Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/_LV2ogPb5Dv_ptcQfO7KoWNs1w8.roa
File: _LV2ogPb5Dv_ptcQfO7KoWNs1w8.roa (raw, json)
Hash identifier: KeTOE1UTLeAY9QG259VI3uPueKeTzBgUk2Ep0Bv6S2I=
Subject key identifier: FC:B5:76:A2:03:DB:E4:3B:FF:A6:D7:10:7C:EE:CA:A1:63:6C:D7:0F
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 713A
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/_LV2ogPb5Dv_ptcQfO7KoWNs1w8.roa
Signing time: Sun 29 Jun 2025 06:14:41 +0000
ROA not before: Sun 29 Jun 2025 06:14:41 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28986 (0x713a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jun 29 06:14:41 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=FCB576A203DBE43BFFA6D7107CEECAA1636CD70F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:93:18:95:e2:55:8b:3e:97:3e:8e:77:27:34:
64:8a:18:ba:b4:29:cf:e1:b3:d1:cb:9e:33:13:ab:
35:6a:42:59:a3:5e:0b:d8:d6:f8:19:f9:1b:82:44:
16:62:b8:a8:06:a2:58:74:73:ea:da:86:46:3e:d1:
30:58:aa:05:a0:1e:dc:56:4d:64:6c:e4:60:4f:2c:
60:a1:73:b3:be:50:f7:ab:a7:f4:ce:fb:29:ca:ee:
7f:9b:6f:a4:72:ac:e0:7d:82:48:1c:e1:bf:91:bf:
6d:19:1d:6a:c0:c2:14:eb:20:12:4c:ac:86:cd:0f:
1f:a3:c7:49:86:75:65:64:95:ab:7a:7d:10:1e:04:
75:dc:2b:ae:60:93:ab:24:39:a6:ba:5c:84:d4:92:
99:bd:75:32:72:48:01:21:ff:66:65:11:f6:7e:9d:
30:04:bc:56:45:53:26:e5:82:7b:9a:7d:77:07:1b:
1d:1a:a7:dc:ca:6f:75:b1:f2:78:41:81:09:67:0a:
a8:01:25:25:85:dd:28:80:9d:81:a5:0f:c9:86:8c:
14:f2:02:1b:f5:87:45:98:10:3f:f1:f9:53:de:df:
a8:e7:61:07:28:6f:a6:d5:9f:26:e8:dc:fe:3b:55:
36:ef:53:28:ca:75:f4:89:f0:64:96:53:82:de:4d:
d7:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:B5:76:A2:03:DB:E4:3B:FF:A6:D7:10:7C:EE:CA:A1:63:6C:D7:0F
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/_LV2ogPb5Dv_ptcQfO7KoWNs1w8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
3c:b3:fe:f9:4f:4a:64:64:a3:9e:2a:7f:86:6c:f2:96:f6:14:
8e:a0:29:51:fa:91:24:1c:2e:f5:b4:7b:b6:67:28:82:d4:1a:
e9:d6:a8:f1:4c:38:e2:14:f0:88:67:a4:fd:8f:a9:de:7e:75:
bf:ac:51:a6:5b:16:e7:35:61:af:ab:18:59:43:c9:29:4b:dd:
fc:bd:c0:18:44:a1:d1:f1:78:c6:df:7e:00:02:27:5b:81:10:
5f:9f:34:0b:73:b1:03:2e:5e:d6:79:48:67:d8:63:25:49:b0:
20:2c:66:20:3f:29:70:2c:d3:46:c7:91:b5:24:93:91:8e:70:
8a:52:55:2b:15:a6:a3:c0:bc:cb:12:aa:7f:08:8e:88:41:96:
11:e5:76:d1:bb:b1:f7:2a:2a:e6:1a:3d:b9:fd:02:31:2b:22:
b6:25:98:aa:f5:27:e6:bb:09:90:04:42:ea:bc:92:8f:74:35:
2c:e5:fa:f6:25:0c:77:85:da:cd:bb:46:86:85:7a:97:ba:5b:
e3:5b:80:d9:38:80:65:88:6f:1c:3c:d2:22:70:0d:15:9b:a2:
82:87:c5:f5:6e:b7:7e:83:ed:9c:6e:31:52:12:23:bf:3b:f0:
cc:eb:b6:97:f7:33:d8:b8:35:0d:75:0a:f5:77:4d:6b:14:68:
6f:a5:59:f4
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgICcTowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNTA2Mjkw
NjE0NDFaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKEZDQjU3NkEyMDNEQkU0
M0JGRkE2RDcxMDdDRUVDQUExNjM2Q0Q3MEYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCykxiV4lWLPpc+jncnNGSKGLq0Kc/hs9HLnjMTqzVqQlmjXgvY
1vgZ+RuCRBZiuKgGolh0c+rahkY+0TBYqgWgHtxWTWRs5GBPLGChc7O+UPerp/TO
+ynK7n+bb6RyrOB9gkgc4b+Rv20ZHWrAwhTrIBJMrIbNDx+jx0mGdWVklat6fRAe
BHXcK65gk6skOaa6XITUkpm9dTJySAEh/2ZlEfZ+nTAEvFZFUyblgnuafXcHGx0a
p9zKb3Wx8nhBgQlnCqgBJSWF3SiAnYGlD8mGjBTyAhv1h0WYED/x+VPe36jnYQco
b6bVnybo3P47VTbvUyjKdfSJ8GSWU4LeTdcbAgMBAAGjggI0MIICMDAdBgNVHQ4E
FgQU/LV2ogPb5Dv/ptcQfO7KoWNs1w8wHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L19MVjJvZ1BiNUR2X3B0
Y1FmTzdLb1dOczF3OC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwYgYIKwYBBQUHAQcBAf8EUzBRME8EAgABMEkD
BAIr7zADBAMr9gAwDAMEAiv2DAMEBCv2IDAMAwQCK/Y0AwQCK/ZgAwQCZyMwMAsD
AwJn7AMEA2fsEDAMAwQCZ+wcAwQCZ+xgMA0GCSqGSIb3DQEBCwUAA4IBAQA8s/75
T0pkZKOeKn+GbPKW9hSOoClR+pEkHC71tHu2ZyiC1Brp1qjxTDjiFPCIZ6T9j6ne
fnW/rFGmWxbnNWGvqxhZQ8kpS938vcAYRKHR8XjG334AAidbgRBfnzQLc7EDLl7W
eUhn2GMlSbAgLGYgPylwLNNGx5G1JJORjnCKUlUrFaajwLzLEqp/CI6IQZYR5XbR
u7H3KirmGj25/QIxKyK2JZiq9SfmuwmQBELqvJKPdDUs5fr2JQx3hdrNu0aGhXqX
ulvjW4DZOIBliG8cPNIicA0Vm6KCh8X1brd+g+2cbjFSEiO/O/DM67aX9zPYuDUN
dQr1d01rFGhvpVn0
-----END CERTIFICATE-----
Generated at Sun Jul 20 12:41:21 2025 by rpki-client