Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/YSjOTxKN5-7z_cxZV-CAhvSnYW0.roa
File: YSjOTxKN5-7z_cxZV-CAhvSnYW0.roa (raw, json)
Hash identifier: i8xXKKK2S8hVGmxGkVv90RN052MewRn+VGhqkhsMHLU=
Subject key identifier: 61:28:CE:4F:12:8D:E7:EE:F3:FD:CC:59:57:E0:80:86:F4:A7:61:6D
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 785A
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/YSjOTxKN5-7z_cxZV-CAhvSnYW0.roa
Signing time: Fri 18 Jul 2025 06:42:04 +0000
ROA not before: Fri 18 Jul 2025 06:42:04 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30810 (0x785a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jul 18 06:42:04 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=6128CE4F128DE7EEF3FDCC5957E08086F4A7616D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:07:f7:2f:29:4b:62:7d:e8:18:2c:f7:38:4c:
20:4e:9e:b0:03:bf:7e:2c:85:cb:1f:ca:6f:4a:07:
91:96:e6:e3:1b:31:15:26:cb:f0:fe:d2:e2:84:84:
2a:99:81:77:92:28:ee:ee:0e:6d:1b:06:fc:cb:8f:
a7:2c:a1:61:6d:9f:f3:86:72:ac:8e:97:2b:c7:99:
aa:01:9a:7d:2d:3c:30:17:9d:50:4c:2b:dd:d4:bb:
43:00:99:74:2d:5a:98:0b:1d:04:20:32:e1:e9:a9:
8e:4b:39:4d:a0:d8:8f:fb:34:1c:6c:c9:d4:27:78:
ce:7b:40:fd:8a:a6:6b:a1:e6:45:c8:b5:4e:7d:14:
f3:2b:c3:d0:1f:1d:28:85:27:53:82:a2:5b:7d:72:
0f:63:c9:58:4f:77:13:7d:63:46:c3:48:15:cb:a1:
41:d6:dd:5e:a4:bc:c6:cf:5c:47:1b:b1:1d:5f:95:
e9:42:28:c3:c2:9d:4c:da:66:ae:e7:04:d0:bb:ce:
75:4a:ee:b0:71:41:57:07:c0:e1:d6:ba:f3:aa:9a:
1d:73:f2:64:2d:e3:29:7c:76:30:5b:5e:b8:07:1d:
6f:dd:cb:ee:96:60:c1:fe:8f:8e:0c:1c:00:12:2c:
58:35:81:e7:70:77:b5:d0:0a:4c:b7:5a:e9:f5:0b:
49:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:28:CE:4F:12:8D:E7:EE:F3:FD:CC:59:57:E0:80:86:F4:A7:61:6D
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/YSjOTxKN5-7z_cxZV-CAhvSnYW0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
a4:16:3d:06:0f:b9:e4:7c:d1:0c:47:f4:8e:6b:e9:9d:35:93:
e5:02:f3:51:3d:01:5b:b5:58:55:bc:7d:bf:51:0c:9f:95:d2:
5a:10:00:e0:ce:b0:a6:51:3e:49:6e:f5:d7:48:62:e4:75:e6:
a8:94:ce:42:a8:ce:d9:d5:8f:bc:b5:e4:58:e1:92:a1:41:5c:
0e:50:61:11:63:78:0e:75:84:fd:61:6a:c4:47:36:f4:a9:02:
c4:f7:92:7b:5b:90:18:fc:b6:f5:d6:bb:d1:24:24:12:b2:61:
f9:9b:48:0f:a3:4f:26:d6:cc:04:1b:88:10:e3:b5:6e:06:d5:
6c:1e:94:58:f9:27:2c:c2:2e:6c:21:f7:a8:57:37:5b:76:b6:
b8:ab:2f:b1:7d:a5:13:c3:97:14:e2:a3:ff:0b:07:bd:bc:d8:
13:c4:cd:ba:90:78:ae:87:6d:95:3b:8e:e3:3c:27:a1:77:c0:
d6:96:d9:6a:c7:dd:e8:f5:18:df:6d:fc:2f:aa:ed:4d:02:5c:
aa:d7:59:99:1f:57:ba:57:83:03:1b:08:43:79:fb:f6:92:b8:
4b:b6:79:93:c2:5b:f6:c2:62:62:a8:ff:4d:bc:5a:0e:10:e6:
14:99:b4:79:54:36:ba:16:f2:ab:03:b1:79:27:5d:72:c3:7a:
7f:ca:9d:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:39:00 2025 by rpki-client