Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/Uvc-EHqwMj3brj3urznysBG0FJo.roa
File: Uvc-EHqwMj3brj3urznysBG0FJo.roa (raw, json)
Hash identifier: XpB5Qg/YZGLcXMH3EnEng93dqSkQSjSn+3RerL3O8m8=
Subject key identifier: 52:F7:3E:10:7A:B0:32:3D:DB:AE:3D:EE:AF:39:F2:B0:11:B4:14:9A
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 5F74
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/Uvc-EHqwMj3brj3urznysBG0FJo.roa
Signing time: Mon 12 May 2025 15:13:35 +0000
ROA not before: Mon 12 May 2025 15:13:35 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24436 (0x5f74)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 12 15:13:35 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=52F73E107AB0323DDBAE3DEEAF39F2B011B4149A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:be:05:72:e3:34:48:27:e5:75:87:43:3e:45:
43:d0:cb:37:b0:79:53:c3:3c:f4:fc:5f:fe:4a:00:
b5:1b:66:49:6c:b1:dc:0f:54:56:44:a7:56:8a:ae:
02:df:f6:a0:9e:7e:cf:04:6a:64:ec:70:5b:66:24:
ca:81:a5:bb:b5:0d:75:b4:44:76:cd:78:6d:5a:0d:
e7:44:47:0b:3a:42:68:ab:04:f9:61:9c:ab:ca:64:
68:36:b3:cf:5f:94:c3:bc:f3:37:03:3f:a7:63:c1:
a2:1c:9d:de:c0:3f:a6:9a:17:1f:b4:14:bc:92:95:
85:dd:2d:b9:92:a2:6e:42:62:1c:3d:8b:83:a7:64:
ed:d1:df:8d:b9:c3:6a:3a:85:4a:64:43:d7:62:33:
55:5d:d9:06:b5:45:39:13:18:35:69:c8:c9:86:61:
be:33:b1:68:73:f3:4e:00:dd:0f:db:a2:b6:f9:7a:
e1:f2:16:65:72:80:81:10:ff:71:63:a2:3c:42:57:
52:4d:07:7e:3a:92:94:f6:31:7f:e6:32:39:af:b9:
23:15:53:ff:1e:60:a4:9b:a6:17:4c:d9:90:45:a9:
7a:94:1f:10:cb:91:af:7b:ef:eb:cb:64:8b:55:8b:
6d:3e:df:eb:95:73:cb:a0:43:dc:bd:77:2e:68:52:
0e:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:F7:3E:10:7A:B0:32:3D:DB:AE:3D:EE:AF:39:F2:B0:11:B4:14:9A
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/Uvc-EHqwMj3brj3urznysBG0FJo.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
51:2a:c4:48:9b:68:68:4a:fe:da:fb:f0:11:c0:a7:d4:30:a4:
0d:15:7c:7f:34:f6:fb:7f:48:84:ed:d4:76:14:75:cd:ae:9a:
94:e2:37:b4:d4:00:0c:25:a7:0b:d7:25:bb:33:93:38:e7:7e:
2b:2d:ed:61:b8:e2:29:92:16:c8:ed:b0:ac:d9:39:cd:42:cb:
6f:07:3e:78:99:56:ae:d3:38:47:87:1d:b6:e2:06:fd:6a:73:
2e:f7:34:8a:4f:97:64:d1:c0:c5:c5:35:a4:68:1f:44:1c:ac:
88:56:87:2a:80:ae:7c:70:8f:f7:d8:ec:02:ac:b7:52:7f:f1:
01:4e:95:40:6a:b8:0f:63:be:44:67:4c:62:b4:5c:0f:62:32:
53:dc:ed:47:9c:e7:68:24:6a:c0:68:06:db:06:69:b4:25:92:
16:9b:4c:2c:d3:ad:0f:8c:28:76:fb:46:03:12:07:25:9c:c6:
f5:e4:a2:cf:a3:a6:10:7f:22:28:f6:0a:5c:3f:f2:15:9c:0b:
ed:4f:3e:90:df:37:61:5b:d9:74:27:7c:2b:26:a1:a5:97:29:
03:72:3a:62:d7:9b:44:cc:8a:4c:e7:05:87:ba:a8:4e:61:d2:
76:14:d3:e7:7c:b7:0e:c4:17:8e:e1:f1:76:c4:58:30:08:47:
4d:a0:1e:de
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgICX3QwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNTA1MTIx
NTEzMzVaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDUyRjczRTEwN0FCMDMy
M0REQkFFM0RFRUFGMzlGMkIwMTFCNDE0OUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCrvgVy4zRIJ+V1h0M+RUPQyzeweVPDPPT8X/5KALUbZklssdwP
VFZEp1aKrgLf9qCefs8EamTscFtmJMqBpbu1DXW0RHbNeG1aDedERws6QmirBPlh
nKvKZGg2s89flMO88zcDP6djwaIcnd7AP6aaFx+0FLySlYXdLbmSom5CYhw9i4On
ZO3R3425w2o6hUpkQ9diM1Vd2Qa1RTkTGDVpyMmGYb4zsWhz804A3Q/borb5euHy
FmVygIEQ/3FjojxCV1JNB346kpT2MX/mMjmvuSMVU/8eYKSbphdM2ZBFqXqUHxDL
ka977+vLZItVi20+3+uVc8ugQ9y9dy5oUg6HAgMBAAGjggI0MIICMDAdBgNVHQ4E
FgQUUvc+EHqwMj3brj3urznysBG0FJowHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L1V2Yy1FSHF3TWozYnJq
M3Vyem55c0JHMEZKby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwYgYIKwYBBQUHAQcBAf8EUzBRME8EAgABMEkD
BAIr7zADBAMr9gAwDAMEAiv2DAMEBCv2IDAMAwQCK/Y0AwQCK/ZgAwQCZyMwMAsD
AwJn7AMEA2fsEDAMAwQCZ+wcAwQCZ+xgMA0GCSqGSIb3DQEBCwUAA4IBAQBRKsRI
m2hoSv7a+/ARwKfUMKQNFXx/NPb7f0iE7dR2FHXNrpqU4je01AAMJacL1yW7M5M4
534rLe1huOIpkhbI7bCs2TnNQstvBz54mVau0zhHhx224gb9anMu9zSKT5dk0cDF
xTWkaB9EHKyIVocqgK58cI/32OwCrLdSf/EBTpVAargPY75EZ0xitFwPYjJT3O1H
nOdoJGrAaAbbBmm0JZIWm0ws060PjCh2+0YDEgclnMb15KLPo6YQfyIo9gpcP/IV
nAvtTz6Q3zdhW9l0J3wrJqGllykDcjpi15tEzIpM5wWHuqhOYdJ2FNPnfLcOxBeO
4fF2xFgwCEdNoB7e
-----END CERTIFICATE-----
Generated at Sun Jun 22 02:14:25 2025 by rpki-client