Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/NwUJqVoorynUgTFrQ9ghJNBcrMA.roa
File: NwUJqVoorynUgTFrQ9ghJNBcrMA.roa (raw, json)
Hash identifier: gpgp2f9gX4PmVC9vF05Ylp2ATm0EAsgJZfd7wPcY5Ic=
Subject key identifier: 37:05:09:A9:5A:28:AF:29:D4:81:31:6B:43:D8:21:24:D0:5C:AC:C0
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 6E98
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/NwUJqVoorynUgTFrQ9ghJNBcrMA.roa
Signing time: Sun 22 Jun 2025 11:44:19 +0000
ROA not before: Sun 22 Jun 2025 11:44:19 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28312 (0x6e98)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jun 22 11:44:19 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=370509A95A28AF29D481316B43D82124D05CACC0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:c5:8a:65:a6:bb:fc:37:30:c7:7f:9e:8d:5f:
6d:06:a1:a1:4f:0e:a9:4c:f5:42:e2:fd:46:c5:f4:
e5:91:5e:96:48:eb:29:fe:88:b4:5c:c2:6d:44:cd:
d1:8e:09:f3:e7:c6:1c:b0:b0:cc:0d:f9:61:cb:d8:
b2:1b:73:1e:5d:ad:e4:a3:6b:f4:3f:fe:97:3b:f8:
4c:41:50:e3:8a:eb:fc:bc:61:2d:92:34:82:13:a9:
49:34:0c:a6:eb:e3:17:c8:9c:ec:28:7e:91:fa:eb:
0c:53:0f:8d:08:11:f0:d2:1f:89:00:3c:cc:e1:c5:
b3:fa:d2:3f:61:ea:80:ea:d0:81:25:62:5d:f9:4d:
3f:f6:31:54:84:74:1b:6b:b7:ab:35:95:1d:f8:2b:
42:f4:a1:92:7d:4e:6c:f2:50:d6:fb:6c:92:d1:e5:
73:c1:dd:15:ac:66:4b:de:f3:7e:7d:9f:80:fc:3a:
f5:58:6f:7b:47:59:2a:4c:8b:46:2d:49:f4:0b:48:
56:ba:03:ac:37:52:15:c7:a8:70:f0:41:00:62:35:
1f:f4:e0:44:65:7a:52:f5:03:dd:7e:d4:54:2e:c2:
c1:cb:e2:69:0b:cc:bc:76:d2:ff:b5:54:a3:bf:03:
1a:fe:fb:c9:4d:0d:44:f5:c6:2f:f7:cd:54:d7:1d:
94:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:05:09:A9:5A:28:AF:29:D4:81:31:6B:43:D8:21:24:D0:5C:AC:C0
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/NwUJqVoorynUgTFrQ9ghJNBcrMA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
3f:7b:71:69:71:45:04:e4:ae:8b:16:3b:25:87:65:64:b7:97:
48:a7:31:3d:5e:f3:9c:af:ac:4f:cb:55:bc:21:eb:1e:d9:5f:
48:40:7b:d5:a5:5c:b4:d6:fc:d1:e2:a8:2a:bf:68:35:37:5e:
e7:2f:33:60:5c:a3:0a:fb:6c:0a:d0:31:9e:2d:5c:f3:12:2f:
a4:cf:49:ea:73:c3:1c:c2:fd:68:f1:ae:45:e1:fc:3f:32:e6:
fe:18:21:52:9a:e6:bd:21:07:6f:a5:5c:6f:4c:f2:ed:b2:26:
a8:f0:9e:87:2f:41:63:51:47:15:18:cb:c8:ba:27:da:af:a5:
3a:97:87:aa:29:e9:e7:a4:67:84:5f:3c:e1:27:82:71:5f:a4:
d3:8b:d7:5d:de:b2:68:f2:8d:56:60:c7:c6:44:bd:1f:c5:c8:
58:3e:b5:0d:fd:b8:42:09:73:5e:5e:de:c6:da:23:7d:30:c7:
32:b4:07:a1:88:79:45:4b:09:80:f2:70:37:d1:e9:cc:13:2a:
5b:15:1a:ec:ab:9d:e9:99:1a:05:eb:13:fb:8e:cc:c5:d9:9f:
49:dc:7d:d2:15:c8:49:f2:62:ee:3a:2c:7a:f0:54:e1:1a:c4:
53:d8:a7:e9:a5:57:cd:92:48:3a:d9:ff:55:fb:f9:ad:b5:87:
47:91:a1:c9
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgICbpgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNTA2MjIx
MTQ0MTlaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDM3MDUwOUE5NUEyOEFG
MjlENDgxMzE2QjQzRDgyMTI0RDA1Q0FDQzAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDSxYplprv8NzDHf56NX20GoaFPDqlM9ULi/UbF9OWRXpZI6yn+
iLRcwm1EzdGOCfPnxhywsMwN+WHL2LIbcx5dreSja/Q//pc7+ExBUOOK6/y8YS2S
NIITqUk0DKbr4xfInOwofpH66wxTD40IEfDSH4kAPMzhxbP60j9h6oDq0IElYl35
TT/2MVSEdBtrt6s1lR34K0L0oZJ9TmzyUNb7bJLR5XPB3RWsZkve8359n4D8OvVY
b3tHWSpMi0YtSfQLSFa6A6w3UhXHqHDwQQBiNR/04ERlelL1A91+1FQuwsHL4mkL
zLx20v+1VKO/Axr++8lNDUT1xi/3zVTXHZQhAgMBAAGjggI0MIICMDAdBgNVHQ4E
FgQUNwUJqVoorynUgTFrQ9ghJNBcrMAwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L053VUpxVm9vcnluVWdU
RnJROWdoSk5CY3JNQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwYgYIKwYBBQUHAQcBAf8EUzBRME8EAgABMEkD
BAIr7zADBAMr9gAwDAMEAiv2DAMEBCv2IDAMAwQCK/Y0AwQCK/ZgAwQCZyMwMAsD
AwJn7AMEA2fsEDAMAwQCZ+wcAwQCZ+xgMA0GCSqGSIb3DQEBCwUAA4IBAQA/e3Fp
cUUE5K6LFjslh2Vkt5dIpzE9XvOcr6xPy1W8Iese2V9IQHvVpVy01vzR4qgqv2g1
N17nLzNgXKMK+2wK0DGeLVzzEi+kz0nqc8Mcwv1o8a5F4fw/Mub+GCFSmua9IQdv
pVxvTPLtsiao8J6HL0FjUUcVGMvIuifar6U6l4eqKennpGeEXzzhJ4JxX6TTi9dd
3rJo8o1WYMfGRL0fxchYPrUN/bhCCXNeXt7G2iN9MMcytAehiHlFSwmA8nA30enM
EypbFRrsq53pmRoF6xP7jszF2Z9J3H3SFchJ8mLuOix68FThGsRT2KfppVfNkkg6
2f9V+/mttYdHkaHJ
-----END CERTIFICATE-----
Generated at Sun Jul 20 12:47:47 2025 by rpki-client