Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/wm0IQaoOdJC9gwbsFoBte2xs0-0.roa
File: wm0IQaoOdJC9gwbsFoBte2xs0-0.roa (raw, json)
Hash identifier: UFDwuDR5HGzt2JqM8US2rslHwIVG4Ne82/zQ7qwbqZk=
Subject key identifier: C2:6D:08:41:AA:0E:74:90:BD:83:06:EC:16:80:6D:7B:6C:6C:D3:ED
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 667E
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/wm0IQaoOdJC9gwbsFoBte2xs0-0.roa
Signing time: Sat 31 May 2025 09:41:29 +0000
ROA not before: Sat 31 May 2025 09:41:29 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26238 (0x667e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 31 09:41:29 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=C26D0841AA0E7490BD8306EC16806D7B6C6CD3ED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:79:ef:d5:44:d4:f4:5c:bd:d7:01:b9:12:ab:
a9:8a:6f:b6:61:28:45:2d:36:8f:2a:4f:53:c2:33:
57:f5:19:e4:d8:8f:b7:ff:ef:6b:51:f8:87:37:86:
83:6f:77:eb:4e:62:4e:14:d6:ac:4a:9a:16:7b:df:
6f:86:90:d5:d5:97:80:2b:e2:75:59:27:0d:7e:2d:
43:b5:1c:7b:60:82:4f:c6:9e:71:ba:40:dc:4a:0f:
77:c8:2a:64:11:7b:8d:8d:7d:8f:c9:59:25:8b:8d:
42:ad:69:9a:d6:16:1f:e4:3e:53:45:7e:52:12:c2:
b8:62:e5:0c:22:de:82:62:f4:5d:5c:3d:b3:ef:83:
95:94:10:0b:03:d9:57:dd:dc:f5:8f:b6:16:ca:c1:
97:44:24:09:d0:81:97:6d:aa:9c:81:3a:de:2c:2b:
8c:c6:24:b0:e8:9c:56:12:84:d9:d7:7f:5b:39:6c:
e2:ef:d7:97:c5:5e:62:8b:f3:1e:83:03:d9:34:de:
04:d8:af:2f:aa:c7:a8:7b:ad:c6:12:91:7d:e6:89:
8a:62:70:bd:56:1b:45:bb:c7:95:d0:90:bf:20:4b:
86:02:4f:b4:47:a2:e6:dd:76:97:85:e3:bf:27:3f:
ea:cb:41:fa:bd:e8:64:d5:47:0f:82:26:9e:01:4f:
e1:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:6D:08:41:AA:0E:74:90:BD:83:06:EC:16:80:6D:7B:6C:6C:D3:ED
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/wm0IQaoOdJC9gwbsFoBte2xs0-0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
a4:9b:77:d3:97:4f:4e:27:ce:c0:10:e5:9f:d9:a2:85:75:c4:
42:bf:61:25:07:c8:d6:13:3f:4e:c0:af:17:10:84:af:7b:cf:
14:75:e5:cf:a8:55:cf:10:0a:36:26:58:44:30:cd:45:2d:ce:
8d:4f:5b:17:d6:d7:e9:ff:ea:aa:5b:41:4b:82:bf:80:57:60:
33:c4:fe:d4:7d:d0:0d:f9:c9:00:42:9b:73:1c:e6:76:bc:35:
f0:fd:93:10:f4:41:f6:17:69:b7:be:f6:78:c0:29:20:79:45:
de:58:77:b6:83:bf:8f:76:dd:96:19:e9:ba:74:2f:34:27:83:
d6:4d:22:59:cd:f1:65:ac:03:64:23:de:c9:22:9b:63:be:fd:
59:47:2f:ea:4f:3b:77:ce:18:9f:bd:97:ca:79:53:a4:45:c7:
75:25:d3:42:6b:bb:6e:75:cb:e7:8d:cf:de:23:b1:8f:36:4a:
eb:79:0c:61:3a:bd:a1:04:58:50:61:b9:b0:c3:e3:72:42:f8:
49:b1:4f:ed:d2:b7:7f:38:f5:d9:5e:16:71:1a:e6:fc:ff:43:
12:ce:03:08:a4:41:b1:53:c3:3e:4e:09:ed:57:b4:97:c5:53:
65:85:1d:eb:bd:52:1f:32:60:49:1c:9c:54:d7:08:08:c9:03:
28:d4:39:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 03:37:00 2025 by rpki-client