Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/YyJI-KprxFiuwnNmpE8nR0ERm0U.roa
File: YyJI-KprxFiuwnNmpE8nR0ERm0U.roa (raw, json)
Hash identifier: KWByJ2BvY1ft9Xt5aLl9DLE06sBCjirUjFdvIZouCz4=
Subject key identifier: 63:22:48:F8:AA:6B:C4:58:AE:C2:73:66:A4:4F:27:47:41:11:9B:45
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 62A8
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/YyJI-KprxFiuwnNmpE8nR0ERm0U.roa
Signing time: Wed 21 May 2025 04:11:47 +0000
ROA not before: Wed 21 May 2025 04:11:47 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25256 (0x62a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 21 04:11:47 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=632248F8AA6BC458AEC27366A44F274741119B45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:2f:4b:b4:74:2b:c4:51:a2:41:95:72:6f:8c:
99:0f:19:89:df:ac:82:11:03:04:fc:a8:9e:9f:8a:
66:45:1b:07:d9:2f:83:6d:09:47:8f:b0:39:14:53:
c7:e9:38:41:b1:e5:25:6c:1c:87:9e:2b:8d:68:89:
76:8a:0a:f3:1c:54:44:96:9d:4f:99:85:5a:2e:36:
6a:a0:81:88:51:af:df:a9:b4:30:1c:7b:7b:10:b6:
cd:73:4c:28:73:48:93:c4:e5:c7:18:57:0e:f2:09:
45:76:b7:bc:8e:67:18:69:d4:09:06:28:c1:c8:6d:
46:b2:0c:1e:9b:83:26:73:fe:1d:96:07:66:df:37:
7d:04:09:91:80:74:37:96:1b:4e:75:7f:a6:78:b8:
56:7b:58:b0:35:4c:e7:fb:58:68:65:52:b8:88:ce:
1d:f0:a2:66:56:c6:06:d9:22:08:4f:21:82:c2:d0:
ca:b5:34:39:bc:32:37:8d:27:67:25:3c:f9:80:d1:
6c:aa:8e:bc:5b:7f:4d:81:4e:0e:af:6c:9e:93:84:
2d:28:c5:45:27:f1:02:28:53:68:24:ff:29:b6:b8:
4d:7f:66:69:00:d7:6d:d0:86:ee:9f:ed:0d:5d:b7:
73:f1:82:f9:61:39:b3:2d:d2:9f:54:8a:7c:07:5d:
52:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:22:48:F8:AA:6B:C4:58:AE:C2:73:66:A4:4F:27:47:41:11:9B:45
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/YyJI-KprxFiuwnNmpE8nR0ERm0U.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
a4:fd:7c:52:82:dc:a7:ab:d7:6d:90:00:86:f2:46:62:66:14:
5c:40:b0:41:34:f6:d0:37:c3:c9:71:5d:fa:27:86:58:5e:90:
b1:ac:60:9f:b3:a3:4e:7e:53:3c:df:16:31:e7:47:58:87:02:
0f:27:36:74:3f:84:b8:58:c0:0f:85:b0:b8:de:8a:70:ef:87:
43:f8:c9:fb:b0:2c:b5:f8:4e:20:91:30:20:9f:e6:a3:5f:bd:
36:04:34:c2:5d:3f:1d:fd:fc:4d:d8:e8:b2:4b:5d:c4:1b:0a:
61:f1:f2:ca:cb:91:ac:c4:c1:fb:e6:c8:b0:21:6a:83:cd:3d:
b8:21:ff:f5:1d:40:6b:66:be:2a:87:e3:a8:93:f4:9d:4d:7a:
fa:3b:d2:65:5f:51:1b:cb:17:69:e8:47:5a:e7:36:92:6c:f1:
e2:dc:d6:98:86:e3:67:9e:85:89:a9:61:fc:1d:39:9f:37:4a:
58:1f:89:d3:8d:d1:e7:45:c2:c6:e1:78:ea:bd:3a:6e:7c:c0:
83:9f:6d:86:50:3c:95:ac:ab:e4:d6:08:43:db:1b:55:c1:f2:
fb:2f:a0:70:a8:df:64:8f:75:b3:56:f7:73:06:b9:ba:27:6c:
16:ee:80:5d:e3:fd:50:b5:07:c0:42:de:04:cb:aa:a6:27:1f:
5d:74:f4:81
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgICYqgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNTA1MjEw
NDExNDdaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDYzMjI0OEY4QUE2QkM0
NThBRUMyNzM2NkE0NEYyNzQ3NDExMTlCNDUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCUL0u0dCvEUaJBlXJvjJkPGYnfrIIRAwT8qJ6fimZFGwfZL4Nt
CUePsDkUU8fpOEGx5SVsHIeeK41oiXaKCvMcVESWnU+ZhVouNmqggYhRr9+ptDAc
e3sQts1zTChzSJPE5ccYVw7yCUV2t7yOZxhp1AkGKMHIbUayDB6bgyZz/h2WB2bf
N30ECZGAdDeWG051f6Z4uFZ7WLA1TOf7WGhlUriIzh3womZWxgbZIghPIYLC0Mq1
NDm8MjeNJ2clPPmA0Wyqjrxbf02BTg6vbJ6ThC0oxUUn8QIoU2gk/ym2uE1/ZmkA
123Qhu6f7Q1dt3PxgvlhObMt0p9UinwHXVKlAgMBAAGjggI0MIICMDAdBgNVHQ4E
FgQUYyJI+KprxFiuwnNmpE8nR0ERm0UwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L1l5SkktS3ByeEZpdXdu
Tm1wRThuUjBFUm0wVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwYgYIKwYBBQUHAQcBAf8EUzBRME8EAgABMEkD
BAIr7zADBAMr9gAwDAMEAiv2DAMEBCv2IDAMAwQCK/Y0AwQCK/ZgAwQCZyMwMAsD
AwJn7AMEA2fsEDAMAwQCZ+wcAwQCZ+xgMA0GCSqGSIb3DQEBCwUAA4IBAQCk/XxS
gtynq9dtkACG8kZiZhRcQLBBNPbQN8PJcV36J4ZYXpCxrGCfs6NOflM83xYx50dY
hwIPJzZ0P4S4WMAPhbC43opw74dD+Mn7sCy1+E4gkTAgn+ajX702BDTCXT8d/fxN
2OiyS13EGwph8fLKy5GsxMH75siwIWqDzT24If/1HUBrZr4qh+Ook/SdTXr6O9Jl
X1Ebyxdp6Eda5zaSbPHi3NaYhuNnnoWJqWH8HTmfN0pYH4nTjdHnRcLG4XjqvTpu
fMCDn22GUDyVrKvk1ghD2xtVwfL7L6BwqN9kj3WzVvdzBrm6J2wW7oBd4/1QtQfA
Qt4Ey6qmJx9ddPSB
-----END CERTIFICATE-----
Generated at Sun Jul 20 12:57:49 2025 by rpki-client