Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/YPACcxzRUAcfO9pYERF0ruYjepM.roa
File: YPACcxzRUAcfO9pYERF0ruYjepM.roa (raw, json)
Hash identifier: Gz6ZKQVj/mJobOqDHc760T5ZbAiUCze7KQbhuE+Dpgs=
Subject key identifier: 60:F0:02:73:1C:D1:50:07:1F:3B:DA:58:11:11:74:AE:E6:23:7A:93
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 727A
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/YPACcxzRUAcfO9pYERF0ruYjepM.roa
Signing time: Wed 02 Jul 2025 14:18:16 +0000
ROA not before: Wed 02 Jul 2025 14:18:16 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29306 (0x727a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jul 2 14:18:16 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=60F002731CD150071F3BDA58111174AEE6237A93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:35:d4:87:7c:ee:24:42:87:62:8d:39:62:94:
21:b7:ea:92:68:15:ff:6f:3e:38:25:5d:f3:a1:e5:
03:57:29:f8:d9:30:48:ad:8c:fb:7a:81:d8:d7:00:
c4:1d:34:67:47:8f:e4:a5:c9:b2:75:c5:32:2a:86:
c0:31:9b:3a:86:f2:7a:07:50:e7:82:bc:25:ee:6c:
89:2d:b3:87:ee:4c:93:af:b0:89:4c:4d:c6:34:74:
42:6d:d5:6f:b0:ee:6e:d3:02:45:8c:c6:c6:73:58:
06:44:d0:7d:54:0a:cf:8a:9d:8a:d0:4b:6c:b3:f3:
cb:08:c1:66:6f:e5:1a:96:8b:19:3a:99:e6:89:5a:
fb:44:a4:a9:39:6c:c4:fc:68:d5:e6:e1:69:97:0d:
53:6a:a7:44:4e:2e:50:94:c9:d5:ba:a7:00:c9:5e:
c2:cc:ff:3f:d0:59:31:d1:54:2d:d7:29:56:c8:02:
48:da:9f:2c:5f:15:e4:24:36:06:c9:1a:84:1c:05:
b4:d5:0b:65:87:37:2d:4d:70:a1:a7:c0:1c:0e:18:
f0:6d:64:c2:6f:b1:ed:a8:0d:7e:16:06:66:6e:ff:
11:3e:0b:8f:55:53:97:8e:ea:5c:41:53:3a:45:88:
96:7d:69:66:85:8a:33:60:49:5f:01:6f:78:c7:8e:
49:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:F0:02:73:1C:D1:50:07:1F:3B:DA:58:11:11:74:AE:E6:23:7A:93
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/YPACcxzRUAcfO9pYERF0ruYjepM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
9d:c9:c9:b3:a0:3c:14:cb:6b:4a:d3:ef:e8:59:80:28:de:93:
a9:ce:07:f7:6f:fb:f4:11:d1:c5:95:3b:27:30:f4:67:dc:c9:
e6:3d:e5:90:a5:5b:91:7b:35:59:d4:fd:79:f4:f4:b1:36:47:
2c:cb:db:54:d6:7e:60:28:86:62:7d:a0:16:b9:c6:b5:0a:47:
7e:f3:5d:a9:de:15:ac:b6:2e:ee:ea:f0:d5:56:de:67:50:e2:
51:7e:7c:c8:7b:ac:60:af:2c:ab:00:08:68:7e:86:e2:58:fa:
ee:8a:52:e3:bf:49:70:68:f1:88:4a:6f:e2:35:96:94:ab:5b:
97:89:64:ed:e6:b9:c1:be:dc:4a:50:f6:dc:bf:f9:4c:9f:a5:
28:e4:3a:75:9e:52:c4:f9:e9:bd:b3:a6:c2:f9:1c:38:db:5c:
28:5d:8a:d6:f1:dd:4f:af:fe:57:1e:ee:4d:bf:15:ca:af:16:
63:08:b4:e5:a5:5c:5d:cc:b9:af:0f:de:1f:42:7a:ce:de:43:
0f:ab:6f:7d:f1:01:50:1d:0b:a9:2d:9b:d7:17:fd:c3:5d:e4:
3f:71:fd:54:7c:e8:3f:a0:ec:4d:3c:13:ea:26:9a:99:e1:9d:
0c:4d:b5:ef:00:48:a5:59:44:07:7d:8e:cf:c9:35:2d:ce:27:
c8:15:9a:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:43:08 2025 by rpki-client