Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/UaHhBL5BtsZvrfrg83gPrDsQ28c.roa
File: UaHhBL5BtsZvrfrg83gPrDsQ28c.roa (raw, json)
Hash identifier: W/hM4wzPIriJPP40WfTxZBQCF+lOnx2WwAdN95USdeg=
Subject key identifier: 51:A1:E1:04:BE:41:B6:C6:6F:AD:FA:E0:F3:78:0F:AC:3B:10:DB:C7
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 772C
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/UaHhBL5BtsZvrfrg83gPrDsQ28c.roa
Signing time: Tue 15 Jul 2025 03:11:56 +0000
ROA not before: Tue 15 Jul 2025 03:11:56 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30508 (0x772c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jul 15 03:11:56 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=51A1E104BE41B6C66FADFAE0F3780FAC3B10DBC7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:04:31:92:0f:c8:04:ed:e2:e1:59:80:e3:b7:
f7:b8:05:21:c0:dd:3e:37:02:a8:79:3b:4a:96:0b:
1c:b0:44:c0:60:1f:68:9a:13:ff:5c:62:6c:d3:ef:
a0:69:1a:46:8c:67:66:30:c0:76:05:a4:ac:61:5e:
4c:34:36:10:66:7b:3e:84:fe:1f:7a:c6:99:46:01:
7c:0c:73:6a:13:5c:36:6b:64:df:46:54:77:14:f7:
75:e5:6a:22:98:8f:9a:7c:17:b4:0d:dc:9e:49:d6:
5e:e2:4e:66:e8:a8:17:95:e0:d3:af:36:ba:47:56:
c5:97:57:42:a8:37:92:01:15:63:d5:06:a6:5c:bf:
04:62:10:00:bc:63:e5:ae:63:4e:3e:a4:33:d4:fd:
d0:c8:7a:55:21:ad:32:12:4a:0b:e4:67:02:da:be:
ea:b0:08:17:f1:73:c0:12:9b:3c:40:91:8e:ee:80:
2b:38:69:8d:55:69:b0:d3:e3:44:76:c9:d4:38:55:
08:e3:bd:1a:0d:34:1d:08:37:4a:63:b1:13:0e:13:
e8:f1:90:0c:ec:26:54:55:47:47:c7:c7:0a:03:e0:
1b:94:81:b6:51:aa:74:26:c6:54:5a:39:d6:9c:8d:
5d:51:61:4f:e2:a3:f8:4d:ad:fc:3d:06:3e:b5:84:
28:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:A1:E1:04:BE:41:B6:C6:6F:AD:FA:E0:F3:78:0F:AC:3B:10:DB:C7
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/UaHhBL5BtsZvrfrg83gPrDsQ28c.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
49:a6:b6:6f:96:43:ad:b4:c6:13:9b:40:15:cd:8e:3d:f5:f2:
cb:08:ab:10:91:b1:74:00:c4:86:ef:ee:5a:bd:98:8c:f5:66:
48:52:b7:31:99:6d:09:dc:00:73:d1:9d:4e:c2:da:06:26:eb:
d9:8e:fe:71:50:bf:4b:66:9c:c8:4f:bc:1d:b4:3b:a8:80:f3:
d2:49:c8:b9:d4:6b:cd:b4:7d:69:27:27:fa:25:4e:5c:c9:74:
17:52:e2:85:57:dc:37:2b:51:e1:a4:22:12:7c:f3:a0:99:8e:
34:bb:0d:67:ad:37:b9:bc:8c:66:8a:3c:ae:b7:31:06:f1:ab:
b3:71:be:6d:2e:d1:fc:80:e3:cb:5b:66:27:56:dc:5c:4d:50:
df:47:10:8b:d2:b5:7a:25:1f:28:b8:ce:b6:a5:bc:87:e8:44:
bc:ab:3c:07:23:3a:c2:91:4b:0b:c2:eb:85:ef:26:26:b8:71:
1b:ff:72:66:db:c7:9d:61:5b:3f:a4:e0:a7:73:84:5b:a8:27:
74:78:f5:7d:18:8c:12:5b:8b:ef:33:71:79:d7:c4:ec:07:b4:
c0:d5:33:ef:b8:ad:6a:66:0b:c4:3b:97:4e:4a:15:76:67:32:
15:ec:1e:08:c7:07:5b:37:be:ef:4b:70:c3:b9:a1:4e:23:23:
ee:21:25:0c
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgICdywwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNTA3MTUw
MzExNTZaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDUxQTFFMTA0QkU0MUI2
QzY2RkFERkFFMEYzNzgwRkFDM0IxMERCQzcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDpBDGSD8gE7eLhWYDjt/e4BSHA3T43Aqh5O0qWCxywRMBgH2ia
E/9cYmzT76BpGkaMZ2YwwHYFpKxhXkw0NhBmez6E/h96xplGAXwMc2oTXDZrZN9G
VHcU93XlaiKYj5p8F7QN3J5J1l7iTmboqBeV4NOvNrpHVsWXV0KoN5IBFWPVBqZc
vwRiEAC8Y+WuY04+pDPU/dDIelUhrTISSgvkZwLavuqwCBfxc8ASmzxAkY7ugCs4
aY1VabDT40R2ydQ4VQjjvRoNNB0IN0pjsRMOE+jxkAzsJlRVR0fHxwoD4BuUgbZR
qnQmxlRaOdacjV1RYU/io/hNrfw9Bj61hCirAgMBAAGjggI0MIICMDAdBgNVHQ4E
FgQUUaHhBL5BtsZvrfrg83gPrDsQ28cwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L1VhSGhCTDVCdHNadnJm
cmc4M2dQckRzUTI4Yy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwYgYIKwYBBQUHAQcBAf8EUzBRME8EAgABMEkD
BAIr7zADBAMr9gAwDAMEAiv2DAMEBCv2IDAMAwQCK/Y0AwQCK/ZgAwQCZyMwMAsD
AwJn7AMEA2fsEDAMAwQCZ+wcAwQCZ+xgMA0GCSqGSIb3DQEBCwUAA4IBAQBJprZv
lkOttMYTm0AVzY499fLLCKsQkbF0AMSG7+5avZiM9WZIUrcxmW0J3ABz0Z1OwtoG
JuvZjv5xUL9LZpzIT7wdtDuogPPSSci51GvNtH1pJyf6JU5cyXQXUuKFV9w3K1Hh
pCISfPOgmY40uw1nrTe5vIxmijyutzEG8auzcb5tLtH8gOPLW2YnVtxcTVDfRxCL
0rV6JR8ouM62pbyH6ES8qzwHIzrCkUsLwuuF7yYmuHEb/3Jm28edYVs/pOCnc4Rb
qCd0ePV9GIwSW4vvM3F518TsB7TA1TPvuK1qZgvEO5dOShV2ZzIV7B4IxwdbN77v
S3DDuaFOIyPuISUM
-----END CERTIFICATE-----
Generated at Sun Jul 20 12:55:45 2025 by rpki-client