Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/12vBet-ynKdFp8Ny5Zcu1n7SJYw.roa
File: 12vBet-ynKdFp8Ny5Zcu1n7SJYw.roa (raw, json)
Hash identifier: WPlTxjRfPYnG6d9u8XS5NUSm11qjsy9e2KoE/zKCwgo=
Subject key identifier: D7:6B:C1:7A:DF:B2:9C:A7:45:A7:C3:72:E5:97:2E:D6:7E:D2:25:8C
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 72B8
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/12vBet-ynKdFp8Ny5Zcu1n7SJYw.roa
Signing time: Thu 03 Jul 2025 05:44:50 +0000
ROA not before: Thu 03 Jul 2025 05:44:50 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29368 (0x72b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jul 3 05:44:50 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=D76BC17ADFB29CA745A7C372E5972ED67ED2258C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:a0:c3:23:4f:d7:05:fa:3c:1f:fb:fb:34:30:
f1:dc:aa:50:6c:d4:11:11:6d:6d:fe:f6:29:ad:af:
8e:26:52:8d:d1:f5:d9:ef:a2:fd:10:93:b4:ce:e7:
2d:c9:37:5d:3c:d9:9f:29:74:f5:a9:51:5d:77:fa:
5a:3a:c8:5a:f7:9d:6f:24:d8:f5:b2:a6:0a:b4:26:
25:27:eb:79:f6:b7:b3:49:1f:69:5e:e4:55:05:a2:
af:6f:61:e4:b3:3a:30:5d:1b:f1:c4:c7:d6:fa:1b:
c6:75:6e:40:c5:c7:01:b6:d1:fc:bc:b0:ff:3e:68:
85:13:61:a9:15:4d:8c:de:a0:1f:11:ce:fc:ef:27:
8a:0b:c4:20:57:11:bd:6e:d1:ec:2c:dd:b2:38:27:
9e:2d:1e:a1:25:17:d4:14:4d:14:e6:56:da:ba:20:
71:ac:9e:d2:3b:fd:60:24:e0:12:57:6e:53:e3:05:
8e:ca:74:9a:14:e7:52:a5:11:11:62:29:f8:64:66:
cd:cb:7a:43:97:b2:01:25:51:54:47:5a:aa:bf:a1:
e6:49:02:fe:1b:22:02:61:0a:24:39:1d:b8:7c:ae:
c2:a3:53:0a:9c:42:db:a5:ed:d4:01:ef:26:de:59:
11:4f:84:8e:5e:61:08:aa:1f:de:13:4d:a6:34:2a:
b1:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:6B:C1:7A:DF:B2:9C:A7:45:A7:C3:72:E5:97:2E:D6:7E:D2:25:8C
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/12vBet-ynKdFp8Ny5Zcu1n7SJYw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
58:d1:06:4a:96:2b:bc:af:7e:19:ab:20:13:30:3a:b9:6e:dc:
53:f7:8f:7d:e2:1e:1a:ac:59:ec:de:30:7f:31:e6:0e:5c:b7:
88:81:de:0d:9a:8a:8b:c0:2e:57:6d:0d:d9:c0:e5:2a:40:30:
c9:98:d1:98:c3:3e:2b:37:3a:d4:f0:18:d2:bc:78:fe:dc:bb:
3e:d7:ff:0b:36:d9:17:72:b0:98:90:50:93:ab:d2:eb:38:11:
b8:7a:07:6a:95:71:5a:8c:33:a1:e6:9a:c8:0e:f7:6a:ae:a0:
8c:21:13:60:bd:7e:26:db:e0:50:7d:ec:57:3e:48:eb:e5:f7:
d8:2a:00:6a:c3:f8:8c:89:71:b0:e7:4b:fb:2c:67:c6:3a:08:
ea:b4:5e:d4:78:87:09:13:da:a5:26:a9:9d:c6:c7:5a:68:9d:
b1:62:21:0e:f4:76:bb:9e:26:45:3e:7d:6b:56:ac:10:7c:32:
3d:e6:fb:8f:74:80:76:78:fc:50:5c:7d:12:05:6a:b4:ec:e1:
c4:95:3a:a3:37:a2:64:2a:a7:a8:02:6c:ca:40:65:8e:53:a5:
07:48:15:44:c5:a4:8c:20:ad:00:67:3e:29:e9:51:33:99:62:
5e:37:71:e7:bb:de:28:ed:8c:7c:f3:85:8e:be:22:78:e3:f8:
4f:d9:a2:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:47:39 2025 by rpki-client