Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/sJ0s8Z_oMdz-gLh9fjUPnN3VVrw.roa
File: sJ0s8Z_oMdz-gLh9fjUPnN3VVrw.roa (raw, json)
Hash identifier: 6uR9zGx7aKBEG/iQhkk+E0JhNOw+uNM6uyp31V2d3Fw=
Subject key identifier: B0:9D:2C:F1:9F:E8:31:DC:FE:80:B8:7D:7E:35:0F:9C:DD:D5:56:BC
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 6B22
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/sJ0s8Z_oMdz-gLh9fjUPnN3VVrw.roa
Signing time: Thu 12 Jun 2025 18:42:18 +0000
ROA not before: Thu 12 Jun 2025 18:42:18 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27426 (0x6b22)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jun 12 18:42:18 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=B09D2CF19FE831DCFE80B87D7E350F9CDDD556BC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:8f:c3:5a:f9:f7:5c:84:87:91:ac:e0:5a:5f:
a2:b2:98:0a:da:95:86:44:b5:4d:5c:d6:24:88:04:
6c:26:68:c0:65:f3:bb:c3:e4:4e:67:76:1e:95:c3:
d0:a7:47:ad:40:0e:d9:81:50:6e:02:fb:23:c8:9d:
3b:93:8c:f6:6a:5d:21:15:64:04:6c:9d:6d:ee:9e:
6a:e8:2c:92:f7:83:46:b5:0f:19:80:c4:ee:cf:c4:
70:11:29:93:d6:9f:19:0c:e4:69:53:48:82:c8:9a:
2e:e0:2a:6d:9d:ac:a3:18:59:50:fb:c4:ef:13:56:
5e:a3:be:02:eb:d9:df:79:a6:f8:a6:f9:78:f8:b1:
61:63:00:1c:93:5e:de:99:58:a2:d2:ed:39:9e:17:
ad:34:0c:21:bc:60:09:ee:28:f2:4e:5b:e9:d9:c2:
3c:e2:17:60:43:a5:47:1b:8d:e7:9d:c0:1e:2b:79:
b8:30:6c:31:2d:c4:c3:af:39:e2:35:e9:5a:70:f1:
c2:50:2e:99:47:52:2f:e4:3c:1f:3b:a8:83:1f:85:
c3:66:9d:9e:84:19:25:12:c6:65:f2:2d:b4:22:36:
37:9c:9f:bd:45:b4:f0:3b:98:08:db:6c:9a:38:5c:
94:de:1e:7c:3a:4e:46:70:cb:17:c8:94:d9:cb:65:
c0:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:9D:2C:F1:9F:E8:31:DC:FE:80:B8:7D:7E:35:0F:9C:DD:D5:56:BC
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/sJ0s8Z_oMdz-gLh9fjUPnN3VVrw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
a7:91:9e:c4:c6:c0:c9:64:bd:e8:89:77:a2:52:91:6a:ce:e7:
85:d6:db:f4:ff:38:ef:b4:8a:2c:93:69:5f:ba:2f:45:8e:51:
5e:79:40:80:01:a2:cc:aa:fb:77:83:fc:ae:9f:77:75:27:f1:
9b:6c:72:d6:48:7a:2b:ec:90:f9:92:fc:b7:cf:0d:fc:e1:56:
9c:fc:33:de:16:b6:9e:8d:9d:73:ce:a1:7d:b8:b8:bb:46:2f:
5e:2d:3c:43:21:b1:e5:66:15:fb:bf:4d:ac:7c:f1:95:ea:f0:
e3:bc:ad:5e:ba:1a:e1:75:3c:9d:ae:d2:0d:9b:b2:fc:d0:2a:
32:9a:9b:23:0c:0e:82:ba:89:78:73:3b:28:65:59:33:17:5e:
ca:6f:bb:2e:0f:54:23:e9:f6:d5:df:59:21:0c:06:e9:4e:27:
81:39:27:4a:58:19:33:d5:e2:70:66:81:16:81:26:e7:39:b8:
23:32:17:a8:82:29:90:8d:a8:58:1b:ed:ef:78:1a:c6:1d:f4:
31:d2:d8:75:f7:40:6e:ed:d3:9d:2c:36:ed:8b:75:0b:2b:c5:
93:4e:48:40:9a:c7:ac:33:d3:aa:b6:31:cc:09:3d:e6:1d:a9:
bf:83:e5:33:c4:f8:d2:61:b0:82:8d:5e:05:f1:4d:4f:af:51:
dd:7c:72:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 08:30:39 2025 by rpki-client