Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/yNcJRCt6JnaonAHIUvhigXqexFQ.roa
File: yNcJRCt6JnaonAHIUvhigXqexFQ.roa (raw, json)
Hash identifier: Pq+y7W42NvVo/5WXFQwLR7p9YcIIJIme17t0fckWwo8=
Subject key identifier: C8:D7:09:44:2B:7A:26:76:A8:9C:01:C8:52:F8:62:81:7A:9E:C4:54
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 63FC
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/yNcJRCt6JnaonAHIUvhigXqexFQ.roa
Signing time: Sat 24 May 2025 17:10:52 +0000
ROA not before: Sat 24 May 2025 17:10:52 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25596 (0x63fc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 24 17:10:52 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=C8D709442B7A2676A89C01C852F862817A9EC454
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:f2:83:60:ed:34:b9:1c:50:16:17:fa:26:e8:
9a:80:5c:62:77:2e:78:10:11:31:65:51:de:0b:5f:
4e:f8:a5:e5:dc:73:55:2b:72:00:96:01:ad:fd:2d:
ff:c5:e0:99:08:ca:35:2a:6f:eb:23:f1:72:35:d5:
c0:b8:e8:b1:c5:a4:43:b4:75:ca:9c:98:06:ae:db:
18:fa:9a:a8:98:f9:4b:3b:6f:15:02:e4:15:44:d3:
fa:d9:3b:d2:a0:7f:c0:1f:72:5f:0f:ee:2a:b0:95:
7f:bc:66:39:d7:75:38:db:17:21:ea:52:e3:b9:c6:
ed:3d:a3:b4:5a:4c:75:e6:c9:b9:33:28:f3:01:4b:
33:2d:ba:e1:9d:5b:51:16:66:18:b5:8d:3e:61:61:
46:ab:e7:a6:2f:9c:30:ca:c4:38:f7:88:a0:42:14:
47:4f:fe:f5:3c:07:31:29:e6:98:fd:53:02:4a:d2:
ae:00:ed:f9:58:ac:fe:58:75:84:96:97:ba:b7:7b:
43:0c:1f:86:d8:0b:38:ec:f2:2e:bc:30:01:64:c2:
26:3a:c9:3f:ba:f8:f4:2d:a1:cc:4e:8c:16:63:19:
fa:88:03:fd:4b:26:5f:d2:3b:fb:c4:fe:f0:09:56:
f9:d9:2c:d8:f9:62:6d:07:80:11:11:b8:c9:8d:92:
5f:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:D7:09:44:2B:7A:26:76:A8:9C:01:C8:52:F8:62:81:7A:9E:C4:54
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/yNcJRCt6JnaonAHIUvhigXqexFQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
9f:f8:9a:b0:b9:18:2d:92:54:3d:d5:60:a3:95:3a:a1:3f:e4:
af:e0:39:21:9e:4e:2a:3e:5c:14:cf:bd:98:04:e5:8d:bb:75:
6d:73:b3:63:8f:85:5a:f8:7c:ce:82:f4:a7:00:09:af:82:44:
e8:f0:9e:22:49:72:b2:ed:4a:a2:c7:d8:fc:88:d9:30:d5:f7:
bd:45:32:6b:60:b3:a8:eb:32:81:6e:5a:76:b0:de:86:09:f8:
2e:16:b2:34:37:fe:b0:f8:a3:42:2e:81:b0:90:36:9e:d4:c9:
09:41:96:88:25:16:1d:05:ff:f6:c3:02:90:bf:f5:fe:79:e1:
c7:a3:2a:2c:b0:d0:dc:bb:59:75:fe:1b:3c:6c:2b:4c:70:5c:
03:a1:4f:ab:20:11:87:fb:13:84:79:ee:ae:b2:e9:cf:05:02:
dd:04:a7:63:11:03:84:39:00:70:92:86:10:8c:3f:e9:02:7d:
59:ef:5e:cd:d9:c2:65:5a:a5:c8:01:de:27:06:1a:d8:54:1d:
10:8e:19:b6:0d:b3:23:8b:f6:1e:e9:c3:20:45:4c:92:26:1e:
91:88:cc:a2:5b:e4:c5:32:88:e8:a7:f2:a8:dd:66:ed:7e:3b:
8f:ca:b1:0d:8e:db:1f:f4:0c:4c:a1:ce:5e:84:ba:05:8b:9b:
c3:7c:5c:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 20:04:36 2025 by rpki-client