Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/yJ2rJzmeLKxqlfXE7wm02Z775i8.roa
File: yJ2rJzmeLKxqlfXE7wm02Z775i8.roa (raw, json)
Hash identifier: rn6jnWJvAUrqAM4QsOSkEPw2+KxnC2jFMzClcolVIJ8=
Subject key identifier: C8:9D:AB:27:39:9E:2C:AC:6A:95:F5:C4:EF:09:B4:D9:9E:FB:E6:2F
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 6308
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/yJ2rJzmeLKxqlfXE7wm02Z775i8.roa
Signing time: Thu 22 May 2025 04:13:06 +0000
ROA not before: Thu 22 May 2025 04:13:06 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25352 (0x6308)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 22 04:13:06 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=C89DAB27399E2CAC6A95F5C4EF09B4D99EFBE62F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:50:fe:ab:c3:ec:61:01:52:67:53:62:44:54:
ee:13:95:83:82:46:8c:cb:76:64:10:2c:48:71:b5:
88:2b:3a:e1:8a:f2:86:5b:07:56:59:f2:8f:ab:81:
3c:15:c2:df:67:75:6d:63:7f:23:48:78:91:c9:e0:
55:91:99:e1:2f:ff:69:50:2f:46:bb:60:bd:04:bf:
7a:a8:da:92:ad:be:40:56:82:f2:27:e1:80:0f:32:
0e:03:ee:52:df:0b:e8:66:04:ba:42:c4:c0:93:2b:
ec:a4:03:1c:41:f6:6b:0a:13:25:8a:d5:44:e0:a4:
8d:4a:0c:4c:9e:b6:c5:14:b4:85:e4:63:b7:73:8c:
c8:f9:85:4c:32:23:8d:16:bb:99:4d:7d:2a:28:52:
3f:33:5f:82:78:d1:45:29:d6:b3:db:bb:25:92:55:
0e:d4:87:d9:11:ba:45:dc:05:63:ef:22:f5:b6:20:
47:cf:63:e9:6a:61:30:a0:80:38:7e:88:1d:b0:85:
25:51:53:b6:e7:4f:13:69:6e:2a:df:17:2f:0c:85:
2b:4b:3e:d1:a2:11:a3:7d:74:12:52:81:19:e9:cf:
54:31:4f:15:70:71:e9:f0:eb:d1:ad:f7:63:a3:8b:
3a:37:18:3d:dc:7a:1e:a5:fc:37:e5:1a:b7:57:af:
d0:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:9D:AB:27:39:9E:2C:AC:6A:95:F5:C4:EF:09:B4:D9:9E:FB:E6:2F
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/yJ2rJzmeLKxqlfXE7wm02Z775i8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
28:f8:cf:05:21:db:46:01:a4:8d:b5:dd:b6:19:db:c2:87:a6:
b1:3f:94:2d:57:54:31:4a:a8:a3:51:8f:14:81:e0:c3:b2:31:
bf:15:f2:95:99:53:c3:16:7e:5b:61:30:95:25:c0:c3:b6:70:
e2:0d:e0:d6:22:14:9a:f9:71:1d:d2:28:ec:58:1f:38:50:fd:
06:94:e5:ee:9b:9d:b5:ec:d4:2a:a0:4f:e5:e4:b8:0e:ca:59:
78:fd:42:50:aa:77:63:db:5a:30:db:d4:0c:b6:e4:75:cd:83:
69:e8:d1:ae:06:2e:3e:7f:98:42:c1:05:f2:ce:ce:11:3c:c2:
23:82:d6:c9:8a:3a:dc:41:9a:82:fb:af:ba:11:3d:02:90:d1:
00:32:64:77:51:3c:85:05:41:67:18:c2:3b:81:61:85:91:04:
55:03:53:ee:9a:49:a7:d3:c3:4e:17:78:5f:c5:83:30:6e:f5:
7d:f2:19:82:2e:09:ad:e7:77:e5:a4:a5:15:8c:e6:8c:2f:f2:
0f:5d:3e:68:92:88:aa:da:08:0a:4e:e2:58:fa:d8:5b:7d:67:
61:0c:e4:2a:14:6d:d8:51:93:b2:99:03:74:6e:5a:91:44:6b:
f5:05:0e:f7:90:fa:0d:7a:0d:b8:4d:5e:5a:47:5a:19:5c:8a:
5b:4a:fc:a2
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgICYwgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNTA1MjIw
NDEzMDZaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKEM4OURBQjI3Mzk5RTJD
QUM2QTk1RjVDNEVGMDlCNEQ5OUVGQkU2MkYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDxUP6rw+xhAVJnU2JEVO4TlYOCRozLdmQQLEhxtYgrOuGK8oZb
B1ZZ8o+rgTwVwt9ndW1jfyNIeJHJ4FWRmeEv/2lQL0a7YL0Ev3qo2pKtvkBWgvIn
4YAPMg4D7lLfC+hmBLpCxMCTK+ykAxxB9msKEyWK1UTgpI1KDEyetsUUtIXkY7dz
jMj5hUwyI40Wu5lNfSooUj8zX4J40UUp1rPbuyWSVQ7Uh9kRukXcBWPvIvW2IEfP
Y+lqYTCggDh+iB2whSVRU7bnTxNpbirfFy8MhStLPtGiEaN9dBJSgRnpz1QxTxVw
cenw69Gt92Ojizo3GD3ceh6l/DflGrdXr9BNAgMBAAGjggI0MIICMDAdBgNVHQ4E
FgQUyJ2rJzmeLKxqlfXE7wm02Z775i8wHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L3lKMnJKem1lTEt4cWxm
WEU3d20wMlo3NzVpOC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwYgYIKwYBBQUHAQcBAf8EUzBRME8EAgABMEkD
BAIr7zADBAMr9gAwDAMEAiv2DAMEBCv2IDAMAwQCK/Y0AwQCK/ZgAwQCZyMwMAsD
AwJn7AMEA2fsEDAMAwQCZ+wcAwQCZ+xgMA0GCSqGSIb3DQEBCwUAA4IBAQAo+M8F
IdtGAaSNtd22GdvCh6axP5QtV1QxSqijUY8UgeDDsjG/FfKVmVPDFn5bYTCVJcDD
tnDiDeDWIhSa+XEd0ijsWB84UP0GlOXum5217NQqoE/l5LgOyll4/UJQqndj21ow
29QMtuR1zYNp6NGuBi4+f5hCwQXyzs4RPMIjgtbJijrcQZqC+6+6ET0CkNEAMmR3
UTyFBUFnGMI7gWGFkQRVA1Pumkmn08NOF3hfxYMwbvV98hmCLgmt53flpKUVjOaM
L/IPXT5okoiq2ggKTuJY+thbfWdhDOQqFG3YUZOymQN0blqRRGv1BQ73kPoNeg24
TV5aR1oZXIpbSvyi
-----END CERTIFICATE-----
Generated at Sun Jun 22 03:58:08 2025 by rpki-client