Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/fY1u6ykBM9uhQqY3C1IUWE0MrT4.roa
File: fY1u6ykBM9uhQqY3C1IUWE0MrT4.roa (raw, json)
Hash identifier: anuvvRlhV+Unn6+GWga0UEjZSE8sgAQCsHbub2yXvBU=
Subject key identifier: 7D:8D:6E:EB:29:01:33:DB:A1:42:A6:37:0B:52:14:58:4D:0C:AD:3E
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 5F8C
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/fY1u6ykBM9uhQqY3C1IUWE0MrT4.roa
Signing time: Mon 12 May 2025 21:10:18 +0000
ROA not before: Mon 12 May 2025 21:10:18 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24460 (0x5f8c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 12 21:10:18 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=7D8D6EEB290133DBA142A6370B5214584D0CAD3E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:50:07:99:1e:6d:bc:7f:57:a2:6e:34:dc:dc:
38:93:48:b9:d1:54:95:1e:a4:97:6b:b6:a3:2b:04:
63:b3:c1:f7:5b:86:43:f5:7a:58:2d:6f:6f:b8:d3:
ef:f1:50:be:a9:74:b3:c7:33:2e:b5:8a:48:ea:47:
fa:6a:43:b8:6a:38:2c:2c:fa:48:6c:d4:f9:2c:54:
e8:da:15:da:77:40:16:be:8e:bb:c5:b5:c5:ef:b6:
1d:9e:19:01:fa:e1:ea:71:21:f6:24:8e:77:2c:82:
04:6a:8b:0b:16:13:6a:c3:17:bb:17:48:0b:66:7b:
e5:7a:0e:ca:d4:b5:3c:6c:95:ee:52:50:7f:ef:f9:
19:f1:6d:d9:0d:94:30:ec:f5:cd:99:31:6f:37:74:
8c:5c:9e:f9:c2:2a:13:63:ac:37:fd:90:5a:27:11:
46:c9:b4:23:48:52:f2:38:14:92:e0:ef:57:cb:78:
9f:15:1d:87:3a:8c:2f:a0:dd:1d:f6:a8:4e:2a:e1:
da:5d:15:29:de:10:1c:0a:29:ad:77:34:64:38:a7:
14:c9:e1:5c:f3:f3:e1:6a:53:fa:d6:0b:52:09:49:
2f:9f:83:dc:db:ad:b2:95:0e:02:57:a3:01:13:07:
46:e4:8b:73:89:c7:57:7b:4f:c5:e8:c5:0d:13:7b:
cb:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:8D:6E:EB:29:01:33:DB:A1:42:A6:37:0B:52:14:58:4D:0C:AD:3E
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/fY1u6ykBM9uhQqY3C1IUWE0MrT4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
81:1e:14:01:07:cf:e5:2a:3d:0e:8f:51:33:4a:fa:48:3b:a6:
1f:b0:5f:f0:82:92:92:d1:46:87:d0:2a:7e:63:81:80:b0:72:
bb:ec:96:b5:28:f4:4b:a1:c5:59:bc:16:41:2f:17:2e:30:8f:
3b:12:2e:3e:ba:87:fd:af:ca:91:ab:e9:96:84:6f:74:b9:c6:
87:cc:ff:c8:0a:f2:d5:2f:66:ef:0b:ea:35:16:9b:ea:8a:f4:
fd:1f:21:52:bf:e9:f4:5a:3b:55:e0:c4:b5:af:37:28:47:9f:
e2:2c:73:12:10:2e:cb:15:bd:f2:04:4d:f0:42:3c:1d:76:be:
91:3f:98:ed:6b:42:89:e4:2d:ad:73:4a:06:81:5d:e7:d2:99:
3c:32:5f:24:6d:f5:3e:6e:67:db:36:0a:e3:18:3f:96:04:a5:
82:0e:f1:0c:df:72:dd:cc:14:56:00:9f:ba:5d:0d:88:75:cd:
e5:40:88:d9:6f:e5:b3:a0:2e:b3:bf:62:95:af:d6:8a:c1:d1:
5f:66:90:9c:c5:c0:cf:2b:e4:aa:ed:a4:cc:6d:bf:8c:42:1e:
df:74:63:d4:2b:84:32:50:2a:6c:40:61:6c:85:7e:ec:38:b6:
f5:7a:fc:33:11:7e:62:b2:89:8d:af:d4:8e:60:ba:18:6f:69:
1c:6a:ed:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 11:07:09 2025 by rpki-client