Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/HvjFIYUbN82SyH96pEOrFysWEAk.roa
File: HvjFIYUbN82SyH96pEOrFysWEAk.roa (raw, json)
Hash identifier: SVwpEu2DXp8ZTfuI/3+IQgTLMPhW6w57QJu2Mjm1RNc=
Subject key identifier: 1E:F8:C5:21:85:1B:37:CD:92:C8:7F:7A:A4:43:AB:17:2B:16:10:09
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 642A
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/HvjFIYUbN82SyH96pEOrFysWEAk.roa
Signing time: Sun 25 May 2025 04:43:22 +0000
ROA not before: Sun 25 May 2025 04:43:22 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25642 (0x642a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 25 04:43:22 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=1EF8C521851B37CD92C87F7AA443AB172B161009
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:cd:57:d5:24:81:d0:41:cb:16:1f:a3:50:c1:
14:d4:27:fc:da:09:06:90:39:e6:69:52:ed:00:af:
8e:34:3c:05:f0:6d:f0:f1:d8:f2:c7:e7:67:72:a7:
a2:fa:d6:3b:66:1a:01:c5:c0:f4:19:ad:17:fd:6f:
bd:47:ab:4f:08:42:2f:d9:35:c3:b2:ed:a2:bf:27:
cb:df:06:a9:52:35:6f:50:78:53:9a:2b:92:50:c3:
e0:26:47:9c:1d:0f:3d:5e:78:b2:7f:83:bf:6b:82:
1c:5a:64:74:0c:a4:d5:67:c3:b1:30:0e:d6:e8:23:
4c:eb:b9:d4:ad:33:9b:16:7f:9c:62:30:95:a4:45:
b1:3f:cc:51:90:d8:9d:eb:9e:20:90:a4:5f:a7:63:
00:8f:23:e4:90:60:40:4e:4b:4e:b0:c8:f9:d8:9f:
a8:a1:a3:29:9a:a2:e1:ae:f5:1c:e8:7a:2b:9b:1a:
ce:ce:53:5c:a2:32:20:28:04:52:29:09:63:1c:ee:
2c:45:40:34:69:59:cc:fc:c0:bd:42:9c:a2:8a:b8:
55:1b:b0:3d:82:8f:22:d7:60:d1:ee:64:3b:f2:49:
37:61:72:03:f2:6d:a3:10:a5:be:77:64:1f:1b:d5:
98:b8:fe:c9:a4:d8:f1:94:06:0b:53:73:2a:85:7c:
12:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:F8:C5:21:85:1B:37:CD:92:C8:7F:7A:A4:43:AB:17:2B:16:10:09
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/HvjFIYUbN82SyH96pEOrFysWEAk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
4d:53:60:57:49:a8:db:94:a8:81:f5:e5:01:20:57:2a:d5:14:
30:b9:1f:26:27:3a:48:47:44:f8:0d:7d:19:55:d8:48:4a:a3:
a5:8b:ac:86:40:f5:30:4f:22:c7:37:82:8e:84:f9:29:99:be:
11:f9:b9:c6:0b:1f:3f:0d:33:b9:e2:b5:0e:81:ec:29:5b:1c:
0d:53:74:65:a9:bc:1a:47:75:d1:e4:69:f7:b0:fc:d3:4c:a7:
3b:22:7b:77:b8:56:3d:18:a1:66:75:dd:73:0c:c5:17:8d:db:
e9:5c:8d:56:ae:74:e6:0d:cd:f7:9d:84:9c:2e:79:c1:db:d8:
90:3e:e2:40:ce:f5:66:3c:fe:c2:92:91:45:5f:d7:2f:6e:2e:
8c:c8:ca:3c:d6:77:9d:0c:8e:c5:38:36:35:5c:bc:f0:8f:ee:
ac:fa:50:5d:ec:6a:29:69:51:7a:00:dc:37:9f:ed:d3:65:a2:
a8:bb:dd:cb:cd:71:73:f0:1d:3a:68:ab:b9:f0:a3:dd:1b:d1:
60:02:d0:4e:ca:0a:5d:56:27:1e:a4:1f:0f:c0:bd:c9:e6:f3:
e7:c4:41:99:ce:0b:32:ed:11:04:3e:ef:19:6f:8a:b3:f7:5e:
84:25:f0:8d:f1:d0:50:82:a5:23:7e:33:db:6e:f5:55:88:7d:
d2:56:36:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 01:12:14 2025 by rpki-client