Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/Puii4HEecryNS3_mNI4lVCEspZ8.roa
File: Puii4HEecryNS3_mNI4lVCEspZ8.roa (raw, json)
Hash identifier: 42pUm5c8N5UU0n5wPKLGeMxnXfgaUilJreJZclW/8+s=
Subject key identifier: 3E:E8:A2:E0:71:1E:72:BC:8D:4B:7F:E6:34:8E:25:54:21:2C:A5:9F
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 6304
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/Puii4HEecryNS3_mNI4lVCEspZ8.roa
Signing time: Thu 22 May 2025 03:10:49 +0000
ROA not before: Thu 22 May 2025 03:10:49 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25348 (0x6304)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 22 03:10:49 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=3EE8A2E0711E72BC8D4B7FE6348E2554212CA59F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:0a:c6:cb:a0:67:ed:eb:98:48:0c:64:1e:70:
d4:fd:09:0f:a7:b6:03:d7:03:c6:c6:5f:44:51:d0:
9f:f2:3a:cc:65:1e:90:49:f3:36:10:b6:db:76:f3:
b7:19:6f:cf:b0:c3:c1:aa:85:9f:25:af:e2:ce:dc:
f6:c5:cc:7c:ba:5e:c3:01:e0:d7:e5:07:22:e0:38:
ae:cf:47:36:cf:42:e6:89:c2:ff:c3:b9:2b:97:3d:
7a:42:a7:a5:53:4b:f0:75:ee:7f:71:a5:6e:80:55:
e2:ed:38:58:c3:de:e2:f1:ba:af:e7:06:1b:de:1a:
b6:41:e5:a0:99:eb:08:c4:a2:77:c7:a6:02:53:37:
0f:52:17:9e:aa:3c:3a:4c:f0:eb:76:84:5c:1a:95:
e2:73:6b:10:1e:b4:89:3a:1a:bf:e4:7d:2c:69:77:
6f:b0:4c:8c:5a:66:db:35:18:4d:7d:46:4e:53:f4:
d0:01:dc:2a:e2:1b:ae:63:45:85:c8:28:c1:12:8b:
36:8d:ad:78:6e:a9:5c:53:ae:8d:ea:ad:80:49:d3:
c8:99:22:e7:5c:10:b8:ec:56:67:21:df:c4:45:de:
4e:db:52:ad:af:8c:a9:21:f3:89:01:56:98:6c:5c:
cc:87:9b:a7:60:d9:f7:fa:f6:1a:d8:f5:8e:7c:96:
bd:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:E8:A2:E0:71:1E:72:BC:8D:4B:7F:E6:34:8E:25:54:21:2C:A5:9F
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/Puii4HEecryNS3_mNI4lVCEspZ8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
1a:ed:5b:ce:49:e3:78:84:8a:c8:e5:8a:a6:8e:fe:51:58:c9:
59:74:d3:6f:89:da:4d:20:a4:15:fa:39:b2:09:36:0e:e2:bd:
cc:10:c7:c5:6c:df:13:c7:85:a1:b9:63:17:ac:aa:cf:99:d4:
69:38:03:a2:3f:b5:ad:d8:86:84:c0:c9:5c:3e:eb:a5:6d:45:
45:e2:a7:3e:80:09:ce:fb:bd:41:3d:40:c2:62:34:ac:4d:8c:
23:0e:36:e3:6d:86:6e:3e:7a:8a:4b:1e:4f:52:4f:b3:d1:33:
8a:d0:3d:89:32:58:a0:02:e5:5a:51:29:f2:47:5e:27:cc:26:
cc:45:79:73:eb:0e:23:d7:15:53:f9:ff:76:e3:38:7a:c3:9d:
16:39:99:d8:6f:7d:9e:84:56:b6:d7:f1:e9:65:cb:18:6c:7f:
0d:48:a2:a4:20:81:f0:3e:bd:a3:5a:c1:3b:6a:d3:a1:0e:da:
93:27:7e:b3:75:5a:40:74:3a:d7:05:88:6d:ab:34:d2:d8:68:
c1:3f:15:21:ff:42:b2:0a:d8:31:92:72:5b:9a:23:c7:33:44:
73:a5:88:e2:ef:7e:34:f6:55:f5:81:c4:22:66:80:be:a8:d8:
18:e4:fb:62:e7:77:1b:5a:e7:9f:b1:b5:39:eb:3c:b6:b2:d3:
1d:4d:64:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 01:02:19 2025 by rpki-client