Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/C43YlY-l8hvBZzNTA-8Yy6TBFuQ.roa
File: C43YlY-l8hvBZzNTA-8Yy6TBFuQ.roa (raw, json)
Hash identifier: FeMcPqllOiurY30tV20T/K83A3wmVvRfLvFnAkC8JoI=
Subject key identifier: 0B:8D:D8:95:8F:A5:F2:1B:C1:67:33:53:03:EF:18:CB:A4:C1:16:E4
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 6166
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/C43YlY-l8hvBZzNTA-8Yy6TBFuQ.roa
Signing time: Sat 17 May 2025 19:40:39 +0000
ROA not before: Sat 17 May 2025 19:40:39 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24934 (0x6166)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 17 19:40:39 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=0B8DD8958FA5F21BC167335303EF18CBA4C116E4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:05:8e:6b:1a:be:8e:67:2e:72:eb:28:90:5f:
d0:b0:40:85:a8:34:dd:20:dc:68:7a:3f:48:d3:3d:
fa:12:38:8f:8e:4a:25:63:dd:40:31:3d:c2:4a:dc:
25:8d:0b:66:68:71:03:5a:ad:9b:ca:8a:2d:fb:f1:
5e:92:e9:9d:10:e1:d0:17:0a:31:fe:ba:45:6f:00:
80:0d:1b:94:a0:50:7c:cf:26:0e:e0:60:88:38:a6:
8f:79:28:bd:a0:36:4a:71:9c:87:2e:ca:53:c5:76:
2d:6b:9c:d8:9c:a3:7c:8f:73:1a:0a:b1:09:b3:f7:
c2:f6:92:4f:ca:4b:f8:88:e0:3f:38:2e:d2:35:85:
16:48:86:64:fb:96:79:00:e1:cd:50:2c:ed:bd:07:
12:d7:7e:41:d3:97:20:65:d7:4e:b5:18:db:ac:c6:
e4:87:e6:fb:ae:4f:9b:b0:12:e9:2c:5e:47:83:b0:
9b:78:86:ed:68:76:c9:b2:ab:e7:91:0e:f7:9d:9f:
f5:c4:9d:5e:05:30:6d:48:48:43:90:d7:01:a6:9d:
58:63:f0:09:00:a9:67:d6:23:0b:9b:67:ba:16:25:
92:4c:06:ed:59:4d:be:fc:94:bd:06:16:d9:2b:74:
b7:12:52:fb:71:ec:55:a2:75:e7:fa:c7:85:28:11:
fc:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:8D:D8:95:8F:A5:F2:1B:C1:67:33:53:03:EF:18:CB:A4:C1:16:E4
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/C43YlY-l8hvBZzNTA-8Yy6TBFuQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
2c:73:8f:ed:ff:ed:a0:7b:22:aa:d3:fe:19:7f:94:56:72:ed:
b4:52:40:62:34:23:e5:a1:17:20:72:45:50:ef:3b:50:91:53:
b2:df:8d:38:33:a3:b2:e6:35:41:59:7d:5d:84:b6:b7:d2:3e:
54:3b:9c:ad:8f:57:fc:3f:a8:6b:65:3a:72:d1:0b:9a:81:be:
75:da:57:64:25:93:0f:9e:a6:25:96:d5:ad:f1:75:91:87:c0:
a1:7e:4b:18:d9:64:8e:2a:56:7d:c0:84:01:15:71:32:a5:ba:
de:df:99:6d:11:82:6f:b5:f3:97:8a:67:63:92:bc:11:56:21:
e5:be:dd:b2:0c:fa:36:80:f7:c5:cc:25:11:fb:80:2a:38:3a:
83:68:85:ce:20:3e:8a:55:a1:98:37:82:07:ab:72:df:64:f9:
b4:61:6c:4b:2b:2b:da:4d:5f:28:dc:78:49:a8:7f:8f:66:55:
ae:5c:f6:c6:23:d8:00:26:62:ae:d0:84:2b:ab:4e:31:5c:cf:
81:10:70:ad:a5:32:c3:aa:6c:cc:80:61:44:7c:6b:f8:56:f3:
68:0c:10:62:d2:98:6d:48:71:41:00:90:de:2e:ca:ce:0f:52:
3c:78:2f:e6:f5:46:9d:94:40:b9:73:43:11:0d:93:74:6e:50:
12:b3:e4:98
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgICYWYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNTA1MTcx
OTQwMzlaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDBCOEREODk1OEZBNUYy
MUJDMTY3MzM1MzAzRUYxOENCQTRDMTE2RTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDoBY5rGr6OZy5y6yiQX9CwQIWoNN0g3Gh6P0jTPfoSOI+OSiVj
3UAxPcJK3CWNC2ZocQNarZvKii378V6S6Z0Q4dAXCjH+ukVvAIANG5SgUHzPJg7g
YIg4po95KL2gNkpxnIcuylPFdi1rnNico3yPcxoKsQmz98L2kk/KS/iI4D84LtI1
hRZIhmT7lnkA4c1QLO29BxLXfkHTlyBl1061GNusxuSH5vuuT5uwEuksXkeDsJt4
hu1odsmyq+eRDvedn/XEnV4FMG1ISEOQ1wGmnVhj8AkAqWfWIwubZ7oWJZJMBu1Z
Tb78lL0GFtkrdLcSUvtx7FWidef6x4UoEfyDAgMBAAGjggI0MIICMDAdBgNVHQ4E
FgQUC43YlY+l8hvBZzNTA+8Yy6TBFuQwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L0M0M1lsWS1sOGh2Qlp6
TlRBLThZeTZUQkZ1US5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwYgYIKwYBBQUHAQcBAf8EUzBRME8EAgABMEkD
BAIr7zADBAMr9gAwDAMEAiv2DAMEBCv2IDAMAwQCK/Y0AwQCK/ZgAwQCZyMwMAsD
AwJn7AMEA2fsEDAMAwQCZ+wcAwQCZ+xgMA0GCSqGSIb3DQEBCwUAA4IBAQAsc4/t
/+2geyKq0/4Zf5RWcu20UkBiNCPloRcgckVQ7ztQkVOy3404M6Oy5jVBWX1dhLa3
0j5UO5ytj1f8P6hrZTpy0Quagb512ldkJZMPnqYlltWt8XWRh8ChfksY2WSOKlZ9
wIQBFXEypbre35ltEYJvtfOXimdjkrwRViHlvt2yDPo2gPfFzCUR+4AqODqDaIXO
ID6KVaGYN4IHq3LfZPm0YWxLKyvaTV8o3HhJqH+PZlWuXPbGI9gAJmKu0IQrq04x
XM+BEHCtpTLDqmzMgGFEfGv4VvNoDBBi0phtSHFBAJDeLsrOD1I8eC/m9UadlEC5
c0MRDZN0blASs+SY
-----END CERTIFICATE-----
Generated at Wed Jun 4 01:00:12 2025 by rpki-client