Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/3NY_5iDvsxapwMZH23vEu6ZvoE8.roa
File: 3NY_5iDvsxapwMZH23vEu6ZvoE8.roa (raw, json)
Hash identifier: w+lGDaaGR4jM7f1vOGUYdUF6ILdDv3QNbPsYuyw1GU8=
Subject key identifier: DC:D6:3F:E6:20:EF:B3:16:A9:C0:C6:47:DB:7B:C4:BB:A6:6F:A0:4F
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 6F3A
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/3NY_5iDvsxapwMZH23vEu6ZvoE8.roa
Signing time: Tue 24 Jun 2025 04:14:33 +0000
ROA not before: Tue 24 Jun 2025 04:14:33 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28474 (0x6f3a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jun 24 04:14:33 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=DCD63FE620EFB316A9C0C647DB7BC4BBA66FA04F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:48:af:9c:28:e5:ae:dd:1a:d2:bf:1a:fb:44:
dc:9f:38:63:ac:96:e2:b8:36:f8:62:8a:33:10:6b:
8d:85:9e:57:a4:c0:0f:aa:60:28:c4:cf:c7:2b:36:
d6:75:b2:65:ac:60:79:c1:88:68:2f:26:60:dc:f5:
cc:c6:c9:46:7d:7e:82:13:00:f5:0f:25:bb:e1:5b:
26:1f:d8:a2:52:50:34:2f:da:c4:f7:b3:41:65:5c:
1c:d0:d6:89:fa:7f:cc:83:6b:63:a5:12:59:1d:6f:
5b:17:81:be:db:57:e1:a2:39:fa:68:ee:82:50:d4:
10:4c:f3:68:f4:0d:61:6b:ba:03:6e:e8:69:00:12:
e2:1f:2d:36:a7:eb:09:aa:45:fc:a9:6d:95:e8:fd:
40:87:51:ce:d4:ff:06:10:c6:cc:d4:52:75:1a:dc:
59:b5:83:c2:ae:8e:61:96:3a:32:53:5d:c2:d8:f0:
a3:0c:ad:ab:ca:08:35:4e:dc:da:79:21:b0:6a:c5:
6b:51:d9:cf:e7:7b:8b:5d:a4:c5:d0:25:7b:76:a3:
8c:ac:85:7e:56:5a:48:99:3d:95:53:2f:63:ac:9b:
4c:db:60:9e:28:47:d1:16:7a:25:1b:59:01:ef:ca:
6f:64:ec:2d:e6:04:03:f4:47:0f:87:06:ff:4d:fa:
9b:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:D6:3F:E6:20:EF:B3:16:A9:C0:C6:47:DB:7B:C4:BB:A6:6F:A0:4F
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/3NY_5iDvsxapwMZH23vEu6ZvoE8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
2f:9b:24:b4:88:73:61:8d:39:7d:8e:6a:4e:9e:66:36:60:ff:
89:ff:10:08:34:0d:5c:16:6b:b5:9b:65:48:56:2e:a0:f3:64:
a8:d9:63:72:ae:15:98:70:6a:63:53:02:85:bc:fe:da:a1:e2:
45:a9:9a:b0:8c:72:77:8c:e2:0b:ed:c7:ca:16:92:95:60:00:
4e:a7:35:3c:ef:37:9c:05:e4:e8:0c:12:47:95:10:54:cd:99:
2f:69:3e:f3:42:16:37:41:a9:c8:48:29:5d:5a:6f:f8:48:b4:
ac:ed:78:ce:47:1d:91:b6:5d:2e:3c:a1:72:4a:35:5b:69:37:
80:06:95:1b:91:d2:09:9a:fe:c6:bf:fb:a0:2e:2c:ac:8e:07:
81:a8:4d:86:87:77:bb:fe:68:9e:56:c7:a3:50:0e:5e:0d:c5:
d2:33:91:8a:11:d0:70:ed:b5:ef:57:cf:1b:d1:ba:2d:d8:54:
93:55:5a:50:aa:94:db:d1:3b:41:83:be:f6:9e:23:31:5d:9d:
d6:fd:9d:25:d7:f9:e1:55:d7:da:f2:01:9e:aa:90:76:3e:a5:
fd:4c:46:22:19:50:1a:87:ab:a8:a8:e5:d8:d1:0f:1f:42:7d:
01:48:63:04:84:38:33:aa:9d:77:df:ae:ec:36:f3:a5:fc:5d:
01:65:75:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:51:19 2025 by rpki-client