c0:e2:c0:35:45:8b:45:81:ec:8a:a6:b7:
75:0c:c2:d0:dd:de:19:c5:72:85:41:0c:b0:dc:90:52:bc:0d:
d2:18:e1:5f:a4:f7:8a:b0:94:0c:d2:d8:a1:19:a6:2b:2e:c8:
e0:12:68:95:fd:17:9b:18:f9:3c:5b:05:40:54:95:07:f8:ae:
37:9a:25:35:af:ba:95:66:b6:65:6b:94:c5:e9:39:1d:08:55:
16:59:b1:6c:d1:83:f1:53:07:e6:f2:b5:df:b0:7b:8a:63:7d:
57:48:62:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 02:20:43 2025 by rpki-client