Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/bMcY4MHIjZbMfmtZ2pDHgL8YolM.roa
File: bMcY4MHIjZbMfmtZ2pDHgL8YolM.roa (raw, json)
Hash identifier: hrfhQfe0iDeqpWkxCIyOl0HXJnUHpIvX9J8KLBFN+rc=
Subject key identifier: 6C:C7:18:E0:C1:C8:8D:96:CC:7E:6B:59:DA:90:C7:80:BF:18:A2:53
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 6A58
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/bMcY4MHIjZbMfmtZ2pDHgL8YolM.roa
Signing time: Tue 10 Jun 2025 16:12:07 +0000
ROA not before: Tue 10 Jun 2025 16:12:07 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27224 (0x6a58)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jun 10 16:12:07 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=6CC718E0C1C88D96CC7E6B59DA90C780BF18A253
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:4f:38:6b:3e:1d:e7:3f:cc:86:ec:15:3f:60:
28:e3:86:11:d2:3a:43:36:b0:62:99:f4:8a:27:ab:
06:7d:9d:04:72:df:b5:84:bd:b2:70:64:81:a6:cb:
9e:88:b7:94:d7:fd:56:8a:27:ff:85:c2:d2:b8:81:
19:ab:a8:85:e2:b3:8b:86:e9:7e:f7:48:63:88:9c:
fc:d4:c1:37:40:32:60:2e:11:72:94:81:b7:13:6e:
67:fe:c7:f1:a5:81:9a:ea:e4:96:c3:fb:7a:79:13:
ec:07:92:9d:b4:55:53:09:36:a1:7a:db:29:5c:bd:
8f:0f:e5:1f:b8:b8:29:6e:54:bb:35:f6:ff:c8:64:
40:1a:29:50:d2:d8:67:52:c8:86:ed:52:21:5c:7c:
1b:30:59:12:8b:9e:fb:fc:6e:75:6a:71:1b:d7:70:
03:42:45:da:7b:26:c7:59:7e:96:db:87:74:5a:c1:
3e:16:fb:89:f5:74:42:1c:95:e8:8b:a2:9c:88:96:
82:93:7b:34:e0:74:25:e5:fe:2b:9b:22:17:26:16:
b7:9d:4e:33:f7:89:c2:63:9e:6d:79:83:d7:6e:7d:
e6:f0:7b:9d:db:a7:87:b8:5a:1e:ea:2c:19:9b:95:
10:f9:7c:ad:38:13:76:d1:26:2d:aa:ee:33:e7:92:
e2:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:C7:18:E0:C1:C8:8D:96:CC:7E:6B:59:DA:90:C7:80:BF:18:A2:53
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/bMcY4MHIjZbMfmtZ2pDHgL8YolM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
1e:33:b4:64:8a:c5:b8:a5:9e:90:df:e5:e7:85:b6:4a:e3:37:
5c:d5:2d:1d:5a:ea:ca:d8:ad:91:1b:33:30:71:7f:2a:e0:8e:
d5:9f:ef:9c:c0:60:4c:cc:ec:86:d4:fb:1f:bb:37:5a:c1:35:
76:fa:c3:fb:ef:74:ce:68:e0:b5:a4:02:cf:2e:96:db:9b:b2:
8d:ed:3c:a5:14:86:fa:e4:34:9a:81:d5:ba:68:77:8d:40:c8:
3c:8e:e0:02:dd:16:3d:24:e4:a8:32:00:eb:b9:7c:59:53:ea:
9a:f1:9e:66:29:d7:ac:83:91:f8:50:3c:a7:8a:52:da:07:dd:
aa:a1:de:e8:41:42:2e:68:99:0e:d9:75:81:59:14:79:de:dc:
d2:4b:64:f4:70:5c:a1:37:2a:2a:7e:9a:c1:9a:aa:56:51:60:
f1:00:2e:39:89:cc:0a:c5:61:a6:19:3b:ac:28:95:2a:23:ce:
f9:35:5f:3a:0f:b9:52:7a:5b:96:12:ee:4b:50:03:42:a2:08:
28:93:28:12:06:85:20:f0:2e:48:8c:1a:34:55:78:94:9d:02:
db:30:18:e0:3a:00:ef:f0:39:48:bb:d7:5f:0c:e4:e5:34:c6:
17:03:21:db:eb:22:9d:2c:c4:3a:eb:71:97:d9:87:3a:f4:fc:
2a:79:67:d9
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgICalgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNTA2MTAx
NjEyMDdaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDZDQzcxOEUwQzFDODhE
OTZDQzdFNkI1OURBOTBDNzgwQkYxOEEyNTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC9TzhrPh3nP8yG7BU/YCjjhhHSOkM2sGKZ9IonqwZ9nQRy37WE
vbJwZIGmy56It5TX/VaKJ/+FwtK4gRmrqIXis4uG6X73SGOInPzUwTdAMmAuEXKU
gbcTbmf+x/GlgZrq5JbD+3p5E+wHkp20VVMJNqF62ylcvY8P5R+4uCluVLs19v/I
ZEAaKVDS2GdSyIbtUiFcfBswWRKLnvv8bnVqcRvXcANCRdp7JsdZfpbbh3RawT4W
+4n1dEIcleiLopyIloKTezTgdCXl/iubIhcmFredTjP3icJjnm15g9dufebwe53b
p4e4Wh7qLBmblRD5fK04E3bRJi2q7jPnkuIzAgMBAAGjggI0MIICMDAdBgNVHQ4E
FgQUbMcY4MHIjZbMfmtZ2pDHgL8YolMwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L2JNY1k0TUhJalpiTWZt
dFoycERIZ0w4WW9sTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwYgYIKwYBBQUHAQcBAf8EUzBRME8EAgABMEkD
BAIr7zADBAMr9gAwDAMEAiv2DAMEBCv2IDAMAwQCK/Y0AwQCK/ZgAwQCZyMwMAsD
AwJn7AMEA2fsEDAMAwQCZ+wcAwQCZ+xgMA0GCSqGSIb3DQEBCwUAA4IBAQAeM7Rk
isW4pZ6Q3+XnhbZK4zdc1S0dWurK2K2RGzMwcX8q4I7Vn++cwGBMzOyG1Psfuzda
wTV2+sP773TOaOC1pALPLpbbm7KN7TylFIb65DSagdW6aHeNQMg8juAC3RY9JOSo
MgDruXxZU+qa8Z5mKdesg5H4UDynilLaB92qod7oQUIuaJkO2XWBWRR53tzSS2T0
cFyhNyoqfprBmqpWUWDxAC45icwKxWGmGTusKJUqI875NV86D7lSeluWEu5LUANC
oggokygSBoUg8C5IjBo0VXiUnQLbMBjgOgDv8DlIu9dfDOTlNMYXAyHb6yKdLMQ6
63GX2Yc69PwqeWfZ
-----END CERTIFICATE-----
Generated at Sun Jul 20 12:44:05 2025 by rpki-client