Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/V4jAlMeNCtk0hipSRZ7olD9nH7c.roa
File: V4jAlMeNCtk0hipSRZ7olD9nH7c.roa (raw, json)
Hash identifier: tiOvwYv5OTnk8QPLYLl8vOOWXeWfMAREQ87KgntPjVM=
Subject key identifier: 57:88:C0:94:C7:8D:0A:D9:34:86:2A:52:45:9E:E8:94:3F:67:1F:B7
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 6E24
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/V4jAlMeNCtk0hipSRZ7olD9nH7c.roa
Signing time: Sat 21 Jun 2025 06:45:21 +0000
ROA not before: Sat 21 Jun 2025 06:45:21 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28196 (0x6e24)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jun 21 06:45:21 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=5788C094C78D0AD934862A52459EE8943F671FB7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:1d:e4:be:06:ce:d9:22:28:9b:da:52:5f:b7:
9f:cf:e4:1f:39:4e:38:6a:fc:15:13:7e:75:7a:36:
b1:96:4a:6d:7b:a5:c7:87:51:97:5e:3b:81:ed:ec:
6b:7f:6b:54:20:bf:53:89:cf:f0:1b:0a:ec:33:0b:
63:38:c9:01:44:29:24:95:6b:af:53:b2:67:d6:5b:
b5:37:fb:52:89:47:48:4b:83:84:e9:5f:82:f1:b4:
2d:e8:e7:e2:13:63:39:8f:96:25:a1:98:9b:51:44:
22:7d:a5:72:3c:9a:97:05:2b:e2:60:c6:2f:27:60:
8a:12:4d:b0:5f:41:60:5d:47:88:62:50:40:25:1a:
da:94:02:0f:51:a8:a6:de:39:fe:f6:a2:cc:03:1b:
2d:a0:68:3a:85:d9:c3:97:42:4c:7e:3a:4d:d4:ce:
b3:8b:9d:13:5c:c6:f7:f8:98:ad:0d:fd:b2:fa:1f:
65:0f:80:a5:83:b6:39:3b:e9:c9:aa:2d:36:0e:de:
80:7b:4b:19:94:f7:ea:eb:63:e3:1a:0f:61:58:21:
20:da:4f:01:ed:d7:86:19:f4:4c:92:57:30:cf:bc:
9c:a1:18:24:28:91:9d:23:5a:94:08:e2:95:ee:40:
c0:4b:81:24:31:14:cb:90:7a:12:b7:c9:48:a9:f7:
ef:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:88:C0:94:C7:8D:0A:D9:34:86:2A:52:45:9E:E8:94:3F:67:1F:B7
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/V4jAlMeNCtk0hipSRZ7olD9nH7c.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
9d:11:c1:12:4b:76:79:eb:85:6f:5b:e3:1f:e3:d8:e5:0f:10:
65:e5:4e:94:9d:a1:fa:a9:55:3e:e1:ca:84:0b:d3:56:19:76:
e2:80:00:7c:cc:f6:fd:b7:66:23:4c:a3:ec:02:02:63:7c:30:
7a:00:63:b9:c3:24:cd:bd:ae:d5:c7:da:ac:e3:58:16:ae:7a:
1f:08:90:c0:4e:f5:b3:47:81:da:7e:c8:58:12:ee:99:17:04:
79:fc:41:f7:08:d7:2f:02:b8:fc:19:cc:6a:fc:b4:69:d5:67:
07:ed:f6:83:60:c6:56:a7:9f:e7:22:2b:7c:94:e7:00:87:6d:
50:f4:12:6e:26:5f:57:21:c4:fa:c7:25:a2:5f:d4:93:7c:d3:
15:a9:b9:dd:47:bf:06:39:1a:76:c5:e3:82:ab:4a:7d:87:70:
42:95:c5:4c:f4:00:ec:8d:2f:5e:bd:aa:19:e9:49:02:d4:82:
78:77:84:99:ef:2e:bb:36:63:37:1f:eb:65:a0:3f:f0:ae:67:
6a:d6:47:d4:4c:b8:ec:31:04:86:a8:be:57:d4:1f:78:68:f1:
04:f1:d0:f1:e4:81:95:98:14:f4:a9:81:83:fd:12:82:e0:81:
06:2b:ee:e3:d1:43:d1:09:a9:08:f0:94:e1:34:55:13:76:1f:
8c:97:9a:f0
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgICbiQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNTA2MjEw
NjQ1MjFaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDU3ODhDMDk0Qzc4RDBB
RDkzNDg2MkE1MjQ1OUVFODk0M0Y2NzFGQjcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDUHeS+Bs7ZIiib2lJft5/P5B85Tjhq/BUTfnV6NrGWSm17pceH
UZdeO4Ht7Gt/a1Qgv1OJz/AbCuwzC2M4yQFEKSSVa69TsmfWW7U3+1KJR0hLg4Tp
X4LxtC3o5+ITYzmPliWhmJtRRCJ9pXI8mpcFK+Jgxi8nYIoSTbBfQWBdR4hiUEAl
GtqUAg9RqKbeOf72oswDGy2gaDqF2cOXQkx+Ok3UzrOLnRNcxvf4mK0N/bL6H2UP
gKWDtjk76cmqLTYO3oB7SxmU9+rrY+MaD2FYISDaTwHt14YZ9EySVzDPvJyhGCQo
kZ0jWpQI4pXuQMBLgSQxFMuQehK3yUip9+8nAgMBAAGjggI0MIICMDAdBgNVHQ4E
FgQUV4jAlMeNCtk0hipSRZ7olD9nH7cwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L1Y0akFsTWVOQ3RrMGhp
cFNSWjdvbEQ5bkg3Yy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwYgYIKwYBBQUHAQcBAf8EUzBRME8EAgABMEkD
BAIr7zADBAMr9gAwDAMEAiv2DAMEBCv2IDAMAwQCK/Y0AwQCK/ZgAwQCZyMwMAsD
AwJn7AMEA2fsEDAMAwQCZ+wcAwQCZ+xgMA0GCSqGSIb3DQEBCwUAA4IBAQCdEcES
S3Z564VvW+Mf49jlDxBl5U6UnaH6qVU+4cqEC9NWGXbigAB8zPb9t2YjTKPsAgJj
fDB6AGO5wyTNva7Vx9qs41gWrnofCJDATvWzR4HafshYEu6ZFwR5/EH3CNcvArj8
Gcxq/LRp1WcH7faDYMZWp5/nIit8lOcAh21Q9BJuJl9XIcT6xyWiX9STfNMVqbnd
R78GORp2xeOCq0p9h3BClcVM9ADsjS9evaoZ6UkC1IJ4d4SZ7y67NmM3H+tloD/w
rmdq1kfUTLjsMQSGqL5X1B94aPEE8dDx5IGVmBT0qYGD/RKC4IEGK+7j0UPRCakI
8JThNFUTdh+Ml5rw
-----END CERTIFICATE-----
Generated at Sun Jul 20 16:27:20 2025 by rpki-client