Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/arTSYK7EHxTlpfvo1bz_rULtg8Y.roa
File: arTSYK7EHxTlpfvo1bz_rULtg8Y.roa (raw, json)
Hash identifier: jVLW7ygfIR4V/mJzCBh3751/nbAWt+1+CQs3xcArmis=
Subject key identifier: 6A:B4:D2:60:AE:C4:1F:14:E5:A5:FB:E8:D5:BC:FF:AD:42:ED:83:C6
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 62E2
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/arTSYK7EHxTlpfvo1bz_rULtg8Y.roa
Signing time: Wed 21 May 2025 18:40:40 +0000
ROA not before: Wed 21 May 2025 18:40:40 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25314 (0x62e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 21 18:40:40 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=6AB4D260AEC41F14E5A5FBE8D5BCFFAD42ED83C6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:e9:1a:9c:51:9a:3f:3a:42:bb:b1:e0:c5:00:
22:3e:dd:a4:13:a0:fc:48:fa:6c:0a:b1:f0:92:69:
23:cf:22:cc:1f:5f:56:67:28:99:92:4f:61:bc:c4:
78:98:30:a8:00:95:87:31:ae:5c:69:f2:23:f8:66:
52:01:90:0e:3b:9d:cd:b4:49:a7:bc:a5:46:c9:e2:
4f:88:6f:6c:60:64:d4:b7:45:40:a1:8c:37:92:45:
be:e3:a0:51:1b:3c:87:59:d9:9d:4d:2e:91:3e:10:
86:26:d0:e7:59:d2:90:ae:1e:5c:30:ad:35:29:90:
f5:66:37:89:13:59:41:a1:72:9e:77:e8:d6:a7:ff:
c1:27:f1:c9:4f:60:66:47:4b:b5:4f:82:b1:bb:76:
9d:aa:41:c7:7f:ea:83:39:02:94:cb:a3:0e:a2:43:
f3:f1:a5:ed:1d:ba:5b:30:98:b4:06:14:ae:23:15:
d2:22:9e:bd:d8:f8:53:57:c6:11:a2:0e:d2:ce:08:
e8:3b:af:20:82:83:53:ff:ab:01:d3:89:de:be:84:
ed:7a:19:56:00:f4:b7:d0:08:be:56:b5:fb:30:6e:
56:eb:8d:7a:a8:5b:b6:d9:27:64:e5:ea:f2:7b:ff:
b1:9d:b1:ac:f7:34:97:70:26:39:b4:68:68:54:b4:
0f:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:B4:D2:60:AE:C4:1F:14:E5:A5:FB:E8:D5:BC:FF:AD:42:ED:83:C6
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/arTSYK7EHxTlpfvo1bz_rULtg8Y.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
13:86:38:f9:21:27:85:07:10:0f:03:20:7c:8d:45:85:9c:27:
25:01:0e:e8:73:97:5f:c4:4e:8c:52:25:0f:89:9c:6f:de:d5:
46:b1:2e:be:86:99:45:40:cc:b1:bd:9b:95:ca:3c:76:c1:11:
55:89:21:ee:7e:c1:d0:55:d3:2a:a7:cd:5e:8e:8e:98:71:8e:
fe:5b:85:aa:b7:6f:8c:28:c6:77:49:71:7c:a3:7a:ab:b0:79:
ca:a2:98:94:ba:cf:8e:a8:e7:1f:00:23:78:cf:94:7e:40:7c:
0a:bf:d5:37:f0:56:05:50:92:26:62:2b:aa:af:fc:ec:3e:51:
7f:b8:06:93:20:06:74:fa:98:0c:11:b5:3e:d6:b6:6c:9f:d2:
a2:86:6d:37:f5:d7:e0:85:82:c8:95:55:82:be:7b:54:44:1e:
6d:52:9f:18:32:0b:45:1a:fb:dd:71:85:d4:8b:33:c9:63:0a:
2a:ce:9a:d7:cf:93:57:89:7e:4f:00:f1:a8:f8:62:53:f3:35:
c0:f2:19:3d:ed:f7:69:1c:ec:18:26:f9:85:d7:76:d1:fc:01:
06:8e:99:c7:ae:cf:ce:79:bf:c3:21:19:97:0b:d3:ec:9a:2a:
66:ac:ff:7d:3a:2a:b9:23:e3:63:eb:b2:5f:bc:18:9e:67:d1:
84:0d:0f:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 01:28:10 2025 by rpki-client