Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/-OiFYwNvqByqMHEbjBqETj6_L_A.roa
File: -OiFYwNvqByqMHEbjBqETj6_L_A.roa (raw, json)
Hash identifier: dola3dsQXTgISUp9x+g7RJKsExizyiY5Zi+854zKJ2s=
Subject key identifier: F8:E8:85:63:03:6F:A8:1C:AA:30:71:1B:8C:1A:84:4E:3E:BF:2F:F0
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 6934
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/-OiFYwNvqByqMHEbjBqETj6_L_A.roa
Signing time: Sat 07 Jun 2025 15:11:57 +0000
ROA not before: Sat 07 Jun 2025 15:11:57 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26932 (0x6934)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jun 7 15:11:57 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=F8E88563036FA81CAA30711B8C1A844E3EBF2FF0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:d3:64:1c:a4:34:fa:c2:d4:ef:0a:c5:92:d2:
83:ba:19:25:2c:e2:45:d2:f8:1e:aa:a3:5e:9f:2e:
5b:ac:ff:00:cb:40:bc:8e:47:9f:7e:e4:ca:aa:10:
32:f5:e0:90:a4:b7:ed:f9:0f:77:6e:05:64:79:7c:
7e:81:23:04:18:6c:c6:01:e1:5c:0a:96:f4:97:ae:
ed:03:c4:42:75:ff:87:09:9c:d2:cb:68:0a:79:88:
fd:36:9b:93:95:5a:83:f1:00:7f:a3:65:b5:26:41:
71:2f:43:3b:6c:49:84:17:0d:40:24:cf:99:17:c1:
9b:18:d4:e0:22:3d:c1:f9:2e:e5:76:3e:23:77:88:
54:cd:e5:07:90:da:d9:d2:25:52:82:38:3e:c0:81:
94:95:c5:19:eb:7d:33:75:56:20:fb:75:c5:34:23:
14:60:c7:49:01:b8:ea:3a:1d:d4:03:87:40:42:15:
74:19:df:29:40:71:9e:64:ae:cf:29:fd:9b:e4:69:
ef:16:6c:d9:fa:3b:88:4a:01:24:c3:b6:ef:de:0f:
69:07:fe:16:30:fe:b7:27:64:d9:96:0f:f5:2d:72:
b5:86:4f:b1:9b:e0:25:79:67:59:77:77:f6:d5:9b:
ec:75:86:ff:7f:59:0d:e5:fd:aa:1b:ff:8d:85:f1:
75:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:E8:85:63:03:6F:A8:1C:AA:30:71:1B:8C:1A:84:4E:3E:BF:2F:F0
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/-OiFYwNvqByqMHEbjBqETj6_L_A.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
78:35:59:34:01:e5:e5:36:4c:f1:71:d6:58:a3:7c:ce:a8:88:
ad:22:b5:fe:1d:54:1a:4f:92:5e:38:40:dc:f6:fa:c1:51:de:
cb:71:cb:5f:90:97:bb:02:8f:94:66:31:d4:18:4a:f7:80:dd:
48:6b:a6:de:29:94:49:b4:ec:ee:b8:a7:7c:a5:1c:68:bc:e8:
00:fd:1b:a0:71:a3:00:cf:d3:32:77:16:53:95:5b:19:61:5f:
dc:89:65:2c:6a:77:6f:5e:e3:c1:34:dd:02:13:eb:12:c3:71:
98:1f:28:7d:ed:4c:45:3b:a8:ab:71:6b:ae:bc:bb:b4:48:5d:
a4:2d:3a:9f:ff:4c:b7:b6:ef:e3:f7:1c:9b:86:66:3d:50:b0:
06:0a:05:09:22:4c:85:f6:8a:d5:50:f4:c2:65:98:c4:3b:49:
f1:e1:21:16:7e:bc:6f:e2:b5:27:95:1f:84:15:5f:be:78:76:
6b:8d:0f:7b:4c:6a:98:21:a2:e0:02:68:1c:39:af:e9:0b:13:
e1:e0:ad:bf:4c:83:27:7f:0c:f1:14:d4:7e:62:3e:68:ab:9b:
d7:46:b8:33:96:75:ef:5e:08:a5:ea:d1:29:3c:95:e6:c5:93:
90:d5:46:b6:22:b0:ae:7d:38:54:c7:5d:3b:3a:e0:53:1d:f2:
5d:62:53:a4
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgICaTQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNTA2MDcx
NTExNTdaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKEY4RTg4NTYzMDM2RkE4
MUNBQTMwNzExQjhDMUE4NDRFM0VCRjJGRjAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDu02QcpDT6wtTvCsWS0oO6GSUs4kXS+B6qo16fLlus/wDLQLyO
R59+5MqqEDL14JCkt+35D3duBWR5fH6BIwQYbMYB4VwKlvSXru0DxEJ1/4cJnNLL
aAp5iP02m5OVWoPxAH+jZbUmQXEvQztsSYQXDUAkz5kXwZsY1OAiPcH5LuV2PiN3
iFTN5QeQ2tnSJVKCOD7AgZSVxRnrfTN1ViD7dcU0IxRgx0kBuOo6HdQDh0BCFXQZ
3ylAcZ5krs8p/Zvkae8WbNn6O4hKASTDtu/eD2kH/hYw/rcnZNmWD/UtcrWGT7Gb
4CV5Z1l3d/bVm+x1hv9/WQ3l/aob/42F8XXTAgMBAAGjggI0MIICMDAdBgNVHQ4E
FgQU+OiFYwNvqByqMHEbjBqETj6/L/AwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3Ly1PaUZZd052cUJ5cU1I
RWJqQnFFVGo2X0xfQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwYgYIKwYBBQUHAQcBAf8EUzBRME8EAgABMEkD
BAIr7zADBAMr9gAwDAMEAiv2DAMEBCv2IDAMAwQCK/Y0AwQCK/ZgAwQCZyMwMAsD
AwJn7AMEA2fsEDAMAwQCZ+wcAwQCZ+xgMA0GCSqGSIb3DQEBCwUAA4IBAQB4NVk0
AeXlNkzxcdZYo3zOqIitIrX+HVQaT5JeOEDc9vrBUd7LcctfkJe7Ao+UZjHUGEr3
gN1Ia6beKZRJtOzuuKd8pRxovOgA/RugcaMAz9MydxZTlVsZYV/ciWUsandvXuPB
NN0CE+sSw3GYHyh97UxFO6ircWuuvLu0SF2kLTqf/0y3tu/j9xybhmY9ULAGCgUJ
IkyF9orVUPTCZZjEO0nx4SEWfrxv4rUnlR+EFV++eHZrjQ97TGqYIaLgAmgcOa/p
CxPh4K2/TIMnfwzxFNR+Yj5oq5vXRrgzlnXvXgil6tEpPJXmxZOQ1Ua2IrCufThU
x107OuBTHfJdYlOk
-----END CERTIFICATE-----
Generated at Sun Jun 22 02:19:34 2025 by rpki-client