Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/sVD20ySysh6_fGT_r0RUI7Y4rB4.roa
File: sVD20ySysh6_fGT_r0RUI7Y4rB4.roa (raw, json)
Hash identifier: 4fUvKkmn+o+D7B/cNRlSp20nzwxMu3bRFR8oICwyRac=
Subject key identifier: B1:50:F6:D3:24:B2:B2:1E:BF:7C:64:FF:AF:44:54:23:B6:38:AC:1E
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 6784
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/sVD20ySysh6_fGT_r0RUI7Y4rB4.roa
Signing time: Tue 03 Jun 2025 03:11:44 +0000
ROA not before: Tue 03 Jun 2025 03:11:44 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26500 (0x6784)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jun 3 03:11:44 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=B150F6D324B2B21EBF7C64FFAF445423B638AC1E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:3a:50:cd:71:e5:df:74:bb:84:ad:11:b2:6d:
29:05:14:59:79:14:c4:33:18:c5:f8:3e:dc:67:dd:
04:7f:37:7f:89:bc:51:50:e8:3f:ca:c3:e5:d8:7c:
c1:8e:c9:2f:6d:bf:7e:6e:38:b7:71:fa:15:27:bb:
4c:e9:f8:33:f1:35:5f:0c:47:95:19:ca:e2:81:16:
93:72:49:18:43:16:f3:8b:30:23:21:8f:95:26:b5:
b2:d6:d4:92:ec:14:23:b0:6f:5c:91:98:6c:99:98:
f3:d4:de:9a:80:37:03:a2:1d:59:8f:7b:2a:81:f5:
27:6d:35:91:c6:a0:42:1c:55:96:cc:61:d0:9b:14:
14:62:f3:90:14:3f:18:af:4b:28:6e:fd:1d:c6:18:
48:f8:01:95:c0:e8:19:9a:4e:b5:6b:1a:3c:9c:e8:
15:3e:13:de:94:6d:74:81:c3:22:65:4d:a0:57:3c:
d5:a3:3e:28:a0:22:f5:57:aa:1f:28:35:7d:88:6d:
a0:56:64:97:92:09:a0:43:d8:3a:8f:37:bf:b2:9b:
65:db:44:7b:54:1c:ab:2e:01:77:f6:1d:9d:71:73:
75:49:a1:85:7c:1d:51:be:2c:83:37:ae:46:d8:96:
58:5b:91:7a:ec:11:fc:a9:d3:6d:47:a8:70:7f:49:
84:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:50:F6:D3:24:B2:B2:1E:BF:7C:64:FF:AF:44:54:23:B6:38:AC:1E
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/sVD20ySysh6_fGT_r0RUI7Y4rB4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
26:e2:9f:4a:cc:ef:1e:a2:8c:b2:34:96:54:7b:2a:9e:d8:30:
22:95:a0:e1:08:41:b5:7d:5f:de:a0:29:7f:79:a0:ec:5d:77:
da:bf:17:37:62:48:00:f3:fc:60:c1:72:f0:5f:20:b0:67:31:
0d:d7:13:b0:dd:23:69:53:32:ed:fa:0e:15:e9:b8:5f:d0:c6:
99:51:f1:97:3a:72:30:3b:ae:5d:0b:6b:0f:5d:b2:09:71:07:
e8:b0:a0:b6:a7:50:e4:1d:4b:ad:97:aa:99:80:df:a5:80:6e:
19:cf:da:be:3b:bd:c5:f6:69:0b:b9:18:77:ec:bd:ea:b2:6b:
01:b1:d6:ba:32:0b:52:74:51:4f:93:f9:c1:c6:34:d9:ae:4e:
81:31:6c:f7:fe:1f:82:2a:4c:e7:8b:41:f0:73:c8:04:09:aa:
a8:38:a7:83:27:a3:98:ec:6a:61:c5:8e:17:9a:e3:61:e4:49:
59:a8:ea:86:ae:bf:8c:1a:ad:72:f6:a7:63:a6:ec:21:74:21:
bc:be:ac:69:8b:9b:92:43:5d:3a:e4:81:7f:ff:44:e5:79:76:
4b:36:b0:a3:23:44:34:8e:39:14:ba:1b:ca:15:ca:12:45:12:
0a:00:f5:97:b7:75:54:52:76:e1:c3:77:54:44:74:3a:22:d7:
1d:87:b1:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 16:20:06 2025 by rpki-client