Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/27eqcqCwxxWgowB8DwYIF5FFm8I.roa
File: 27eqcqCwxxWgowB8DwYIF5FFm8I.roa (raw, json)
Hash identifier: v5lp4TRrBeFEwljEbxV+edOpsxrrMcw3nBYwHGievA4=
Subject key identifier: DB:B7:AA:72:A0:B0:C7:15:A0:A3:00:7C:0F:06:08:17:91:45:9B:C2
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 7366
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/27eqcqCwxxWgowB8DwYIF5FFm8I.roa
Signing time: Sat 05 Jul 2025 01:16:19 +0000
ROA not before: Sat 05 Jul 2025 01:16:19 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29542 (0x7366)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jul 5 01:16:19 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=DBB7AA72A0B0C715A0A3007C0F06081791459BC2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:9e:9a:c9:f7:19:4c:c1:bd:34:62:fe:5f:5f:
e8:2d:9b:a0:88:84:1b:47:3b:c5:8a:66:9d:61:8d:
db:d2:70:5d:0f:d9:b9:1d:1b:17:61:77:b4:cd:47:
cb:6e:b6:fa:3b:b5:f5:17:d7:16:e2:1b:c2:d2:0c:
7b:a4:4d:9f:e4:be:00:b7:d1:19:88:eb:76:7a:12:
08:d1:00:5a:6b:b2:4c:0d:e3:b7:74:4e:65:1f:3b:
67:99:b0:56:7f:9f:4a:ca:1f:53:6b:51:29:28:04:
52:c7:b3:12:98:f8:0a:f7:cd:55:f2:67:6c:c0:a6:
7d:20:38:de:a8:df:e3:8f:94:ea:e5:1e:36:5e:f2:
67:d5:c5:2d:12:cc:28:af:3f:b3:94:c1:9b:ff:17:
c1:20:29:61:14:50:16:da:1f:35:07:72:af:c2:41:
0c:0c:74:78:ba:3c:cc:ba:fc:fb:83:26:f0:25:53:
e6:cb:12:01:bc:83:97:9f:76:4e:5d:a1:e5:62:8c:
0c:33:d2:49:0e:44:2e:9e:1d:96:12:d5:08:ef:c5:
24:08:75:06:c5:f0:39:6f:f7:98:4d:5a:de:71:9b:
49:91:ec:55:4c:4e:e7:67:30:32:2b:09:f9:1f:05:
dd:97:21:7d:6e:84:17:2c:76:13:dd:67:51:91:42:
75:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:B7:AA:72:A0:B0:C7:15:A0:A3:00:7C:0F:06:08:17:91:45:9B:C2
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/27eqcqCwxxWgowB8DwYIF5FFm8I.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
40:43:81:42:26:a3:54:39:e3:5e:de:74:64:c9:47:4d:48:39:
ac:e3:4a:8d:18:38:35:35:0d:94:5e:76:d1:3b:12:dd:03:e9:
aa:cc:1e:6b:22:c4:f0:fe:77:f9:ab:da:3e:dd:91:6a:7c:05:
6e:e3:47:58:bf:a3:54:3c:db:03:07:40:28:c7:ff:4a:7e:6a:
07:06:fd:32:12:9b:af:1a:40:b5:6b:c1:70:1a:4e:27:4a:5c:
c5:09:6f:bd:bc:9f:a2:25:ba:db:4a:16:67:e8:ae:2b:1f:28:
2b:9a:c7:a3:2e:52:e3:44:8a:74:c7:26:b2:7d:dd:87:7d:29:
10:54:5c:e6:f2:ee:e6:28:a2:b6:45:4d:96:63:ac:17:83:4f:
1b:4f:0f:80:a8:46:82:b0:86:96:a2:79:b0:8e:72:e2:5b:af:
b6:c7:80:d1:66:8f:49:f5:6b:41:9f:35:70:22:dd:39:82:92:
8e:61:f3:98:02:b3:3d:d6:2c:73:7b:21:c5:b2:4b:f9:1c:19:
c7:90:32:a7:e2:32:d6:de:4e:87:96:07:39:d7:ef:f0:7f:a8:
ea:f8:97:51:87:4c:ea:ed:6d:39:8f:60:5e:00:8b:99:50:b2:
da:5e:e1:c0:d9:e6:a4:8e:12:d8:5f:4c:45:5f:52:83:e6:6f:
c3:77:7e:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 06:05:00 2025 by rpki-client