Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/9re-eUFrevoTiooqbsB-Ysn23U4.roa
File: 9re-eUFrevoTiooqbsB-Ysn23U4.roa (raw, json)
Hash identifier: WXHfwuSqXGvdluRaf+CQuhQHsCOq23XR96a6xR2K8Y4=
Subject key identifier: F6:B7:BE:79:41:6B:7A:FA:13:8A:8A:2A:6E:C0:7E:62:C9:F6:DD:4E
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 7168
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/9re-eUFrevoTiooqbsB-Ysn23U4.roa
Signing time: Sun 29 Jun 2025 17:44:43 +0000
ROA not before: Sun 29 Jun 2025 17:44:43 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29032 (0x7168)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jun 29 17:44:43 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=F6B7BE79416B7AFA138A8A2A6EC07E62C9F6DD4E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:12:ed:58:02:6e:34:af:de:36:6e:aa:9d:b9:
da:c6:58:2b:c8:c9:b9:4c:9c:84:22:54:9f:fd:f2:
fe:0a:13:f8:06:fe:ac:75:c8:95:f5:32:ba:48:7f:
29:4a:32:08:0c:de:29:aa:84:f0:18:37:00:bc:12:
38:ee:78:be:ae:56:1d:41:97:7a:46:9a:c0:34:03:
cd:b9:c4:3d:59:e1:fa:5a:04:d8:78:28:3b:b4:67:
dd:42:40:26:99:2f:13:1a:09:16:9e:f9:53:6e:c7:
fc:04:2d:7c:54:ba:2f:ba:38:c0:29:5d:8e:7d:46:
37:9c:24:4a:d5:8b:c0:48:2c:87:3a:e1:9b:c5:c1:
35:38:16:15:7b:b0:34:2f:0c:53:8c:f3:62:e7:67:
c4:3d:30:ea:35:d0:c3:34:e5:f4:27:c7:f9:03:da:
fc:88:2e:89:f9:49:28:ed:ef:6d:c5:e5:a5:9b:60:
12:8c:e5:a5:b3:f4:96:23:dd:b2:ec:f3:96:63:a3:
24:94:ca:e3:5f:97:71:c3:ed:32:48:e8:e8:07:a9:
fb:c6:5a:a5:7d:e5:de:0c:f5:c9:ad:26:ef:14:4a:
d8:27:91:4a:80:fb:60:fe:86:b6:cf:02:b0:08:66:
9b:13:d0:41:3e:23:f9:9c:11:c2:37:0a:94:0b:19:
cf:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:B7:BE:79:41:6B:7A:FA:13:8A:8A:2A:6E:C0:7E:62:C9:F6:DD:4E
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/9re-eUFrevoTiooqbsB-Ysn23U4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
43:b1:a1:4b:5e:0a:a6:cc:74:9b:5f:70:ab:3d:2b:f2:19:6d:
44:0b:a2:3f:f4:0e:f6:8c:a9:46:b6:cd:8f:71:0d:02:4f:51:
0b:a0:ae:23:e9:9c:64:59:c8:8b:19:73:ef:c5:a7:84:54:06:
56:dd:2d:21:09:f5:54:d6:11:0c:5c:26:73:6b:0f:87:d3:9c:
d3:81:dd:6c:16:40:e5:fc:ad:50:17:b2:6e:90:0c:d5:6b:08:
33:54:a1:cb:ae:63:99:f0:2f:e6:21:fc:42:7d:7d:6d:7e:7f:
6e:f5:b4:77:76:d4:4b:33:6d:bd:c5:7c:c5:d1:ab:9a:91:c5:
a9:5d:e7:41:cc:99:27:4c:2a:09:a1:49:c3:d2:48:ec:3d:34:
29:51:88:5e:e0:8a:75:79:f9:88:26:46:85:4f:5d:65:9f:5f:
39:0c:46:a1:86:b8:b8:c0:1a:fb:6c:32:b0:b6:ea:5d:1f:49:
38:90:b1:0f:65:5a:a2:2e:55:8b:84:69:ae:55:9c:b0:df:de:
38:7a:aa:9d:c9:d4:0a:f1:bb:e4:bb:e8:ab:53:c7:1d:46:db:
6e:f2:06:de:90:4f:33:17:e2:65:27:a3:07:ed:bd:8e:8c:ef:
e9:fe:2d:07:cc:5b:5b:31:2b:05:d0:9e:2d:44:07:72:a7:a8:
12:12:5d:d8
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgICcWgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNTA2Mjkx
NzQ0NDNaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKEY2QjdCRTc5NDE2QjdB
RkExMzhBOEEyQTZFQzA3RTYyQzlGNkRENEUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCiEu1YAm40r942bqqdudrGWCvIyblMnIQiVJ/98v4KE/gG/qx1
yJX1MrpIfylKMggM3imqhPAYNwC8EjjueL6uVh1Bl3pGmsA0A825xD1Z4fpaBNh4
KDu0Z91CQCaZLxMaCRae+VNux/wELXxUui+6OMApXY59RjecJErVi8BILIc64ZvF
wTU4FhV7sDQvDFOM82LnZ8Q9MOo10MM05fQnx/kD2vyILon5SSjt723F5aWbYBKM
5aWz9JYj3bLs85ZjoySUyuNfl3HD7TJI6OgHqfvGWqV95d4M9cmtJu8UStgnkUqA
+2D+hrbPArAIZpsT0EE+I/mcEcI3CpQLGc9JAgMBAAGjggI0MIICMDAdBgNVHQ4E
FgQU9re+eUFrevoTiooqbsB+Ysn23U4wHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3LzlyZS1lVUZyZXZvVGlv
b3Fic0ItWXNuMjNVNC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwYgYIKwYBBQUHAQcBAf8EUzBRME8EAgABMEkD
BAIr7zADBAMr9gAwDAMEAiv2DAMEBCv2IDAMAwQCK/Y0AwQCK/ZgAwQCZyMwMAsD
AwJn7AMEA2fsEDAMAwQCZ+wcAwQCZ+xgMA0GCSqGSIb3DQEBCwUAA4IBAQBDsaFL
XgqmzHSbX3CrPSvyGW1EC6I/9A72jKlGts2PcQ0CT1ELoK4j6ZxkWciLGXPvxaeE
VAZW3S0hCfVU1hEMXCZzaw+H05zTgd1sFkDl/K1QF7JukAzVawgzVKHLrmOZ8C/m
IfxCfX1tfn9u9bR3dtRLM229xXzF0auakcWpXedBzJknTCoJoUnD0kjsPTQpUYhe
4Ip1efmIJkaFT11ln185DEahhri4wBr7bDKwtupdH0k4kLEPZVqiLlWLhGmuVZyw
3944eqqdydQK8bvku+irU8cdRttu8gbekE8zF+JlJ6MH7b2OjO/p/i0HzFtbMSsF
0J4tRAdyp6gSEl3Y
-----END CERTIFICATE-----
Generated at Sun Jul 20 12:45:21 2025 by rpki-client