Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/vC990uXusLlKLTnDzNGx2sXBP-w.roa
File: vC990uXusLlKLTnDzNGx2sXBP-w.roa (raw, json)
Hash identifier: gsKEtaLoDdncpEDlTETaR3d6PWytc5vWhwUHKXo0TPE=
Subject key identifier: BC:2F:7D:D2:E5:EE:B0:B9:4A:2D:39:C3:CC:D1:B1:DA:C5:C1:3F:EC
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 68F2
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vC990uXusLlKLTnDzNGx2sXBP-w.roa
Signing time: Fri 06 Jun 2025 22:41:55 +0000
ROA not before: Fri 06 Jun 2025 22:41:55 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26866 (0x68f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jun 6 22:41:55 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=BC2F7DD2E5EEB0B94A2D39C3CCD1B1DAC5C13FEC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:07:2c:b8:32:32:d4:95:0a:74:20:10:0c:1f:
6c:bf:54:37:e5:35:88:e1:55:1e:57:61:45:f8:6e:
63:7a:f9:0d:41:ae:bb:2a:70:4a:a7:d6:b4:e3:67:
7e:13:fa:d0:c0:91:93:4d:72:66:24:19:66:df:75:
d6:a2:dc:36:f4:fa:41:0e:b3:67:18:32:cc:63:6e:
57:78:27:17:7c:83:96:a8:be:b8:aa:73:40:6f:fd:
de:21:5c:3d:18:a1:cc:3c:ae:27:9d:00:0e:cd:3b:
e0:95:13:70:74:98:1c:a3:29:5d:1b:8a:e2:2f:34:
f3:48:68:67:34:64:a4:82:bf:7e:00:f2:01:82:2c:
83:fc:1f:0a:82:41:7a:fd:75:a5:ad:ff:e1:03:72:
5f:3d:2b:0b:5b:8f:ba:e2:c6:4a:8c:38:47:7b:fc:
a7:97:8c:41:1d:b8:21:b2:20:23:72:12:39:60:ec:
4f:9b:45:0c:ad:4c:75:f1:68:7f:32:1c:64:41:4e:
a6:28:8e:b0:d6:25:ff:68:98:b9:39:78:7c:df:75:
a8:80:11:4d:00:e1:45:1e:01:f4:7f:64:cd:43:45:
0c:b4:5e:bf:0c:46:b1:8e:84:86:bc:5e:26:92:66:
46:5c:6d:af:2c:98:0a:4e:af:4b:3a:02:09:07:b8:
4b:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:2F:7D:D2:E5:EE:B0:B9:4A:2D:39:C3:CC:D1:B1:DA:C5:C1:3F:EC
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vC990uXusLlKLTnDzNGx2sXBP-w.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
5e:4b:cb:e0:a5:d3:08:a7:09:7c:a6:ad:10:9a:03:3c:e1:f4:
37:d0:d1:3d:05:4c:1a:4f:4d:0b:22:21:91:66:6b:6c:99:9a:
6b:c3:3e:7e:af:fd:7e:4b:b8:35:b2:33:46:a9:76:7d:79:2f:
3c:0c:b2:2b:94:99:96:ec:d6:5b:c3:85:9e:4f:43:2b:b8:47:
09:22:4f:5a:61:5c:9c:b0:a6:d9:45:80:d8:74:e3:bb:66:a6:
80:d4:38:5f:50:84:76:63:4b:af:ff:5b:e4:76:06:9f:a7:c7:
cb:de:73:eb:fb:1e:f7:38:f4:01:92:64:1e:aa:23:a6:63:4a:
40:c3:fb:27:df:52:3b:27:19:5b:2e:3c:78:48:42:6f:2f:8d:
93:6d:13:06:75:9b:83:a7:a2:ae:e1:fd:ae:83:69:f3:c2:58:
c4:bd:e8:69:5d:04:10:70:ff:83:7f:9d:98:3a:b1:9c:85:19:
73:cf:2f:a4:aa:ce:29:92:d5:17:31:da:05:a4:24:d3:f1:31:
f7:dc:da:12:11:bd:d2:81:84:00:43:6b:f3:1c:88:3d:34:80:
25:03:e9:b3:20:43:90:66:25:e9:7a:0d:94:f6:51:d1:a6:7b:
aa:95:70:92:db:14:05:86:34:d0:42:34:32:f5:4e:da:34:78:
5a:88:5d:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 02:21:35 2025 by rpki-client