Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/32VGxudqp97qBaAFaNg_6IXVYCs.roa
File: 32VGxudqp97qBaAFaNg_6IXVYCs.roa (raw, json)
Hash identifier: sa+MlmQFIkQN5kgegAiFla0P9yaBnQvBcU+3cp4Bq/M=
Subject key identifier: DF:65:46:C6:E7:6A:A7:DE:EA:05:A0:05:68:D8:3F:E8:85:D5:60:2B
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 6F20
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/32VGxudqp97qBaAFaNg_6IXVYCs.roa
Signing time: Mon 23 Jun 2025 21:44:18 +0000
ROA not before: Mon 23 Jun 2025 21:44:18 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28448 (0x6f20)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jun 23 21:44:18 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=DF6546C6E76AA7DEEA05A00568D83FE885D5602B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:85:4d:b8:67:d5:1f:ad:d7:a4:a1:b5:73:c9:
64:62:dd:fa:91:01:6f:72:cf:61:6e:54:2b:e4:ca:
d0:9e:6e:53:be:ed:34:cd:4a:4f:a2:55:c6:1f:18:
1f:3f:7a:52:d5:06:87:60:75:90:34:82:35:3b:89:
be:79:80:e6:a9:44:cb:7c:8d:fc:67:da:03:b6:58:
a4:0b:51:cd:d5:18:27:c6:58:54:5e:29:b4:91:97:
9d:c9:4d:2d:35:df:6a:ab:61:21:71:c6:4f:fb:d2:
73:d7:6e:0b:d1:6f:dc:ce:2a:ac:51:2b:2f:81:0a:
db:72:65:88:63:0b:df:4e:bf:06:e5:a7:08:ac:cc:
6d:79:c5:5d:a9:2c:24:17:2b:b0:a5:22:81:b7:6d:
60:2b:0c:4c:42:0b:54:29:a0:45:01:85:2b:84:8a:
de:4c:80:62:e0:73:e4:ed:b8:30:ec:b4:fd:1a:e0:
ec:fc:f5:c8:80:21:30:33:d0:32:fc:bc:09:94:4e:
75:16:0d:4e:a4:2c:1c:3e:db:1b:27:1b:1e:99:e1:
d9:d2:42:2f:07:40:e5:ef:f6:ea:fe:ae:10:04:33:
6e:99:89:6c:14:b7:0e:3f:c9:30:17:6e:ef:25:df:
f8:ad:e1:18:ce:be:9c:f8:36:52:6e:b0:3d:a3:a5:
bb:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:65:46:C6:E7:6A:A7:DE:EA:05:A0:05:68:D8:3F:E8:85:D5:60:2B
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/32VGxudqp97qBaAFaNg_6IXVYCs.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
60:b4:1a:fe:f9:4d:ab:ff:7a:f0:6d:67:a9:5e:a1:51:7e:83:
7c:a5:86:96:35:ad:76:09:3e:0e:eb:79:01:11:9e:e1:d5:e7:
9e:a9:cf:be:f2:1c:2b:a6:61:34:a5:85:7e:89:5b:d7:ee:24:
1d:69:d9:04:73:e3:f7:89:f3:6d:e8:3b:92:ba:24:6c:75:86:
ed:b5:d4:0e:11:62:17:22:6b:49:2f:73:0a:c8:0e:77:66:a5:
3a:0c:14:6e:01:74:a2:d8:3c:87:b7:b6:e4:04:f6:ca:19:09:
67:26:e6:bd:da:16:45:76:ff:45:35:52:ec:46:55:9d:7b:69:
90:25:68:e5:ca:3c:40:0c:b3:84:39:db:be:4d:ed:8c:3e:6f:
cf:20:9a:ad:70:81:cd:79:31:6b:ea:86:80:69:64:f7:63:07:
a7:4c:42:70:9a:c8:02:2a:65:11:8b:f3:2b:ea:3e:56:50:f5:
c0:cf:81:6c:db:ff:ac:be:27:b3:1a:a4:67:61:d5:48:28:e6:
47:88:31:48:4d:3f:1d:b3:dd:52:b4:17:10:55:67:7f:63:63:
e4:4f:43:48:69:1b:2e:5a:9f:aa:94:bc:21:91:f6:88:7e:76:
53:1b:6b:3d:98:c0:10:49:3b:75:b3:ae:23:bc:7b:a3:f8:55:
3b:79:62:3e
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgICbyAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNTA2MjMy
MTQ0MThaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKERGNjU0NkM2RTc2QUE3
REVFQTA1QTAwNTY4RDgzRkU4ODVENTYwMkIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC6hU24Z9UfrdekobVzyWRi3fqRAW9yz2FuVCvkytCeblO+7TTN
Sk+iVcYfGB8/elLVBodgdZA0gjU7ib55gOapRMt8jfxn2gO2WKQLUc3VGCfGWFRe
KbSRl53JTS0132qrYSFxxk/70nPXbgvRb9zOKqxRKy+BCttyZYhjC99Ovwblpwis
zG15xV2pLCQXK7ClIoG3bWArDExCC1QpoEUBhSuEit5MgGLgc+TtuDDstP0a4Oz8
9ciAITAz0DL8vAmUTnUWDU6kLBw+2xsnGx6Z4dnSQi8HQOXv9ur+rhAEM26ZiWwU
tw4/yTAXbu8l3/it4RjOvpz4NlJusD2jpbupAgMBAAGjggI0MIICMDAdBgNVHQ4E
FgQU32VGxudqp97qBaAFaNg/6IXVYCswHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3LzMyVkd4dWRxcDk3cUJh
QUZhTmdfNklYVllDcy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwYgYIKwYBBQUHAQcBAf8EUzBRME8EAgABMEkD
BAIr7zADBAMr9gAwDAMEAiv2DAMEBCv2IDAMAwQCK/Y0AwQCK/ZgAwQCZyMwMAsD
AwJn7AMEA2fsEDAMAwQCZ+wcAwQCZ+xgMA0GCSqGSIb3DQEBCwUAA4IBAQBgtBr+
+U2r/3rwbWepXqFRfoN8pYaWNa12CT4O63kBEZ7h1eeeqc++8hwrpmE0pYV+iVvX
7iQdadkEc+P3ifNt6DuSuiRsdYbttdQOEWIXImtJL3MKyA53ZqU6DBRuAXSi2DyH
t7bkBPbKGQlnJua92hZFdv9FNVLsRlWde2mQJWjlyjxADLOEOdu+Te2MPm/PIJqt
cIHNeTFr6oaAaWT3YwenTEJwmsgCKmURi/Mr6j5WUPXAz4Fs2/+sviezGqRnYdVI
KOZHiDFITT8ds91StBcQVWd/Y2PkT0NIaRsuWp+qlLwhkfaIfnZTG2s9mMAQSTt1
s64jvHuj+FU7eWI+
-----END CERTIFICATE-----
Generated at Sun Jul 20 12:41:57 2025 by rpki-client