Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/Y2bwl5hvJaySeZJ_h_9a0mzwiaw.roa
File: Y2bwl5hvJaySeZJ_h_9a0mzwiaw.roa (raw, json)
Hash identifier: trQR+cHdOIdz+XxjS1hhmR58HBwJFFngddQ753PnTq4=
Subject key identifier: 63:66:F0:97:98:6F:25:AC:92:79:92:7F:87:FF:5A:D2:6C:F0:89:AC
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 7376
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/Y2bwl5hvJaySeZJ_h_9a0mzwiaw.roa
Signing time: Sat 05 Jul 2025 05:14:54 +0000
ROA not before: Sat 05 Jul 2025 05:14:54 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29558 (0x7376)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jul 5 05:14:54 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=6366F097986F25AC9279927F87FF5AD26CF089AC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:68:58:ae:cf:ea:0b:c2:a9:88:ba:13:6d:a1:
a7:62:89:dc:96:4f:8d:ba:e6:68:7a:1e:5a:cd:51:
26:99:df:a2:7e:b9:71:db:fa:65:6b:2e:c0:54:9e:
ea:eb:9e:24:4f:ea:52:cd:c4:66:58:7e:0c:a8:f7:
3b:e5:dd:79:c4:7d:6e:72:11:e3:34:85:e6:2a:a1:
e8:28:ca:d9:78:1d:e0:48:26:c3:39:f4:32:50:8d:
b5:b6:48:21:ee:20:24:01:c1:d7:82:88:4e:48:7d:
87:79:57:6f:eb:21:6d:53:fc:eb:2b:53:41:5e:73:
21:7f:c3:cc:3f:5a:3c:45:f3:fb:b0:16:33:c2:f2:
25:38:e3:ae:70:e0:02:17:8f:f2:1d:c3:17:35:40:
35:8f:bc:32:23:b4:81:35:76:bf:41:62:44:de:d9:
d8:0b:cf:f8:fe:d9:8d:64:62:ec:e2:2c:47:60:0c:
e0:c4:b6:4a:09:b0:6f:f1:1a:d8:61:cd:d1:98:25:
ca:a8:eb:b0:ee:c2:25:91:1d:bf:ee:ba:67:2f:17:
24:07:83:4e:d7:df:05:0e:aa:bc:4b:54:6f:be:0b:
bb:e4:98:f0:b5:01:9a:5a:90:bf:63:9d:0f:17:b9:
02:0b:46:e8:d0:2d:2d:7b:cc:f3:c0:2c:54:f0:8f:
bf:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:66:F0:97:98:6F:25:AC:92:79:92:7F:87:FF:5A:D2:6C:F0:89:AC
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/Y2bwl5hvJaySeZJ_h_9a0mzwiaw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
bb:11:58:86:16:59:c2:53:5f:14:cb:0b:a4:a4:c3:92:23:b6:
28:5d:bf:27:82:b2:34:ea:ce:6a:18:c2:3e:b6:b8:94:24:9d:
be:98:46:02:d9:d1:d3:84:67:a6:94:fd:39:7f:6a:59:13:ed:
ab:f4:47:43:34:62:c5:2b:53:86:25:2b:50:01:15:d5:72:70:
ef:9f:38:ef:aa:e2:5c:eb:03:95:5a:50:7b:0d:9e:74:1c:92:
c8:a1:5d:57:8e:22:7c:27:93:f4:7a:b5:6b:94:33:bd:82:fa:
1d:ed:99:6b:48:22:e7:37:52:53:5f:7e:e2:55:06:d2:74:2a:
c3:ab:9d:50:6f:46:8c:bb:bd:90:67:a6:4b:2e:a1:7c:b1:93:
94:2f:27:9b:17:c0:d9:70:17:d4:30:e1:bc:77:dd:80:a7:3b:
27:b6:57:eb:88:fc:59:f1:8e:5b:a6:34:a5:7b:1c:2d:a2:61:
5e:67:b9:a6:d2:38:87:c2:d0:3b:3e:8e:b1:dc:66:4a:a2:ff:
8b:87:e0:dd:3d:08:d0:e8:02:80:20:1a:1f:41:14:20:9d:88:
50:64:29:db:91:c9:f4:e6:9a:31:f8:21:13:fc:ba:ff:5c:46:
bd:1a:40:3d:6b:67:c1:4c:ab:bc:3f:00:8d:b0:39:b1:27:16:
17:3a:df:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:36:16 2025 by rpki-client