Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/WEDExPIrQXZ__kxq6WU7hNsQsRQ.roa
File: WEDExPIrQXZ__kxq6WU7hNsQsRQ.roa (raw, json)
Hash identifier: 9EVpviKxc1of6IefQyouHu/9/UUeRljTEVS+N5PrUSA=
Subject key identifier: 58:40:C4:C4:F2:2B:41:76:7F:FE:4C:6A:E9:65:3B:84:DB:10:B1:14
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 5F66
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/WEDExPIrQXZ__kxq6WU7hNsQsRQ.roa
Signing time: Mon 12 May 2025 11:40:20 +0000
ROA not before: Mon 12 May 2025 11:40:20 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24422 (0x5f66)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 12 11:40:20 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=5840C4C4F22B41767FFE4C6AE9653B84DB10B114
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:7b:86:b5:9e:99:cd:79:91:b4:bb:bf:cd:a5:
55:59:c0:21:77:9e:34:fa:f2:df:85:e2:4b:10:a6:
fb:9b:9a:0f:f5:66:b0:6c:5b:0f:cc:6f:cd:fa:7d:
6f:42:73:2c:65:b7:23:ce:05:02:72:60:2e:41:2f:
f0:15:33:91:cb:27:32:16:62:71:4f:5c:71:3b:ae:
28:8c:0a:64:83:7f:54:06:a9:31:04:02:59:67:05:
40:c8:0f:6f:6d:88:85:d3:f8:a7:b5:5b:ba:35:25:
65:39:b3:94:93:ee:ab:9c:f2:bc:36:3f:b1:73:e2:
9a:d0:f2:2c:d7:8f:ae:12:e9:40:73:1a:a4:c6:aa:
6c:8d:20:18:e2:d9:b2:39:81:29:ed:9c:dd:b3:04:
d8:1e:86:3f:1b:d5:7d:7f:23:11:33:27:7e:7e:c5:
46:a1:62:a7:08:31:fd:ce:fb:0d:13:e7:74:5f:12:
81:0c:91:99:3b:38:ac:38:3c:48:82:fd:ab:0f:7f:
28:b5:dc:97:a1:10:d0:20:6e:a1:96:9c:2d:1d:b4:
ec:50:11:33:95:cc:68:f7:fd:29:22:15:8d:ea:14:
1a:b6:83:88:67:e2:89:a1:ce:3e:c8:4c:14:3a:13:
4a:1c:5d:f1:ed:45:94:75:93:9c:5c:2a:41:d3:b5:
0a:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:40:C4:C4:F2:2B:41:76:7F:FE:4C:6A:E9:65:3B:84:DB:10:B1:14
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/WEDExPIrQXZ__kxq6WU7hNsQsRQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
53:db:6e:6d:0d:94:99:fe:86:10:36:65:28:5b:59:ef:87:ad:
56:58:9d:0b:cc:e8:b2:6f:84:01:80:6d:14:8a:7c:52:17:e0:
91:b7:2b:2e:61:9c:c2:66:fa:ff:5f:7f:ba:ee:aa:07:ee:30:
be:bd:4d:74:fc:3f:1e:c2:65:7d:52:85:15:a8:8a:b1:34:13:
bd:28:2d:ee:44:97:1b:7e:de:ba:3c:c5:af:bf:e7:1b:05:a4:
4c:45:e3:17:65:41:43:5e:06:09:75:fc:11:58:3f:14:ab:3e:
36:c4:d8:2c:e5:0d:27:b7:88:39:c7:32:74:da:89:20:ec:1b:
11:e5:b5:07:20:89:35:bf:d6:ad:ee:c7:37:09:ba:4b:b1:ce:
38:7f:43:62:d3:63:57:23:13:aa:2b:df:8e:0f:6f:a8:bb:9e:
73:13:f8:9d:ce:54:63:4d:5b:8c:f3:04:30:30:3c:8b:ef:8f:
64:03:ac:1d:10:46:de:26:82:7d:dc:36:a3:ea:df:23:77:6e:
a7:76:19:b4:90:ef:dc:c0:dd:e4:d1:35:8c:71:c8:cb:16:37:
31:c7:e4:11:c3:c1:89:9a:2b:37:7e:6d:58:7a:7a:30:0a:f1:
f3:5d:70:e6:a7:12:29:82:89:34:ec:36:19:78:dc:57:24:e7:
1f:84:c4:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 02:07:12 2025 by rpki-client