Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/oYwEI8dSx9C31DuGZWSpxA7mup0.roa
File: oYwEI8dSx9C31DuGZWSpxA7mup0.roa (raw, json)
Hash identifier: +R/RYxnjgdUs6bICs0ky2DXY40w/WkuroGZJY9zxK0c=
Subject key identifier: A1:8C:04:23:C7:52:C7:D0:B7:D4:3B:86:65:64:A9:C4:0E:E6:BA:9D
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 63C0
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/oYwEI8dSx9C31DuGZWSpxA7mup0.roa
Signing time: Sat 24 May 2025 02:10:54 +0000
ROA not before: Sat 24 May 2025 02:10:54 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25536 (0x63c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 24 02:10:54 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=A18C0423C752C7D0B7D43B866564A9C40EE6BA9D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:72:ff:d5:f8:66:32:51:44:98:32:07:4c:9d:
2a:bc:50:13:21:40:f9:d8:57:c5:d6:0c:5c:7d:f3:
ce:3a:c7:d1:b4:2a:ad:3c:15:47:9b:9f:7e:8b:2a:
04:f2:79:40:b3:0d:2b:c9:64:41:75:95:9d:11:0c:
2d:ea:73:56:ba:30:17:ca:3b:8e:3f:db:cb:73:12:
8f:55:e7:0e:a9:bc:1e:2b:78:96:96:e0:60:34:08:
ca:10:e4:e1:ef:db:f6:11:64:02:86:a2:5d:dc:0b:
8e:8e:45:9d:de:35:a0:f7:68:42:00:53:5f:3f:4d:
db:1a:7c:c5:80:2a:6c:fc:a1:76:36:e6:90:47:e2:
98:77:9f:b8:e5:0f:35:e0:31:18:99:fa:24:e5:9c:
92:1e:ae:b6:e0:11:0a:80:d5:72:01:2c:da:75:7c:
0c:1f:55:3c:4e:80:a3:ea:a6:25:11:28:7b:b6:28:
7e:cf:f9:fc:b1:14:f2:9e:3a:7a:d1:66:4f:e1:37:
6e:cc:b4:e1:ca:79:a3:23:f4:56:c3:9a:43:5b:83:
82:b5:8e:31:61:ca:8b:63:cd:6d:37:07:5e:09:ba:
af:00:46:3b:2c:8c:4f:a2:51:d0:bc:9a:15:fe:66:
89:ee:e8:c4:36:da:65:29:b8:15:77:7c:3f:f9:10:
20:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:8C:04:23:C7:52:C7:D0:B7:D4:3B:86:65:64:A9:C4:0E:E6:BA:9D
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/oYwEI8dSx9C31DuGZWSpxA7mup0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
05:77:c6:87:2e:bc:c1:0e:d2:c2:7f:6e:b4:d0:67:5c:60:49:
78:8e:e5:64:9f:1f:f4:e0:5f:22:d5:9f:5e:6b:3b:cf:c1:f8:
82:8b:f5:33:3d:0a:da:ef:c1:0a:67:e5:c5:b1:12:b4:2a:12:
fd:e2:04:05:73:af:9d:80:3d:cb:5b:56:54:36:a7:5c:b1:9f:
3f:af:e1:cd:7e:ef:cb:39:16:ec:69:36:95:34:5c:ca:6d:c5:
85:70:ec:c0:bd:00:c8:61:55:c0:32:78:35:24:a3:0f:df:8b:
f5:49:dd:ca:30:c2:3f:c8:5a:10:09:1d:00:24:78:05:f4:36:
dc:9e:2f:bb:9d:cf:21:f4:42:90:2f:c3:93:69:3b:0b:c6:d9:
a2:f9:97:91:75:57:90:19:84:3f:93:48:7a:8e:30:a7:62:18:
a8:51:e2:09:40:16:7a:69:23:a6:a7:75:9f:08:9a:2e:3a:81:
00:fd:00:15:2a:cc:d7:80:8b:65:71:a8:99:ad:fe:ad:1a:ca:
93:64:57:c6:7a:84:ed:bd:ee:8a:33:d3:ad:2e:39:c6:8f:72:
2b:e3:d0:f1:f7:7b:64:66:c4:f2:59:d9:6b:02:75:c3:ad:7d:
6b:4f:4d:d4:d2:82:50:80:6a:71:65:d7:0b:1e:bd:f1:3a:d4:
c9:bc:e4:6d
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgICY8AwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNTA1MjQw
MjEwNTRaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKEExOEMwNDIzQzc1MkM3
RDBCN0Q0M0I4NjY1NjRBOUM0MEVFNkJBOUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDecv/V+GYyUUSYMgdMnSq8UBMhQPnYV8XWDFx98846x9G0Kq08
FUebn36LKgTyeUCzDSvJZEF1lZ0RDC3qc1a6MBfKO44/28tzEo9V5w6pvB4reJaW
4GA0CMoQ5OHv2/YRZAKGol3cC46ORZ3eNaD3aEIAU18/TdsafMWAKmz8oXY25pBH
4ph3n7jlDzXgMRiZ+iTlnJIerrbgEQqA1XIBLNp1fAwfVTxOgKPqpiURKHu2KH7P
+fyxFPKeOnrRZk/hN27MtOHKeaMj9FbDmkNbg4K1jjFhyotjzW03B14Juq8ARjss
jE+iUdC8mhX+Zonu6MQ22mUpuBV3fD/5ECDpAgMBAAGjggI0MIICMDAdBgNVHQ4E
FgQUoYwEI8dSx9C31DuGZWSpxA7mup0wHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L29Zd0VJOGRTeDlDMzFE
dUdaV1NweEE3bXVwMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwYgYIKwYBBQUHAQcBAf8EUzBRME8EAgABMEkD
BAIr7zADBAMr9gAwDAMEAiv2DAMEBCv2IDAMAwQCK/Y0AwQCK/ZgAwQCZyMwMAsD
AwJn7AMEA2fsEDAMAwQCZ+wcAwQCZ+xgMA0GCSqGSIb3DQEBCwUAA4IBAQAFd8aH
LrzBDtLCf2600GdcYEl4juVknx/04F8i1Z9eazvPwfiCi/UzPQra78EKZ+XFsRK0
KhL94gQFc6+dgD3LW1ZUNqdcsZ8/r+HNfu/LORbsaTaVNFzKbcWFcOzAvQDIYVXA
Mng1JKMP34v1Sd3KMMI/yFoQCR0AJHgF9Dbcni+7nc8h9EKQL8OTaTsLxtmi+ZeR
dVeQGYQ/k0h6jjCnYhioUeIJQBZ6aSOmp3WfCJouOoEA/QAVKszXgItlcaiZrf6t
GsqTZFfGeoTtve6KM9OtLjnGj3Ir49Dx93tkZsTyWdlrAnXDrX1rT03U0oJQgGpx
ZdcLHr3xOtTJvORt
-----END CERTIFICATE-----
Generated at Sun Jun 22 05:34:44 2025 by rpki-client