Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/5F_mJICsJdc_XXo7-pmTde5DHFg.roa
File: 5F_mJICsJdc_XXo7-pmTde5DHFg.roa (raw, json)
Hash identifier: NJ4Oih/U8wEXNpKTGAM9PXRK5ze/QU69eD84wfxRVYY=
Subject key identifier: E4:5F:E6:24:80:AC:25:D7:3F:5D:7A:3B:FA:99:93:75:EE:43:1C:58
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 7480
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/5F_mJICsJdc_XXo7-pmTde5DHFg.roa
Signing time: Mon 07 Jul 2025 23:45:02 +0000
ROA not before: Mon 07 Jul 2025 23:45:02 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29824 (0x7480)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jul 7 23:45:02 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=E45FE62480AC25D73F5D7A3BFA999375EE431C58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:00:a8:3b:d8:dd:54:d1:c9:c4:ad:f9:e7:e1:
6b:d9:95:c9:57:58:ef:16:74:5f:c1:1e:57:bd:a4:
88:a7:78:51:88:ba:4a:f6:fd:a3:c1:99:a3:ac:92:
a3:c9:cb:f9:a4:99:28:d2:e2:3a:ea:25:83:99:7c:
6f:b6:40:6d:74:ec:bc:b7:8b:43:87:48:6c:24:6e:
0b:3e:39:ba:f4:6e:f0:99:98:e0:75:ef:02:24:3e:
86:83:1a:20:9f:fd:50:b2:9f:ba:e0:c5:fc:34:1e:
56:75:ce:11:e5:0c:0a:d9:8a:52:35:81:1a:0b:e4:
58:09:22:b0:2e:74:4e:15:11:bf:00:af:f7:a5:02:
f9:96:bd:24:a3:22:30:32:e2:50:70:b9:93:8c:21:
d2:3f:44:51:5f:d6:f2:9e:10:35:43:0f:7c:a0:25:
71:62:55:4a:3a:aa:a8:57:7b:99:e7:2d:d5:8f:58:
c5:b9:95:8a:5c:c6:c7:f6:b0:64:e6:3f:c9:6f:a3:
1e:48:9d:ca:af:ca:23:62:2f:9c:70:ce:73:fe:a0:
ce:58:10:ef:a1:73:24:26:61:35:ac:d1:67:0b:e1:
18:d9:b9:1b:05:03:60:40:09:49:5d:ec:83:d2:c8:
59:b0:09:29:4b:12:9a:cd:3c:85:43:83:47:e2:11:
01:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:5F:E6:24:80:AC:25:D7:3F:5D:7A:3B:FA:99:93:75:EE:43:1C:58
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/5F_mJICsJdc_XXo7-pmTde5DHFg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
5a:51:86:83:1f:78:90:a2:18:73:54:f9:bd:32:eb:be:14:33:
74:dc:64:66:ce:99:1e:f7:20:4e:46:34:59:2f:d3:a9:b3:57:
b4:dc:a7:1c:b3:40:4b:dd:58:1e:5b:96:23:41:6e:85:77:9a:
5a:85:02:f7:5f:54:b6:3a:cb:e9:d5:fc:ab:ad:9b:4f:a6:61:
4d:b6:da:5a:17:1f:d1:81:07:8a:ba:e7:b4:b8:d6:36:6f:fa:
01:66:43:d1:0d:8c:bf:f5:c6:62:d2:17:d1:9b:82:6a:85:dd:
e3:41:54:63:7a:b8:f9:4a:8f:3b:2d:56:d6:f1:5a:e0:3b:40:
b2:a3:3e:cb:83:9d:18:2d:74:64:45:14:d1:49:93:44:c4:38:
25:0b:d6:49:43:33:31:c6:4e:fe:0f:08:d8:3f:c6:f3:bd:56:
dc:92:80:41:d3:b2:10:39:6c:26:d8:6a:65:ec:af:77:ca:17:
83:58:07:36:d9:21:29:79:58:f9:80:4a:0f:b7:d7:4c:9f:89:
4f:2b:aa:3c:f7:7f:07:c3:66:d1:a9:3b:cf:7f:1c:5e:ec:f5:
cb:4a:4b:be:e4:fb:2a:b1:16:62:7b:36:97:78:7b:43:2c:f7:
6b:aa:cb:2b:2f:a3:0f:2b:9c:c9:09:0d:85:b6:08:0a:2a:6a:
a9:99:91:53
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgICdIAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNTA3MDcy
MzQ1MDJaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKEU0NUZFNjI0ODBBQzI1
RDczRjVEN0EzQkZBOTk5Mzc1RUU0MzFDNTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCyAKg72N1U0cnErfnn4WvZlclXWO8WdF/BHle9pIineFGIukr2
/aPBmaOskqPJy/mkmSjS4jrqJYOZfG+2QG107Ly3i0OHSGwkbgs+Obr0bvCZmOB1
7wIkPoaDGiCf/VCyn7rgxfw0HlZ1zhHlDArZilI1gRoL5FgJIrAudE4VEb8Ar/el
AvmWvSSjIjAy4lBwuZOMIdI/RFFf1vKeEDVDD3ygJXFiVUo6qqhXe5nnLdWPWMW5
lYpcxsf2sGTmP8lvox5IncqvyiNiL5xwznP+oM5YEO+hcyQmYTWs0WcL4RjZuRsF
A2BACUld7IPSyFmwCSlLEprNPIVDg0fiEQF3AgMBAAGjggI0MIICMDAdBgNVHQ4E
FgQU5F/mJICsJdc/XXo7+pmTde5DHFgwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3LzVGX21KSUNzSmRjX1hY
bzctcG1UZGU1REhGZy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwYgYIKwYBBQUHAQcBAf8EUzBRME8EAgABMEkD
BAIr7zADBAMr9gAwDAMEAiv2DAMEBCv2IDAMAwQCK/Y0AwQCK/ZgAwQCZyMwMAsD
AwJn7AMEA2fsEDAMAwQCZ+wcAwQCZ+xgMA0GCSqGSIb3DQEBCwUAA4IBAQBaUYaD
H3iQohhzVPm9Muu+FDN03GRmzpke9yBORjRZL9Ops1e03Kccs0BL3VgeW5YjQW6F
d5pahQL3X1S2Osvp1fyrrZtPpmFNttpaFx/RgQeKuue0uNY2b/oBZkPRDYy/9cZi
0hfRm4Jqhd3jQVRjerj5So87LVbW8VrgO0Cyoz7Lg50YLXRkRRTRSZNExDglC9ZJ
QzMxxk7+DwjYP8bzvVbckoBB07IQOWwm2Gpl7K93yheDWAc22SEpeVj5gEoPt9dM
n4lPK6o8938Hw2bRqTvPfxxe7PXLSku+5PsqsRZiezaXeHtDLPdrqssrL6MPK5zJ
CQ2FtggKKmqpmZFT
-----END CERTIFICATE-----
Generated at Sun Jul 20 12:42:57 2025 by rpki-client