Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/qpcgEktFXBmvJ9LsAuw9fgUYBvg.roa
File: qpcgEktFXBmvJ9LsAuw9fgUYBvg.roa (raw, json)
Hash identifier: erC8k8tXWCz/qBjp2iMg5aXDucZkugFFUiuYXFKJ71U=
Subject key identifier: AA:97:20:12:4B:45:5C:19:AF:27:D2:EC:02:EC:3D:7E:05:18:06:F8
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 6A24
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/qpcgEktFXBmvJ9LsAuw9fgUYBvg.roa
Signing time: Tue 10 Jun 2025 03:14:27 +0000
ROA not before: Tue 10 Jun 2025 03:14:27 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27172 (0x6a24)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jun 10 03:14:27 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=AA9720124B455C19AF27D2EC02EC3D7E051806F8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:43:15:f0:fe:45:25:08:aa:df:1b:c6:b8:e1:
4c:13:2b:2c:6f:e2:69:36:16:68:3b:f2:e2:60:01:
f4:10:44:a4:b4:07:62:96:67:72:3f:29:6d:39:77:
52:a3:0a:51:1e:08:07:09:00:d2:da:bc:b0:61:0e:
d6:a1:33:f7:c2:1f:50:7c:f8:60:96:0b:3c:8c:82:
b5:db:23:42:9d:37:03:3d:71:2f:d5:80:68:c4:0c:
76:ca:b5:3c:3b:86:d6:1c:e9:f1:ce:26:c8:5a:76:
a9:41:a6:ec:1a:f3:46:ec:ba:ed:50:ef:55:c0:cf:
6b:c1:f8:44:8f:4d:27:f0:43:ac:fe:ec:ff:9a:4e:
c2:24:2a:65:9c:14:84:c0:3e:6f:53:c6:e3:d4:26:
04:19:e5:7c:54:de:f7:c1:33:cf:33:23:7e:fd:55:
ef:b8:a5:7c:9f:36:ec:55:49:83:66:6c:0b:d0:a6:
a9:16:61:65:fb:15:0a:02:07:a7:53:fa:45:21:fe:
f4:47:60:0d:9f:b2:2f:aa:25:ce:77:04:01:32:94:
bd:9e:cf:00:35:7a:dd:06:26:cb:c1:64:b0:ac:32:
53:91:18:ec:49:7a:b5:06:b7:67:e2:82:58:25:32:
8c:99:8d:20:ce:b4:02:d6:d5:1d:2e:6c:ca:95:d2:
a0:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:97:20:12:4B:45:5C:19:AF:27:D2:EC:02:EC:3D:7E:05:18:06:F8
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/qpcgEktFXBmvJ9LsAuw9fgUYBvg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
b1:02:f1:01:47:84:ef:68:e5:46:26:8e:c7:48:44:b9:5c:54:
8c:42:0e:c8:db:36:2d:3f:87:f7:e3:b1:ed:07:af:dc:89:49:
ff:11:5e:0c:93:bb:f5:a2:b9:20:06:5d:44:11:c6:5d:d3:bb:
6b:82:ad:27:1d:6d:01:3d:2f:74:59:c8:43:60:d0:04:ef:69:
56:3c:39:07:4b:55:96:a1:23:c8:5c:31:8c:ad:ce:a5:4a:28:
c3:14:61:56:e9:bf:fe:de:96:0e:a4:d1:d8:e6:9c:3d:59:75:
62:d6:aa:07:f3:41:39:e7:5a:47:bb:82:29:4a:7f:4f:4e:1b:
e9:91:af:f1:ce:c0:65:05:86:19:49:02:ee:3d:45:07:b1:e1:
7e:80:22:64:3d:4d:f1:08:a5:37:f8:ff:25:5d:7d:01:e2:66:
c1:24:94:28:96:a8:c6:29:e9:19:b3:12:50:aa:9b:c8:08:2a:
0b:7c:e5:97:e0:75:8a:9a:1e:20:87:02:2b:d3:f4:f9:be:96:
10:eb:90:70:cf:e1:28:40:f4:5f:8f:8a:de:8c:47:e1:9e:3d:
7a:b6:8e:8d:ea:8d:11:3a:6e:22:96:6c:ca:54:75:16:09:a6:
00:ee:34:57:8b:cf:98:60:63:5a:16:49:15:29:8b:50:81:11:
df:2c:97:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 01:05:55 2025 by rpki-client