Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/YEsozYyYzThpmMuFkownP7Gm1d8.roa
File: YEsozYyYzThpmMuFkownP7Gm1d8.roa (raw, json)
Hash identifier: aE+1AdLd/3xh3lfptqzrBSc9mX7J7gMWxxMQLEtgj9Q=
Subject key identifier: 60:4B:28:CD:8C:98:CD:38:69:98:CB:85:92:8C:27:3F:B1:A6:D5:DF
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 74D0
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/YEsozYyYzThpmMuFkownP7Gm1d8.roa
Signing time: Tue 08 Jul 2025 19:45:33 +0000
ROA not before: Tue 08 Jul 2025 19:45:33 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29904 (0x74d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jul 8 19:45:33 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=604B28CD8C98CD386998CB85928C273FB1A6D5DF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:26:1c:b1:5e:3d:f0:61:fa:24:c1:59:dc:7b:
97:f3:5c:36:b3:05:76:ce:f7:f9:9c:80:ae:0a:60:
3e:1a:46:aa:ec:f9:83:aa:f6:a3:16:a1:fe:83:55:
d8:1c:ab:e0:e5:0a:29:cc:89:37:a0:67:f2:8e:37:
09:d5:20:d8:9d:f5:b7:2e:44:49:4c:28:bc:ca:31:
09:23:af:93:11:22:87:a6:d4:4b:8b:94:17:9a:41:
60:f9:92:35:17:22:3d:5e:1e:23:bc:f2:e0:be:27:
46:94:21:5c:11:60:c5:85:0b:41:b4:64:db:99:94:
0c:5a:91:50:f0:5d:45:55:11:04:c8:e5:93:30:48:
a4:8b:1b:db:e7:b5:f7:fc:fb:24:70:a7:8b:cf:c1:
1c:0a:7c:50:9e:e3:38:8e:d9:8d:a0:80:7e:ca:78:
b6:94:bb:d4:a9:56:c7:c3:44:44:fe:af:b5:70:c1:
8a:73:f2:57:2c:49:88:b1:d1:c2:e4:2a:cc:84:04:
ca:16:c4:b6:aa:eb:8a:16:24:bc:be:c4:f8:cd:7c:
a2:67:3d:4c:96:b8:0e:8c:d7:6d:51:db:6c:48:77:
06:ed:56:94:cd:db:d4:e0:9a:83:18:bb:c9:cd:46:
bf:1c:fb:1a:76:5d:de:80:5d:b7:4c:7a:67:7b:99:
4a:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:4B:28:CD:8C:98:CD:38:69:98:CB:85:92:8C:27:3F:B1:A6:D5:DF
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/YEsozYyYzThpmMuFkownP7Gm1d8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
73:45:2c:2e:af:27:ab:66:8e:93:1e:cf:3e:e2:e7:67:ca:e8:
15:42:f0:28:6d:b6:11:8b:98:cf:9c:0e:ec:60:a4:e6:f7:3a:
21:d3:7f:3b:12:fe:2f:e0:a6:4b:72:24:26:4d:d7:a7:8a:44:
b3:96:dd:63:56:33:b9:af:39:c1:30:02:06:25:d0:11:f7:55:
49:0b:42:7a:8d:13:79:55:03:ba:b5:71:bb:6a:29:16:08:a0:
8d:af:e5:32:fe:e4:0f:36:68:64:81:44:db:48:fa:9a:b9:19:
14:8d:6e:01:a7:07:c7:bb:67:9e:a3:fc:ab:cc:b6:6f:2b:c5:
a5:4f:7b:38:cf:d7:d2:6d:90:68:1e:a6:14:43:81:a1:df:99:
cb:d7:3f:5f:9b:16:71:ae:91:0f:a8:62:c1:0c:63:d0:a9:95:
ae:b1:75:db:2a:d5:62:a7:85:c8:72:73:0a:3b:56:f4:e9:89:
be:b2:51:94:09:0a:bd:bb:3e:9d:2e:cc:47:a0:ec:9c:3c:6d:
92:4c:53:a9:c7:fc:9c:57:ef:13:9e:d9:7e:14:75:fa:1c:fa:
99:34:3e:f2:f4:36:4c:2a:d6:19:9f:78:24:26:27:77:4b:06:
1b:8e:1f:a1:2a:e9:db:ab:d4:25:05:30:0c:e9:39:d2:ec:ec:
fa:82:ec:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:44:19 2025 by rpki-client