Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/IWpA5mIh3tLBdCRNTOECXcuDXq4.roa
File: IWpA5mIh3tLBdCRNTOECXcuDXq4.roa (raw, json)
Hash identifier: 4KJYIMx+cYI0w6f9FVV+ktupxnU0QWOF9faysKWlCSk=
Subject key identifier: 21:6A:40:E6:62:21:DE:D2:C1:74:24:4D:4C:E1:02:5D:CB:83:5E:AE
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 647E
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/IWpA5mIh3tLBdCRNTOECXcuDXq4.roa
Signing time: Mon 26 May 2025 01:42:03 +0000
ROA not before: Mon 26 May 2025 01:42:03 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25726 (0x647e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 26 01:42:03 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=216A40E66221DED2C174244D4CE1025DCB835EAE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:1e:24:f9:7b:e7:6a:c4:96:69:c0:dd:24:c5:
a5:ee:58:04:42:94:54:63:2c:98:1b:74:38:9d:ab:
88:5c:d3:7d:9c:33:ae:25:fa:8c:c0:99:67:bb:d6:
df:cb:83:cc:c4:7a:9d:a3:d5:48:da:36:0e:ed:b5:
47:63:15:fb:df:89:51:75:8f:5f:84:76:ce:09:b5:
67:c2:0c:3e:f6:6f:d6:f4:38:d7:22:66:93:7a:cb:
df:ac:a7:7a:26:91:bf:09:88:cb:47:96:0d:a7:b3:
bb:d4:6f:02:30:7e:79:a5:c9:d0:54:29:42:cf:0b:
c5:3d:19:7f:b2:74:62:eb:45:90:d7:21:e1:bc:2f:
79:17:e6:a7:72:df:29:49:aa:50:2c:ee:d3:53:3f:
73:97:49:4e:58:8b:92:35:1f:2b:a0:58:6c:52:2b:
33:30:1a:e5:06:a6:ae:e0:a5:82:13:88:52:1e:8e:
28:3d:15:6a:19:77:b2:45:a7:ab:77:f3:81:45:07:
a2:50:54:8c:10:72:81:b9:04:24:e6:c5:ba:89:23:
a9:4d:28:84:a2:0f:32:58:1a:c8:da:08:01:30:74:
24:c5:50:b6:32:e9:aa:09:c1:83:ee:31:53:0b:0b:
01:34:29:15:64:dc:7a:ab:38:80:1c:ff:48:49:66:
30:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:6A:40:E6:62:21:DE:D2:C1:74:24:4D:4C:E1:02:5D:CB:83:5E:AE
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/IWpA5mIh3tLBdCRNTOECXcuDXq4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
1d:a1:35:c7:30:aa:29:08:d2:f3:a7:bd:01:5b:13:a7:8a:03:
83:bb:ed:bb:5a:28:d6:1a:a2:73:5e:48:89:54:93:b2:c1:db:
f7:81:32:d3:d1:ba:4e:4d:93:d5:53:14:ff:23:b2:62:57:8b:
1a:54:db:1f:60:f3:8b:ff:57:82:32:08:2e:eb:d1:62:72:99:
d3:db:cd:29:0a:b2:25:28:70:0c:36:6b:38:83:8d:04:c1:2c:
ca:7f:5e:11:3b:25:db:28:78:bb:7a:41:8d:0f:4a:0a:76:e9:
c7:69:ee:26:45:a0:b4:22:93:2c:c1:5f:e2:e1:93:ac:d1:81:
f3:08:9c:67:66:ae:88:3c:27:9f:2b:e6:90:34:6f:1b:48:5b:
d2:75:79:a0:17:96:31:b4:62:e1:93:d4:1d:e4:42:48:fe:05:
bf:6f:68:35:af:27:5a:1f:20:4f:7f:2a:0e:81:e8:da:11:bb:
f8:b5:8e:d8:0d:36:25:82:4c:98:14:e5:4a:a3:e0:70:7e:63:
e8:1c:80:b0:14:8d:53:56:e4:60:67:a8:8e:cb:3f:08:12:11:
09:f9:c4:0f:6c:eb:72:fe:33:d5:de:d1:44:51:c1:88:68:f0:
cb:42:e4:81:60:b5:de:7b:b0:d2:9d:43:47:17:55:89:15:2c:
f0:3a:95:9d
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgICZH4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNTA1MjYw
MTQyMDNaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDIxNkE0MEU2NjIyMURF
RDJDMTc0MjQ0RDRDRTEwMjVEQ0I4MzVFQUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDXHiT5e+dqxJZpwN0kxaXuWARClFRjLJgbdDidq4hc032cM64l
+ozAmWe71t/Lg8zEep2j1UjaNg7ttUdjFfvfiVF1j1+Eds4JtWfCDD72b9b0ONci
ZpN6y9+sp3omkb8JiMtHlg2ns7vUbwIwfnmlydBUKULPC8U9GX+ydGLrRZDXIeG8
L3kX5qdy3ylJqlAs7tNTP3OXSU5Yi5I1HyugWGxSKzMwGuUGpq7gpYITiFIejig9
FWoZd7JFp6t384FFB6JQVIwQcoG5BCTmxbqJI6lNKISiDzJYGsjaCAEwdCTFULYy
6aoJwYPuMVMLCwE0KRVk3HqrOIAc/0hJZjBdAgMBAAGjggI0MIICMDAdBgNVHQ4E
FgQUIWpA5mIh3tLBdCRNTOECXcuDXq4wHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L0lXcEE1bUloM3RMQmRD
Uk5UT0VDWGN1RFhxNC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwYgYIKwYBBQUHAQcBAf8EUzBRME8EAgABMEkD
BAIr7zADBAMr9gAwDAMEAiv2DAMEBCv2IDAMAwQCK/Y0AwQCK/ZgAwQCZyMwMAsD
AwJn7AMEA2fsEDAMAwQCZ+wcAwQCZ+xgMA0GCSqGSIb3DQEBCwUAA4IBAQAdoTXH
MKopCNLzp70BWxOnigODu+27WijWGqJzXkiJVJOywdv3gTLT0bpOTZPVUxT/I7Ji
V4saVNsfYPOL/1eCMggu69FicpnT280pCrIlKHAMNms4g40EwSzKf14ROyXbKHi7
ekGND0oKdunHae4mRaC0IpMswV/i4ZOs0YHzCJxnZq6IPCefK+aQNG8bSFvSdXmg
F5YxtGLhk9Qd5EJI/gW/b2g1rydaHyBPfyoOgejaEbv4tY7YDTYlgkyYFOVKo+Bw
fmPoHICwFI1TVuRgZ6iOyz8IEhEJ+cQPbOty/jPV3tFEUcGIaPDLQuSBYLXee7DS
nUNHF1WJFSzwOpWd
-----END CERTIFICATE-----
Generated at Wed Jun 4 01:20:10 2025 by rpki-client