Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/0faH0xlsmn2z-BhzT4ZvL8l8hac.roa
File: 0faH0xlsmn2z-BhzT4ZvL8l8hac.roa (raw, json)
Hash identifier: dOgAs30/SUMUtfPOlJJ9o1/fARxbB+kBmKkBbwyepCg=
Subject key identifier: D1:F6:87:D3:19:6C:9A:7D:B3:F8:18:73:4F:86:6F:2F:C9:7C:85:A7
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 61A4
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/0faH0xlsmn2z-BhzT4ZvL8l8hac.roa
Signing time: Sun 18 May 2025 11:10:34 +0000
ROA not before: Sun 18 May 2025 11:10:34 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24996 (0x61a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 18 11:10:34 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=D1F687D3196C9A7DB3F818734F866F2FC97C85A7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:15:13:5c:44:6c:72:4f:77:73:f3:94:67:79:
07:13:25:bf:b0:3f:c4:f3:61:ca:0a:c7:f6:6b:26:
12:81:30:f3:93:e1:49:5a:f3:7d:46:df:ba:cc:85:
70:a2:c0:92:7a:6e:18:34:c2:15:2b:5b:65:bb:a3:
4b:66:de:1a:0e:74:78:24:df:2d:8d:0a:e4:31:4a:
80:f6:a1:9a:a1:6c:b0:4c:9d:3e:0b:88:79:f3:20:
e4:d7:34:ad:9a:21:e3:66:85:6d:a1:41:d3:6a:ee:
8a:3f:39:54:a7:9a:59:bb:f7:68:09:26:f4:ce:b3:
3c:b2:d2:c2:3e:8f:09:f1:31:3b:a3:71:1a:1d:0e:
98:01:c1:2e:a4:74:8f:bc:6d:02:e0:ca:96:05:d6:
1b:32:15:81:68:e3:cb:ae:5e:17:7e:a6:a4:56:09:
90:88:22:a5:7d:69:7c:13:86:c7:2e:97:5e:43:c7:
de:00:16:3f:35:ea:12:82:e6:91:4e:b0:0d:22:e4:
93:32:f5:12:ef:8b:66:94:d4:87:47:22:45:57:5d:
70:0c:c3:5c:ca:d3:fa:4b:78:d2:94:8b:7e:2a:42:
49:f3:51:19:cf:64:19:ff:f8:21:7b:92:67:11:23:
fe:24:37:b3:81:b5:f7:05:4f:cd:1f:b5:ce:5a:d0:
d5:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:F6:87:D3:19:6C:9A:7D:B3:F8:18:73:4F:86:6F:2F:C9:7C:85:A7
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/0faH0xlsmn2z-BhzT4ZvL8l8hac.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
95:1b:cd:20:1f:8f:d4:06:aa:b5:d7:c3:ea:b4:25:6e:82:5c:
08:35:ce:e0:31:ba:6e:97:d9:79:6e:16:35:0e:d9:b3:1f:3b:
65:2a:e0:34:4d:df:91:2a:f0:5c:ec:99:2f:a0:c1:c6:08:e0:
d7:b9:02:d1:78:85:b5:2c:c6:ef:04:d2:e2:61:0a:e2:6b:3f:
80:84:f3:72:8c:50:93:05:1f:d5:af:33:3b:37:ec:3e:81:a6:
9f:11:39:7a:bb:f9:90:c5:6f:bd:7b:df:1d:11:38:98:40:38:
9a:8b:ff:dd:b1:51:9a:1a:17:05:dc:cf:74:2b:0a:5c:41:63:
e6:35:cf:73:2a:fd:49:a3:ec:cb:aa:17:44:f4:24:39:f6:07:
d3:a6:71:85:df:75:a3:5e:cd:4c:ed:1f:26:dc:55:2e:80:68:
e2:b5:a6:12:f9:eb:10:18:69:3a:15:71:49:0c:d6:a6:7b:99:
71:19:58:cc:83:4f:71:72:77:4d:bd:86:f6:58:45:21:f1:05:
8c:9a:da:8a:f4:cb:6a:45:49:e1:66:b8:1c:ce:a2:54:1e:3a:
fd:11:50:62:4f:b7:c8:cf:db:81:c2:ea:cd:cb:40:2b:32:fc:
2c:3d:c8:46:79:37:2e:4d:97:1f:d7:31:81:e9:09:37:6d:1c:
b7:94:2b:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 01:06:17 2025 by rpki-client