Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/sr84AYX9x25F4dbc_GK04Tl1OG0.roa
File: sr84AYX9x25F4dbc_GK04Tl1OG0.roa (raw, json)
Hash identifier: 46H6yWe1Y3+ZoPIOvlAmYc3m3q9BmKsMFw6DZ/UTsL8=
Subject key identifier: B2:BF:38:01:85:FD:C7:6E:45:E1:D6:DC:FC:62:B4:E1:39:75:38:6D
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 68AC
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/sr84AYX9x25F4dbc_GK04Tl1OG0.roa
Signing time: Fri 06 Jun 2025 05:11:50 +0000
ROA not before: Fri 06 Jun 2025 05:11:50 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26796 (0x68ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jun 6 05:11:50 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=B2BF380185FDC76E45E1D6DCFC62B4E13975386D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:84:02:f6:a7:a8:82:dd:03:08:5d:16:cb:d3:
ba:41:a1:f6:5c:0a:e6:40:f5:c7:ab:56:0d:a3:ea:
89:fb:39:39:c8:85:78:dd:18:f9:d8:b9:5a:92:71:
c0:37:c4:11:d8:8f:6f:26:d8:0f:51:14:17:c4:42:
03:1b:16:dc:54:07:d8:f5:84:03:4b:1d:3d:40:51:
26:c6:1c:68:28:ac:8d:51:60:5e:5d:99:38:25:51:
81:a4:07:0f:aa:7f:10:ee:cf:c3:52:d8:a5:19:2e:
3c:f7:f6:1a:62:b3:c7:ea:a4:f3:d4:35:4b:11:51:
11:0a:9a:88:38:a7:bf:e5:8c:45:3f:dd:22:c7:6e:
06:06:92:cd:63:13:33:43:9b:5b:32:e9:73:d9:8e:
e3:3e:97:a4:58:ba:e7:92:20:ea:1e:6c:6d:fd:6c:
96:d0:c5:37:62:9b:dc:e5:8a:36:0a:9e:9b:b8:0f:
33:b9:9a:88:4a:92:2e:be:ed:d0:fe:93:14:d6:3e:
fa:6b:d7:98:39:49:49:3c:6b:81:1d:c3:b8:16:3a:
1e:63:62:99:0b:bd:22:d5:71:92:a3:77:8b:9b:64:
e1:c3:b2:6e:7a:4b:64:0f:96:91:af:11:16:51:37:
a2:46:62:ef:78:4e:27:92:e3:f0:d4:74:24:6c:eb:
19:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:BF:38:01:85:FD:C7:6E:45:E1:D6:DC:FC:62:B4:E1:39:75:38:6D
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/sr84AYX9x25F4dbc_GK04Tl1OG0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
41:6a:26:0f:3a:74:85:56:8b:1f:80:a4:30:9a:a0:cb:d5:a1:
c6:50:81:a8:b0:4e:6f:b1:3a:23:0e:e0:8b:33:84:75:bc:5b:
12:c9:9b:02:60:d4:bb:ad:5d:fe:e9:d9:b3:84:3e:a5:1b:c3:
4e:30:42:ac:35:ed:e9:9b:43:6b:9c:99:50:88:0b:b3:6e:14:
21:8b:45:7e:ad:fc:a6:b8:35:7d:b2:05:21:7f:2e:72:b1:2c:
d2:31:40:c0:0d:53:12:ef:b9:57:00:0f:c5:72:18:38:81:14:
f0:46:90:e4:ef:c9:35:73:3e:6d:a5:66:9a:b2:08:50:f4:3b:
df:34:dc:32:dc:08:42:43:2a:fe:63:54:48:c6:38:26:3c:c9:
c5:8e:d5:83:d4:9d:dc:b5:24:78:03:6d:96:92:f2:a6:14:a2:
9b:d9:bc:27:aa:4c:94:0e:d4:94:be:3c:23:33:f7:01:d5:39:
48:d0:c1:8f:ef:57:66:df:3b:81:04:2d:f4:0e:2d:7c:0c:bb:
c8:92:99:2e:e5:d0:71:95:98:ec:4c:8b:ed:68:6c:d2:bb:19:
3e:25:1b:b3:bf:5c:d0:24:8b:81:34:74:b2:a2:6d:aa:55:6a:
0d:0a:54:63:bb:9f:33:ce:02:36:1d:dd:65:64:29:ad:6a:f6:
e4:8b:76:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 14:59:55 2025 by rpki-client