Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/A5jBJmNPcalakXv9lEalRetB91E.roa
File: A5jBJmNPcalakXv9lEalRetB91E.roa (raw, json)
Hash identifier: ODXQaUwMEdy0HJL7F3RBanU/0Ov4tTG2/oXfETlsYUo=
Subject key identifier: 03:98:C1:26:63:4F:71:A9:5A:91:7B:FD:94:46:A5:45:EB:41:F7:51
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 73DC
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/A5jBJmNPcalakXv9lEalRetB91E.roa
Signing time: Sun 06 Jul 2025 06:45:07 +0000
ROA not before: Sun 06 Jul 2025 06:45:07 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29660 (0x73dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jul 6 06:45:07 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=0398C126634F71A95A917BFD9446A545EB41F751
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:9a:d6:be:4c:2c:52:02:05:af:77:f2:fe:41:
0f:c9:f1:b9:0d:ce:2f:71:c4:0b:51:09:b3:70:7c:
df:14:61:b9:6b:91:17:ec:0e:e7:b3:94:2f:58:95:
88:95:eb:40:0e:6c:6f:24:69:79:d2:f8:59:35:e8:
7e:8d:89:58:e5:63:8c:d3:65:ac:78:d2:77:d6:5f:
41:ee:02:39:80:4c:12:37:bb:87:98:c8:d9:9e:3e:
fb:86:33:9e:a1:d6:f7:8f:5a:c1:5e:36:d0:35:4f:
cc:81:4a:10:10:10:c9:2d:dd:b6:1b:ba:17:77:d9:
a3:63:8e:98:6c:1f:89:e3:4b:98:81:12:51:50:68:
59:f2:74:92:be:26:39:ae:f3:8e:8e:58:ef:d0:15:
32:e0:59:9f:f7:26:b4:c8:2c:92:30:21:ec:06:c8:
94:d3:c6:dd:08:21:31:48:e4:7a:ab:5c:21:ff:e2:
2d:47:06:03:24:cb:e6:f5:fb:dc:77:46:29:87:03:
72:8a:9e:af:80:b8:0c:55:e4:df:ec:c0:02:29:87:
3f:fd:fb:15:57:80:59:f8:9f:2d:ed:1b:2d:df:e1:
1d:62:25:08:a7:51:c8:15:1e:ac:93:60:ff:43:50:
dd:f9:ee:d3:d7:69:db:1c:2f:86:f3:a1:c9:34:c2:
c2:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:98:C1:26:63:4F:71:A9:5A:91:7B:FD:94:46:A5:45:EB:41:F7:51
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/A5jBJmNPcalakXv9lEalRetB91E.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
2f:9f:0d:5a:d7:d3:5e:77:1d:7b:1a:5d:a8:14:24:63:e0:ec:
ec:41:5e:5e:23:98:b2:14:ca:10:35:c3:db:d2:27:d2:02:39:
bc:87:af:a9:0f:8e:4c:e6:b9:18:93:74:f6:a6:80:61:3b:a1:
2c:a1:04:6d:f0:10:22:20:56:b5:c5:1e:d2:9d:33:95:d3:2e:
1a:18:0c:76:76:3e:7e:7c:2f:5b:22:f8:e3:f7:ff:c6:b8:8a:
b4:51:c3:f6:d3:3d:95:aa:1b:14:9d:05:74:37:72:2b:eb:e1:
98:18:c0:a5:8a:15:67:91:85:c8:b4:85:f2:ee:0b:49:ac:bf:
39:1f:0b:9b:01:9b:6d:1b:38:0e:ef:ac:d0:8e:32:2f:20:fb:
63:22:b9:a1:e6:05:a8:a3:2b:06:0c:6c:4a:07:90:c4:28:ea:
d7:48:38:35:aa:cd:e2:55:07:4b:c3:85:63:99:2f:ab:b3:5c:
ac:d6:62:97:cf:36:e9:d3:a5:95:8c:0b:d0:d7:bf:9b:a2:48:
ab:3b:2e:ba:73:6f:a6:42:66:6a:c1:d3:94:33:85:ae:aa:03:
97:15:49:80:2f:66:d8:46:87:47:81:da:c6:47:ca:a6:be:35:
56:05:a4:1a:c3:8c:91:2d:74:8c:83:02:15:c9:9e:d4:7f:10:
c3:97:c1:51
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgICc9wwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNTA3MDYw
NjQ1MDdaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDAzOThDMTI2NjM0Rjcx
QTk1QTkxN0JGRDk0NDZBNTQ1RUI0MUY3NTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDhmta+TCxSAgWvd/L+QQ/J8bkNzi9xxAtRCbNwfN8UYblrkRfs
DuezlC9YlYiV60AObG8kaXnS+Fk16H6NiVjlY4zTZax40nfWX0HuAjmATBI3u4eY
yNmePvuGM56h1vePWsFeNtA1T8yBShAQEMkt3bYbuhd32aNjjphsH4njS5iBElFQ
aFnydJK+Jjmu846OWO/QFTLgWZ/3JrTILJIwIewGyJTTxt0IITFI5HqrXCH/4i1H
BgMky+b1+9x3RimHA3KKnq+AuAxV5N/swAIphz/9+xVXgFn4ny3tGy3f4R1iJQin
UcgVHqyTYP9DUN357tPXadscL4bzock0wsJdAgMBAAGjggI0MIICMDAdBgNVHQ4E
FgQUA5jBJmNPcalakXv9lEalRetB91EwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L0E1akJKbU5QY2FsYWtY
djlsRWFsUmV0QjkxRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwYgYIKwYBBQUHAQcBAf8EUzBRME8EAgABMEkD
BAIr7zADBAMr9gAwDAMEAiv2DAMEBCv2IDAMAwQCK/Y0AwQCK/ZgAwQCZyMwMAsD
AwJn7AMEA2fsEDAMAwQCZ+wcAwQCZ+xgMA0GCSqGSIb3DQEBCwUAA4IBAQAvnw1a
19Nedx17Gl2oFCRj4OzsQV5eI5iyFMoQNcPb0ifSAjm8h6+pD45M5rkYk3T2poBh
O6EsoQRt8BAiIFa1xR7SnTOV0y4aGAx2dj5+fC9bIvjj9//GuIq0UcP20z2VqhsU
nQV0N3Ir6+GYGMClihVnkYXItIXy7gtJrL85HwubAZttGzgO76zQjjIvIPtjIrmh
5gWooysGDGxKB5DEKOrXSDg1qs3iVQdLw4VjmS+rs1ys1mKXzzbp06WVjAvQ17+b
okirOy66c2+mQmZqwdOUM4WuqgOXFUmAL2bYRodHgdrGR8qmvjVWBaQaw4yRLXSM
gwIVyZ7UfxDDl8FR
-----END CERTIFICATE-----
Generated at Sun Jul 20 12:54:49 2025 by rpki-client