Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/CoGCyeeqTq_0oFg5HypmJbXdIvk.roa
File: CoGCyeeqTq_0oFg5HypmJbXdIvk.roa (raw, json)
Hash identifier: /P0ZGcScXBwNWhuOO78dpsOd+1UqVlqfMJb5Fm/GnyI=
Subject key identifier: 0A:81:82:C9:E7:AA:4E:AF:F4:A0:58:39:1F:2A:66:25:B5:DD:22:F9
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 741C
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/CoGCyeeqTq_0oFg5HypmJbXdIvk.roa
Signing time: Sun 06 Jul 2025 22:45:00 +0000
ROA not before: Sun 06 Jul 2025 22:45:00 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29724 (0x741c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jul 6 22:45:00 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=0A8182C9E7AA4EAFF4A058391F2A6625B5DD22F9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:0e:c1:2f:ab:a8:3c:19:25:3b:14:96:0d:0e:
1d:c0:f5:7b:67:47:82:75:99:8d:18:2d:0d:cc:ea:
0e:a5:85:d8:65:17:f0:e6:8b:dc:de:10:c1:5a:84:
ae:ee:3a:ad:92:70:44:60:a8:a1:16:a9:ca:62:d9:
b9:1e:50:04:79:20:35:ad:61:bb:1e:d4:ec:3f:ca:
ba:fe:b6:cd:d5:f3:c1:1a:5d:28:0a:c4:c5:12:04:
aa:8e:85:7a:36:fd:9c:67:76:ed:ac:37:d1:1e:47:
ad:19:a8:87:4c:9e:b1:c7:db:24:92:13:53:96:2b:
32:6e:bb:53:83:92:82:a8:3f:55:64:77:f2:84:22:
76:52:a6:9b:38:b7:56:63:17:12:50:da:00:46:76:
f4:63:72:2f:7f:04:eb:22:6d:81:1a:df:d0:b2:2b:
7f:20:39:a2:3a:86:0e:65:13:ea:2a:73:f9:ca:b7:
9b:a7:7c:c1:38:ed:41:00:ca:d6:12:c1:b1:78:14:
6f:8b:d4:5d:bd:00:bf:df:2e:71:45:e9:1c:cd:07:
05:3e:5b:07:dc:15:2a:ca:90:da:81:de:b5:93:08:
7d:87:ee:b6:74:4c:ee:86:4d:c9:72:6f:37:a7:23:
1b:a3:6e:5e:14:42:40:dd:be:ac:65:14:08:08:83:
53:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:81:82:C9:E7:AA:4E:AF:F4:A0:58:39:1F:2A:66:25:B5:DD:22:F9
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/CoGCyeeqTq_0oFg5HypmJbXdIvk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
a2:32:72:0a:b2:58:02:fc:1d:de:c3:52:12:24:e9:46:e7:0e:
a9:86:b1:d5:cc:c9:25:7f:f5:af:b3:99:d3:19:f2:d2:34:3c:
e6:90:7b:2e:d4:a6:21:8e:ca:5f:76:00:ce:a5:c7:86:a4:63:
69:f0:56:15:0c:e2:7c:0c:25:d8:5b:ef:ed:d2:e6:d5:7a:99:
ee:30:63:c3:59:f4:16:2f:e7:6e:46:82:a8:62:23:87:00:81:
bf:e4:61:64:f9:64:47:b5:16:48:f8:29:7e:ff:b9:35:6b:fd:
15:de:29:3f:c2:2b:b5:fa:f8:b6:ed:38:31:35:55:8a:c4:2c:
25:60:ba:f7:b5:3d:b8:19:70:c2:09:c2:0f:e0:75:33:b3:36:
85:dc:f0:a2:6e:29:95:5d:21:b1:39:97:13:f1:1f:9a:a1:4a:
9a:f8:25:77:5e:83:c5:a3:63:cc:5e:a1:8f:c7:53:cd:fe:45:
d1:69:19:43:b7:20:db:c5:ff:63:58:1d:a2:07:bd:f2:cd:c2:
9d:38:4b:ca:8b:55:f8:65:0a:c2:98:10:5b:19:ca:ad:dd:8e:
0f:38:71:0f:c9:e2:09:39:ee:80:cf:f8:87:56:5b:b4:45:51:
5b:e2:aa:c6:6c:95:9c:58:74:62:c3:f1:a0:82:0d:35:05:71:
aa:43:89:79
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgICdBwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNTA3MDYy
MjQ1MDBaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDBBODE4MkM5RTdBQTRF
QUZGNEEwNTgzOTFGMkE2NjI1QjVERDIyRjkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDYDsEvq6g8GSU7FJYNDh3A9XtnR4J1mY0YLQ3M6g6lhdhlF/Dm
i9zeEMFahK7uOq2ScERgqKEWqcpi2bkeUAR5IDWtYbse1Ow/yrr+ts3V88EaXSgK
xMUSBKqOhXo2/Zxndu2sN9EeR60ZqIdMnrHH2ySSE1OWKzJuu1ODkoKoP1Vkd/KE
InZSpps4t1ZjFxJQ2gBGdvRjci9/BOsibYEa39CyK38gOaI6hg5lE+oqc/nKt5un
fME47UEAytYSwbF4FG+L1F29AL/fLnFF6RzNBwU+WwfcFSrKkNqB3rWTCH2H7rZ0
TO6GTclybzenIxujbl4UQkDdvqxlFAgIg1ObAgMBAAGjggI0MIICMDAdBgNVHQ4E
FgQUCoGCyeeqTq/0oFg5HypmJbXdIvkwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L0NvR0N5ZWVxVHFfMG9G
ZzVIeXBtSmJYZEl2ay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwYgYIKwYBBQUHAQcBAf8EUzBRME8EAgABMEkD
BAIr7zADBAMr9gAwDAMEAiv2DAMEBCv2IDAMAwQCK/Y0AwQCK/ZgAwQCZyMwMAsD
AwJn7AMEA2fsEDAMAwQCZ+wcAwQCZ+xgMA0GCSqGSIb3DQEBCwUAA4IBAQCiMnIK
slgC/B3ew1ISJOlG5w6phrHVzMklf/Wvs5nTGfLSNDzmkHsu1KYhjspfdgDOpceG
pGNp8FYVDOJ8DCXYW+/t0ubVepnuMGPDWfQWL+duRoKoYiOHAIG/5GFk+WRHtRZI
+Cl+/7k1a/0V3ik/wiu1+vi27TgxNVWKxCwlYLr3tT24GXDCCcIP4HUzszaF3PCi
bimVXSGxOZcT8R+aoUqa+CV3XoPFo2PMXqGPx1PN/kXRaRlDtyDbxf9jWB2iB73y
zcKdOEvKi1X4ZQrCmBBbGcqt3Y4POHEPyeIJOe6Az/iHVlu0RVFb4qrGbJWcWHRi
w/Gggg01BXGqQ4l5
-----END CERTIFICATE-----
Generated at Sun Jul 20 12:45:32 2025 by rpki-client