Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/UN0MM8nJI5oafFcGtcR_-ojY3VQ.roa
File: UN0MM8nJI5oafFcGtcR_-ojY3VQ.roa (raw, json)
Hash identifier: Xj09K78cFcH6gd2bxvl+I4geELJt1S+755gCAMMBH2Q=
Subject key identifier: 50:DD:0C:33:C9:C9:23:9A:1A:7C:57:06:B5:C4:7F:FA:88:D8:DD:54
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 60B8
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/UN0MM8nJI5oafFcGtcR_-ojY3VQ.roa
Signing time: Fri 16 May 2025 00:10:26 +0000
ROA not before: Fri 16 May 2025 00:10:26 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24760 (0x60b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 16 00:10:26 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=50DD0C33C9C9239A1A7C5706B5C47FFA88D8DD54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:1b:34:0c:a4:79:1a:37:04:61:3d:ed:64:b3:
a9:20:c9:90:40:ea:fa:1f:b0:c0:8f:f8:34:c6:08:
47:a6:43:e4:fa:1e:a0:7b:7c:3e:16:66:99:81:d8:
ca:33:29:9e:02:a5:b7:7b:66:b0:44:9f:4b:3b:3a:
b3:a9:43:85:c7:9f:35:fc:c1:1e:f0:4f:5c:82:73:
08:d6:6c:2c:eb:8b:46:fb:1d:7e:ee:9d:3b:3f:58:
08:fe:70:84:04:53:84:fb:37:eb:c3:e4:a8:80:e5:
37:59:d0:d1:92:f9:2f:68:3d:2e:21:3f:99:eb:fe:
ba:2a:3e:06:1b:7a:6b:79:6d:16:f2:ab:6a:05:77:
05:8d:ea:c2:ac:6c:2b:26:71:ff:35:9f:30:d8:d3:
7c:6b:25:c4:37:e8:d8:32:4c:0d:3c:1e:10:96:7b:
47:98:c9:17:b6:b1:c3:fe:62:a3:80:d8:8a:cb:8f:
bb:7e:75:a2:b2:a7:94:8f:a8:5a:b8:da:cd:f3:a8:
87:ec:ce:7a:b3:c9:80:96:95:c2:e1:12:a9:92:09:
94:59:46:00:44:b3:34:e8:94:26:8a:29:40:d0:4f:
fe:0c:44:89:44:58:9a:2c:0d:8e:94:de:8b:32:ff:
e1:e2:ab:39:d5:21:36:0b:ec:64:2c:f1:a6:9d:ae:
52:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:DD:0C:33:C9:C9:23:9A:1A:7C:57:06:B5:C4:7F:FA:88:D8:DD:54
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/UN0MM8nJI5oafFcGtcR_-ojY3VQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
34:a3:72:a7:cb:65:ef:95:d2:96:e2:c7:e4:86:a5:45:ec:db:
3f:f4:85:55:49:e5:0e:35:f6:61:4f:95:c9:b2:d0:83:d3:9a:
76:1b:10:0a:a7:64:e1:5a:0d:61:9b:c9:09:2a:a7:35:c8:ce:
b4:55:33:ce:72:2d:46:15:79:79:3f:d5:48:cc:da:b4:73:d7:
80:14:80:a8:d7:be:4a:20:dd:4e:78:2c:c8:1f:9e:e2:54:39:
c8:c2:42:40:34:8f:17:b7:48:63:f1:6a:0e:31:7e:55:82:32:
05:57:77:ec:32:bf:0d:14:f7:b4:6d:2b:f3:9d:9c:24:bc:60:
17:52:0b:31:de:ec:68:fd:2f:bd:5e:bf:27:0d:a2:b6:60:04:
8c:68:36:60:35:32:a4:b9:14:01:24:13:f9:46:97:7f:5a:f7:
d8:cb:a9:91:68:2a:f7:cf:cb:bb:71:7f:64:b8:05:9d:64:84:
70:f8:6d:80:f5:2a:59:f0:9f:9a:e8:1c:be:71:c6:04:35:35:
48:11:6b:3f:a6:66:e3:77:74:01:e8:8d:cc:be:66:75:32:7a:
31:ef:be:3d:b7:b1:b2:52:8d:30:66:1e:7a:4a:3b:81:e9:8b:
6d:89:22:19:ef:d1:28:62:3e:90:3c:a5:99:3e:8b:c5:5f:fe:
08:77:3c:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 16:03:21 2025 by rpki-client