Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/VYhHIs7w0_FwEhLt1SA0B1Awu7E.roa
File: VYhHIs7w0_FwEhLt1SA0B1Awu7E.roa (raw, json)
Hash identifier: gks/C/bOz/AHMVcDIZbihYrjDieHwTgWM5+KWIe8Nl4=
Subject key identifier: 55:88:47:22:CE:F0:D3:F1:70:12:12:ED:D5:20:34:07:50:30:BB:B1
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 7242
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/VYhHIs7w0_FwEhLt1SA0B1Awu7E.roa
Signing time: Wed 02 Jul 2025 00:18:05 +0000
ROA not before: Wed 02 Jul 2025 00:18:05 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29250 (0x7242)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jul 2 00:18:05 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=55884722CEF0D3F1701212EDD52034075030BBB1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:45:dc:ad:f1:a2:95:fe:b3:14:a0:c8:7a:ca:
8b:ef:04:96:71:83:25:fe:86:d0:1e:cf:09:5b:1e:
1f:1d:7d:3c:64:78:91:5b:8d:ac:60:21:b8:67:fa:
fa:20:cb:68:a4:f2:83:58:a6:74:9e:f1:ff:41:39:
6c:45:3b:54:e1:a6:e9:cd:ee:6b:d7:5e:e1:7b:a2:
11:b5:d5:22:be:75:8d:a7:ee:8f:ca:4b:40:b3:67:
ed:41:b0:64:c4:8a:88:ec:fb:8a:23:df:19:bc:1f:
99:88:f3:bd:5a:ed:d0:67:40:b0:63:47:c4:ae:6b:
76:40:46:9c:59:0c:c0:7f:b2:17:a6:74:00:52:ce:
19:40:5f:0a:10:b7:de:14:2c:dc:7d:64:8f:fb:0c:
90:fa:bb:7d:c7:5e:ef:ff:50:85:51:07:4d:f7:f6:
e3:a9:71:e0:6d:28:40:05:98:3f:4c:6f:41:91:a9:
42:40:8f:01:ea:47:d0:ce:ad:9a:24:09:76:d1:0c:
60:a7:dc:48:b1:20:eb:5c:30:49:6b:80:c7:50:20:
e7:c2:c1:ef:ac:e3:d0:5f:66:d6:bf:53:39:a1:7f:
f1:30:56:e7:fe:cc:f6:ef:59:36:29:80:1a:5b:1a:
e5:a5:e3:fd:59:ea:c3:4e:b6:c2:4c:cd:02:ef:c6:
6c:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:88:47:22:CE:F0:D3:F1:70:12:12:ED:D5:20:34:07:50:30:BB:B1
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/VYhHIs7w0_FwEhLt1SA0B1Awu7E.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
98:86:27:ed:f0:68:a8:4c:ce:4b:3c:4c:70:da:7b:ef:e8:22:
73:fe:f7:33:57:09:85:8a:b3:e4:8b:3d:9d:bb:a1:5c:3a:dd:
4e:df:fa:39:21:96:d2:35:f0:68:96:74:06:92:bb:5e:33:36:
32:8f:c5:27:e9:94:c8:07:bb:f5:fd:83:58:b1:c6:b6:ca:7b:
4b:5f:ee:6a:c4:68:d1:e7:09:91:d4:e8:a1:31:36:57:69:1f:
06:cf:86:b5:84:68:7e:66:10:61:61:67:ba:61:e2:14:35:14:
e4:23:0b:1d:7b:55:55:2f:54:19:02:06:35:58:de:27:66:1b:
f4:97:cb:3c:8a:63:a7:2a:d6:ff:89:ad:6f:a9:69:8c:20:61:
e1:47:f7:a8:f2:c4:c7:9d:d7:6f:84:0e:d8:ec:71:3a:74:59:
4e:b9:a9:e4:bb:ed:54:9f:1f:c0:45:f5:15:ae:af:21:5b:6a:
13:77:55:77:26:06:4a:a1:24:75:a3:35:80:9a:b3:ac:a4:ea:
ce:ff:26:33:26:5c:6d:8b:90:0c:90:ae:50:9b:b9:9a:38:c2:
04:bf:ee:d0:b3:6f:38:50:f5:88:9d:fb:03:bd:9f:ec:eb:9a:
32:ae:0b:39:ce:62:69:52:dc:0e:ea:dc:ff:1c:fd:7d:c8:1c:
ad:0d:42:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:43:07 2025 by rpki-client