Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/vgPAunWLg2YZS4_2hCseo0M4u_c.roa
File: vgPAunWLg2YZS4_2hCseo0M4u_c.roa (raw, json)
Hash identifier: g2FIRrVEW2A4hzSJb7wukFSXFy9XfKY7uqu5eCOQxkU=
Subject key identifier: BE:03:C0:BA:75:8B:83:66:19:4B:8F:F6:84:2B:1E:A3:43:38:BB:F7
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 6A76
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vgPAunWLg2YZS4_2hCseo0M4u_c.roa
Signing time: Tue 10 Jun 2025 23:42:21 +0000
ROA not before: Tue 10 Jun 2025 23:42:21 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27254 (0x6a76)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jun 10 23:42:21 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=BE03C0BA758B8366194B8FF6842B1EA34338BBF7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:d8:8c:8e:d8:52:cd:48:ea:d6:8c:38:1f:d7:
32:f8:57:50:06:13:28:56:69:79:e8:de:2a:28:93:
96:46:16:8d:fa:34:03:1d:c3:02:a5:de:80:4b:cc:
19:ef:f3:2f:a5:67:d9:8c:c1:df:5d:d8:aa:63:47:
9d:96:02:be:26:c0:2a:08:5e:ea:63:55:7c:46:c4:
0d:8f:17:3c:e9:1a:b3:4d:03:60:1b:65:d0:e3:d6:
c2:0e:b9:7a:3f:f0:a2:2d:fc:70:4b:f6:2e:d6:8e:
dd:de:3e:6d:c0:33:ed:ac:8c:f6:2a:d9:50:0d:3c:
06:0d:61:4d:75:07:5b:91:4e:25:f2:77:b5:bb:e0:
ef:c0:3c:ea:3d:a1:ff:40:ee:92:ed:4f:e0:46:f6:
81:7c:2a:60:98:1a:5d:c0:08:51:cc:3c:6f:6f:93:
6b:2a:f6:3e:7b:2b:dd:bd:9f:5a:ae:a1:55:ee:ec:
49:7a:26:50:42:02:54:3a:1b:8b:ca:c4:19:ec:61:
8e:48:5f:08:e6:7d:c1:d9:76:d8:0b:71:87:92:b4:
37:8f:96:d7:1b:cc:d6:aa:b5:e3:75:d9:1c:7e:e8:
6d:24:cf:ac:63:77:50:aa:89:ca:73:75:d0:66:8f:
c5:07:e2:1e:b1:36:29:c2:16:67:77:70:52:1d:53:
02:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:03:C0:BA:75:8B:83:66:19:4B:8F:F6:84:2B:1E:A3:43:38:BB:F7
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vgPAunWLg2YZS4_2hCseo0M4u_c.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
97:0c:fe:81:85:dd:98:52:f8:80:9d:2c:38:02:4c:00:c7:fb:
8e:b2:43:8b:d7:82:1d:22:fe:12:e5:5f:77:e3:78:72:27:34:
f1:b4:83:fc:3a:d7:ef:27:54:de:1c:eb:a5:fc:96:10:0a:12:
d8:13:65:cc:5f:a0:77:30:15:57:56:b7:26:29:67:e4:5f:75:
e5:ba:67:bb:b1:7d:b7:1c:d2:72:64:29:3e:3e:b9:e2:df:04:
08:67:ac:a0:4d:d8:db:5d:ee:79:77:0c:4b:ff:03:76:91:2c:
c7:94:9e:36:31:aa:0c:67:49:17:7c:57:1f:f8:f7:3f:18:b5:
10:3e:a7:0c:06:c4:3b:bd:28:65:ca:d7:63:db:1f:06:e5:d5:
92:02:72:e0:51:5d:bb:ad:32:7f:c0:53:ec:ae:20:37:ab:43:
6d:52:3f:3e:6b:7f:0d:45:af:4c:48:62:00:d5:cf:c0:56:83:
3c:e2:e3:ad:a1:7f:03:71:e6:5f:75:e1:93:50:0d:06:91:e7:
c2:84:5c:98:bc:0a:86:ef:c1:be:a2:ef:1f:2c:90:fc:51:06:
e6:a8:20:b1:0c:13:c4:64:a7:9d:7c:5f:7f:73:04:a8:13:01:
78:3d:29:62:be:82:e5:fa:3d:34:b8:c3:7f:b5:0b:13:a8:77:
c1:c0:ef:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 06:13:32 2025 by rpki-client