Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/4S2RQ5XHKaejokjfBcs4Pc-KgfA.roa
File: 4S2RQ5XHKaejokjfBcs4Pc-KgfA.roa (raw, json)
Hash identifier: H8sarIhTTVqvC04DuNNqMgBTdNZSFMnGf2TLL/90TQ4=
Subject key identifier: E1:2D:91:43:95:C7:29:A7:A3:A2:48:DF:05:CB:38:3D:CF:8A:81:F0
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 621A
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/4S2RQ5XHKaejokjfBcs4Pc-KgfA.roa
Signing time: Mon 19 May 2025 16:40:39 +0000
ROA not before: Mon 19 May 2025 16:40:39 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25114 (0x621a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 19 16:40:39 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=E12D914395C729A7A3A248DF05CB383DCF8A81F0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ad:d8:f7:3d:af:de:93:0e:e1:24:d1:56:15:
06:2a:98:a6:9d:d0:fd:83:5e:d8:b0:bc:70:ad:aa:
af:a5:a8:a5:c9:e2:9e:d5:fd:08:49:f7:e4:0f:09:
80:ee:67:60:bb:59:90:e8:03:5c:a3:93:32:8c:c3:
a9:e7:7a:bb:80:d7:b0:71:71:8a:8a:7b:80:a5:8e:
87:71:22:50:b3:b1:1a:a1:29:cb:ec:57:19:8f:24:
c3:f5:10:28:8d:2d:65:2d:7a:dc:f5:eb:99:e7:4f:
f4:bd:db:da:28:3a:d8:95:90:e8:bd:d9:8a:93:0d:
e9:b0:98:26:cf:2e:ab:fe:03:c2:de:fd:0b:a3:03:
fd:9e:dd:7c:74:72:0f:a2:ff:15:18:2e:64:4d:ef:
7c:43:71:e3:f8:71:6f:d6:b0:c4:6b:e1:ce:30:77:
72:9d:85:98:c4:bf:00:a3:8a:fe:9f:3a:e7:47:7f:
7d:2e:52:f2:6c:63:81:c0:bd:6b:a3:1b:75:99:79:
92:93:d5:f8:ea:6f:2a:e6:68:db:b5:53:f1:9f:8e:
15:cd:a3:62:a4:da:12:14:a3:79:f3:27:ac:8c:a6:
58:95:16:90:4f:27:dd:6f:f7:a5:5f:1f:37:ca:98:
1b:57:8f:eb:68:8d:0b:c8:80:ac:54:48:01:5f:ea:
59:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:2D:91:43:95:C7:29:A7:A3:A2:48:DF:05:CB:38:3D:CF:8A:81:F0
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/4S2RQ5XHKaejokjfBcs4Pc-KgfA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
84:02:1a:a2:aa:90:f6:6a:8f:21:d8:eb:27:cb:81:69:12:f1:
09:b4:3a:97:63:76:f5:23:e7:74:d4:f4:f8:35:f2:37:08:73:
a3:bc:37:1f:4a:c0:20:09:8f:64:d5:4c:5e:f0:07:c2:cd:35:
27:d8:68:5c:81:d0:ca:3c:de:4c:81:31:53:08:87:91:69:a9:
b0:db:b7:ba:a6:01:94:de:ad:f6:c4:61:92:10:e7:4a:3d:82:
f5:c4:42:95:80:4a:0d:c9:3d:6e:37:19:b1:01:43:c4:ec:58:
a7:8c:c8:ab:71:82:62:a6:49:7b:c9:90:40:5a:54:97:01:14:
54:e3:d5:a2:09:07:ee:da:78:a9:da:b5:b9:f1:6f:4f:95:60:
f7:5d:46:e6:9f:6f:5b:d7:b2:d3:ce:2f:af:62:2b:f0:28:0c:
a2:0e:2e:20:38:f7:88:2b:44:ba:ce:39:35:51:55:de:52:e6:
74:a8:f7:0a:9a:e3:04:8a:0d:75:a3:e1:d5:1e:da:e3:ff:74:
cb:7a:d8:4d:84:c5:51:b8:36:d1:00:f9:65:aa:c3:db:51:5c:
ea:fb:81:83:bb:8a:3d:ae:61:4d:e3:f5:21:0c:b3:10:59:53:
d5:7a:6f:9d:cc:47:95:2d:fe:66:1b:8e:83:c0:70:31:a1:f4:
db:36:a6:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 01:26:56 2025 by rpki-client