Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/1izcaoHktGPwgXji_nsdq0Yc0a8.roa
File: 1izcaoHktGPwgXji_nsdq0Yc0a8.roa (raw, json)
Hash identifier: 7zRo/vYYZOW2YqLw0rYUnTi1uyxci7hap72bZ804OeU=
Subject key identifier: D6:2C:DC:6A:81:E4:B4:63:F0:81:78:E2:FE:7B:1D:AB:46:1C:D1:AF
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 7640
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/1izcaoHktGPwgXji_nsdq0Yc0a8.roa
Signing time: Sat 12 Jul 2025 16:11:44 +0000
ROA not before: Sat 12 Jul 2025 16:11:44 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30272 (0x7640)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jul 12 16:11:44 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=D62CDC6A81E4B463F08178E2FE7B1DAB461CD1AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:0d:30:f5:c7:db:fd:ce:1b:ae:91:58:6e:b9:
9a:bc:dc:26:4e:c6:6d:83:39:5e:52:48:19:cc:1f:
50:af:59:91:95:9d:98:d6:79:73:4c:fb:44:de:14:
e6:2c:bc:92:6f:e9:64:c7:b4:d2:3d:4b:21:55:b9:
b9:c2:59:7d:f9:12:9b:0f:57:a8:fb:e4:51:fd:7d:
ed:4d:d6:91:fd:e6:53:1d:52:8e:ef:9c:25:b8:96:
d7:71:88:4f:ef:4d:20:04:1c:3b:7b:9e:bd:67:a8:
88:9a:b5:db:00:c8:39:37:fd:5e:cd:0a:e5:cb:58:
9f:12:3d:87:60:5e:4f:56:c2:9f:d1:8b:f5:01:f8:
05:66:74:14:06:6b:69:81:e5:d3:b2:a4:4f:8a:6d:
7c:d3:9d:57:31:46:41:37:2b:80:14:11:ea:1b:ac:
f3:4f:14:6b:82:af:5e:d9:80:a2:24:84:c8:74:a2:
33:d7:95:e1:1f:5c:f6:b6:0a:01:25:1c:e8:34:18:
7f:61:13:59:63:90:e7:0e:45:28:32:04:3f:6a:08:
f2:88:3c:a9:f2:9a:40:60:08:e8:78:22:aa:df:b0:
58:6c:af:63:6e:6f:b8:c9:79:44:4c:bd:64:61:f8:
2d:0f:b8:96:e9:29:4e:03:14:6c:c1:e7:95:67:92:
79:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:2C:DC:6A:81:E4:B4:63:F0:81:78:E2:FE:7B:1D:AB:46:1C:D1:AF
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/1izcaoHktGPwgXji_nsdq0Yc0a8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
51:ca:3e:3a:6a:26:e5:21:7e:d4:3f:ea:9c:65:5a:3d:8d:a8:
f1:93:cb:81:33:ec:78:8e:55:33:01:62:1f:97:a2:16:3f:78:
65:6b:72:f7:3f:d1:0a:f6:0f:68:07:64:31:71:bb:76:56:39:
30:49:49:db:67:fe:78:ba:e6:e2:d6:b4:96:03:ae:39:f2:7a:
03:de:2e:f2:72:64:00:be:29:6c:2a:d3:e7:44:93:7b:51:a3:
1c:96:5e:b2:c1:ba:f0:20:2d:8d:31:02:60:28:55:ee:b3:bf:
4a:6c:77:20:c6:0c:ad:41:ff:5e:29:a8:b3:82:9d:a9:ef:13:
bf:3d:1c:78:42:0d:5b:c6:24:bd:7f:79:7b:9c:da:30:4e:06:
09:e5:b9:b7:e4:ac:6f:33:b0:e5:d3:2a:73:1f:54:3a:e3:61:
dc:66:7c:6f:6e:04:73:e1:e3:e6:40:35:9c:92:58:a2:87:51:
ca:9d:f0:16:07:53:0c:b1:73:b0:54:16:82:30:c7:ec:ea:ce:
6c:52:35:2d:52:7c:6d:dd:32:f5:83:34:6c:58:ff:ad:ad:aa:
1d:45:2a:07:2d:ce:80:bb:8c:1e:75:3e:e6:0e:3b:b3:6d:66:
b2:f0:0a:b3:01:91:d5:15:1d:be:b3:ca:d3:28:69:3c:8b:34:
da:59:77:3d
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgICdkAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNTA3MTIx
NjExNDRaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKEQ2MkNEQzZBODFFNEI0
NjNGMDgxNzhFMkZFN0IxREFCNDYxQ0QxQUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCyDTD1x9v9zhuukVhuuZq83CZOxm2DOV5SSBnMH1CvWZGVnZjW
eXNM+0TeFOYsvJJv6WTHtNI9SyFVubnCWX35EpsPV6j75FH9fe1N1pH95lMdUo7v
nCW4ltdxiE/vTSAEHDt7nr1nqIiatdsAyDk3/V7NCuXLWJ8SPYdgXk9Wwp/Ri/UB
+AVmdBQGa2mB5dOypE+KbXzTnVcxRkE3K4AUEeobrPNPFGuCr17ZgKIkhMh0ojPX
leEfXPa2CgElHOg0GH9hE1ljkOcORSgyBD9qCPKIPKnymkBgCOh4IqrfsFhsr2Nu
b7jJeURMvWRh+C0PuJbpKU4DFGzB55VnknmVAgMBAAGjggI0MIICMDAdBgNVHQ4E
FgQU1izcaoHktGPwgXji/nsdq0Yc0a8wHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3LzFpemNhb0hrdEdQd2dY
amlfbnNkcTBZYzBhOC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwYgYIKwYBBQUHAQcBAf8EUzBRME8EAgABMEkD
BAIr7zADBAMr9gAwDAMEAiv2DAMEBCv2IDAMAwQCK/Y0AwQCK/ZgAwQCZyMwMAsD
AwJn7AMEA2fsEDAMAwQCZ+wcAwQCZ+xgMA0GCSqGSIb3DQEBCwUAA4IBAQBRyj46
aiblIX7UP+qcZVo9jajxk8uBM+x4jlUzAWIfl6IWP3hla3L3P9EK9g9oB2Qxcbt2
VjkwSUnbZ/54uubi1rSWA6458noD3i7ycmQAvilsKtPnRJN7UaMcll6ywbrwIC2N
MQJgKFXus79KbHcgxgytQf9eKaizgp2p7xO/PRx4Qg1bxiS9f3l7nNowTgYJ5bm3
5KxvM7Dl0ypzH1Q642HcZnxvbgRz4ePmQDWckliih1HKnfAWB1MMsXOwVBaCMMfs
6s5sUjUtUnxt3TL1gzRsWP+traodRSoHLc6Au4wedT7mDjuzbWay8AqzAZHVFR2+
s8rTKGk8izTaWXc9
-----END CERTIFICATE-----
Generated at Sun Jul 20 12:49:48 2025 by rpki-client