Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/O0NYvoz8Shg6zVwFcjM3drwpE-g.roa
File: O0NYvoz8Shg6zVwFcjM3drwpE-g.roa (raw, json)
Hash identifier: CqSoAOXumkdqrVg0BdB/8spI48ftojCg/73FVCK9oAY=
Subject key identifier: 3B:43:58:BE:8C:FC:4A:18:3A:CD:5C:05:72:33:37:76:BC:29:13:E8
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 683C
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/O0NYvoz8Shg6zVwFcjM3drwpE-g.roa
Signing time: Thu 05 Jun 2025 01:12:00 +0000
ROA not before: Thu 05 Jun 2025 01:12:00 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26684 (0x683c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jun 5 01:12:00 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=3B4358BE8CFC4A183ACD5C0572333776BC2913E8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:1e:85:7b:00:14:c6:72:d0:ea:1e:ae:44:28:
e9:15:63:58:f2:5b:62:6b:28:41:6d:8f:c9:5a:0d:
62:1c:4b:9b:5d:56:1b:67:5b:d5:0d:be:62:91:09:
a7:bd:c3:3c:54:4f:5a:32:d7:f2:fe:68:09:a0:cd:
bb:67:fe:d8:af:3f:b2:53:b5:0b:29:97:9d:04:95:
a9:29:db:bf:fc:e6:a6:3e:52:51:00:ec:08:1d:0c:
1e:81:f3:48:9d:b7:f7:dc:f5:3e:7a:1e:03:e9:36:
ec:b9:55:f9:6f:81:2d:f8:6c:e2:00:c0:da:7a:6b:
88:d1:fe:60:5e:0f:fb:ce:55:9f:3d:a6:c5:e0:45:
67:c9:15:2b:4d:de:a3:3f:13:5f:25:53:19:d6:0f:
76:77:3e:9e:ff:3b:d6:28:9f:61:4c:c7:0a:b3:ea:
12:9f:42:f3:56:59:5d:67:20:84:6c:05:b7:70:8e:
04:cc:72:a7:08:8c:fc:d3:d5:49:40:49:e0:b7:ee:
8e:b3:b6:ca:ae:03:99:66:b3:2c:3d:20:d1:74:c8:
d3:1a:12:fb:31:63:56:c7:43:65:5a:9d:f3:fe:e0:
de:6c:c5:b5:86:3e:3b:94:dd:c5:69:0b:c2:79:5a:
36:cd:da:03:23:f9:de:d9:9f:8b:ef:01:e4:60:b9:
2a:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:43:58:BE:8C:FC:4A:18:3A:CD:5C:05:72:33:37:76:BC:29:13:E8
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/O0NYvoz8Shg6zVwFcjM3drwpE-g.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
b4:70:fb:3b:5c:bf:c1:d8:55:2d:fc:b8:6f:3e:0e:3e:6b:ee:
85:86:67:0b:3c:ff:58:06:07:d8:13:aa:54:87:a2:9f:a5:be:
31:19:48:ff:d4:01:a1:bd:83:d8:1e:1b:e0:35:c1:58:81:08:
d1:84:22:cf:eb:13:5a:6b:7a:01:c1:ef:78:41:53:75:95:26:
04:ce:ea:b1:87:05:59:96:ed:18:f3:b4:8e:64:db:5c:35:2f:
8a:79:fc:b0:b8:fa:f4:ef:5a:89:e9:4c:a9:09:fb:7e:b0:9b:
0f:a4:e0:55:01:58:8b:70:42:9a:33:19:d0:02:8c:0e:31:01:
f8:7a:56:4f:d3:84:ab:59:5a:e1:db:b9:35:71:13:e3:5f:ed:
6b:5c:f7:b2:dd:c8:62:8e:b6:18:2a:03:b8:ab:ff:5b:66:0c:
12:ee:a8:bd:a6:f4:dc:72:6d:be:c2:e3:c7:8b:18:69:bc:55:
2c:a1:0b:83:aa:d5:a9:95:ec:42:74:72:f3:e4:7c:78:03:b4:
52:99:41:c2:b8:ca:56:de:6d:f0:82:35:81:d6:02:2c:db:e9:
a6:43:2d:eb:6f:44:f4:64:fe:73:3e:ed:0f:45:bf:3b:e0:42:
69:b5:87:40:c3:de:25:9c:2b:8f:50:a7:88:69:3c:12:8d:ce:
66:84:bd:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 03:11:53 2025 by rpki-client