Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/dZN7czhxte8UEUkiONTWtZmG54M.roa
File: dZN7czhxte8UEUkiONTWtZmG54M.roa (raw, json)
Hash identifier: DuGQZXZC/ZNH4E/rk5sh+mYI36Cpp5g5IujaUsQ5FTQ=
Subject key identifier: 75:93:7B:73:38:71:B5:EF:14:11:49:22:38:D4:D6:B5:99:86:E7:83
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 5FF4
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/dZN7czhxte8UEUkiONTWtZmG54M.roa
Signing time: Tue 13 May 2025 23:10:22 +0000
ROA not before: Tue 13 May 2025 23:10:22 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24564 (0x5ff4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 13 23:10:22 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=75937B733871B5EF1411492238D4D6B59986E783
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e4:d3:d6:ab:eb:99:5b:56:ae:24:be:29:a4:
81:5e:a5:07:81:ea:71:ec:59:e0:95:a5:2d:23:12:
1c:bc:4a:50:7d:3a:1e:0f:19:11:73:67:97:f5:f9:
1a:0d:b6:20:42:50:c7:91:11:dd:9b:5b:30:57:9d:
02:62:15:fe:b8:4d:9a:23:aa:17:3a:5d:e2:d0:25:
98:35:7a:6e:9e:13:b0:e1:2d:3c:4c:7d:a0:70:96:
f5:68:b3:61:07:0c:6f:a0:79:3d:bc:5b:7b:b3:05:
c3:19:0d:5d:59:df:8e:c0:75:4a:74:87:e7:10:fa:
73:2c:4a:d9:d1:31:68:45:15:ec:26:31:02:ed:5d:
33:79:bb:e1:fd:09:b6:d5:4b:83:84:11:09:2e:83:
da:56:41:f0:91:8d:a3:b0:56:f3:f7:f5:ea:3e:42:
5f:91:8b:ee:3e:3f:9a:40:17:3e:54:aa:69:d6:3c:
09:8c:49:bd:32:1e:4b:c0:6c:6f:67:13:91:49:b1:
35:c7:04:b9:a1:48:49:87:0d:25:30:96:e2:66:92:
5e:79:2b:38:23:7c:00:b3:9d:d1:72:ee:5d:28:df:
23:2a:75:b5:34:56:c0:57:3d:3a:26:c6:c5:e6:b0:
ca:d9:f8:7b:ce:56:52:65:5c:89:33:a5:a5:0a:df:
eb:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:93:7B:73:38:71:B5:EF:14:11:49:22:38:D4:D6:B5:99:86:E7:83
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/dZN7czhxte8UEUkiONTWtZmG54M.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
b0:74:b7:e3:e7:91:e7:53:6e:f1:84:6d:b1:45:fb:76:ad:17:
13:e6:01:62:01:8d:14:11:fe:09:dd:e9:a6:8e:a8:93:f2:22:
7a:3d:cf:e4:65:2d:2d:5f:6e:84:78:9d:97:bc:9a:7d:fd:5b:
be:58:fc:74:b5:47:da:96:19:79:86:bd:d9:5a:9e:1c:e5:70:
0f:d3:94:19:6a:a7:94:63:83:08:4c:0b:66:da:f5:83:47:bf:
c5:25:c3:07:67:01:ec:60:62:6b:26:f8:05:ee:18:05:26:7d:
ed:04:8e:3c:44:d8:f5:f1:2f:96:83:8c:c6:30:2c:26:8e:63:
ab:96:32:cc:73:f4:63:34:16:3c:78:14:32:8f:81:5e:9a:04:
93:06:d3:87:eb:ec:f5:26:d0:be:9a:b3:93:a9:b9:d0:45:af:
89:f6:df:68:c8:72:00:79:67:5c:80:56:3d:ad:41:91:4a:96:
19:dd:2a:cc:fc:6a:0c:6c:2d:6f:c2:4f:9e:a1:9b:cc:4e:61:
ea:25:ec:3f:e8:f5:84:08:cd:2d:f6:18:97:50:6e:8e:53:6f:
74:98:b6:7e:ad:d2:d1:08:de:dc:b6:bd:25:df:12:52:76:53:
50:82:9b:68:57:92:62:77:6f:8d:62:85:2f:3c:70:66:6f:6b:
11:d3:db:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 20:07:51 2025 by rpki-client