Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/c5oU7AtF5XJ1a8MD_GpXJmSb4wE.roa
File: c5oU7AtF5XJ1a8MD_GpXJmSb4wE.roa (raw, json)
Hash identifier: HVT/dN6L3vxeoDsx6bsfJD6HBv07cVyJY6QtJ084pUw=
Subject key identifier: 73:9A:14:EC:0B:45:E5:72:75:6B:C3:03:FC:6A:57:26:64:9B:E3:01
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 62DA
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/c5oU7AtF5XJ1a8MD_GpXJmSb4wE.roa
Signing time: Wed 21 May 2025 16:40:59 +0000
ROA not before: Wed 21 May 2025 16:40:59 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25306 (0x62da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 21 16:40:59 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=739A14EC0B45E572756BC303FC6A5726649BE301
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:b4:b3:a0:f4:6a:2d:66:30:4e:95:98:73:ad:
76:93:1b:4b:f7:8c:c1:c6:44:a8:31:ec:11:48:0d:
cc:2b:4d:01:0d:9c:b9:86:6d:24:d4:d7:97:7b:f5:
7c:31:d5:e9:71:af:d4:fa:45:99:19:b8:17:f3:9b:
05:cc:62:73:b1:ac:45:1f:8b:06:10:6e:46:5f:e6:
ea:49:7f:bb:3d:7d:1d:3a:c7:26:12:5d:a5:05:f0:
8c:4e:a6:76:25:8c:c0:db:1e:50:42:5e:cc:f3:ff:
20:b7:97:83:e4:c2:a8:62:61:cc:95:df:b2:55:f1:
e9:80:86:53:dd:b7:4e:ea:cd:11:a3:6e:51:66:ae:
b1:16:e5:0d:c9:67:b5:fd:cc:bb:51:12:25:09:f9:
5a:50:e0:92:24:f8:79:78:9a:3f:05:8a:c4:f9:26:
3d:0d:a2:e2:68:07:8d:2e:bd:b8:57:e1:2f:ef:98:
49:b0:82:5f:a8:c3:5f:c1:0b:86:ec:ba:e1:1b:d2:
27:ce:78:a3:f9:99:e6:0d:ce:08:18:66:a4:70:3c:
1f:f0:2e:d7:63:7d:43:6f:e5:29:ac:dc:62:37:4b:
ab:ee:5c:4d:b6:28:7d:a7:9a:9b:e9:7d:72:34:d5:
34:0b:90:4d:5b:4c:dc:5b:32:0e:4a:42:54:48:ef:
39:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:9A:14:EC:0B:45:E5:72:75:6B:C3:03:FC:6A:57:26:64:9B:E3:01
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/c5oU7AtF5XJ1a8MD_GpXJmSb4wE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
92:51:04:fb:e9:50:fb:ed:61:d5:b0:d5:81:bc:2b:45:dc:7b:
1b:6e:2c:a9:83:13:d6:73:e6:87:68:1c:97:8e:be:71:ec:ff:
8b:83:de:20:f9:29:23:06:a8:e0:47:04:9d:e2:8d:9d:42:c0:
b8:69:70:d0:19:ea:f3:04:0e:fb:88:b1:df:2d:58:e6:28:33:
58:3c:a6:1b:e7:67:98:09:a8:37:fc:c3:1a:68:34:c8:61:80:
01:4b:a3:fe:81:a3:54:07:32:7b:fe:fb:64:48:79:ee:25:a1:
f5:9d:2f:6c:15:54:cc:f8:4e:61:f6:d7:f5:4e:2d:f8:cf:bd:
e2:3c:35:b2:d3:48:e6:2d:54:31:de:79:09:07:51:d6:6c:51:
d0:49:1d:5e:6b:58:69:c9:f8:0b:66:8d:53:d4:78:9f:d2:d2:
fb:7f:7b:9f:fe:83:a2:a6:98:a5:68:e9:c9:6b:6f:86:c5:74:
d0:8c:7e:e2:ce:8b:28:11:c3:c0:ad:36:b2:45:b3:90:37:5e:
7a:37:c7:2e:f0:65:33:e2:6c:24:b0:e4:46:98:89:86:7b:c1:
46:d8:c3:df:79:26:61:d5:48:21:7a:e7:42:5f:a0:3b:2b:a7:
34:b4:68:23:17:e4:d2:9f:83:a0:e7:4b:cf:84:4a:8d:4d:13:
a5:4c:63:30
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgICYtowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNTA1MjEx
NjQwNTlaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDczOUExNEVDMEI0NUU1
NzI3NTZCQzMwM0ZDNkE1NzI2NjQ5QkUzMDEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDOtLOg9GotZjBOlZhzrXaTG0v3jMHGRKgx7BFIDcwrTQENnLmG
bSTU15d79Xwx1elxr9T6RZkZuBfzmwXMYnOxrEUfiwYQbkZf5upJf7s9fR06xyYS
XaUF8IxOpnYljMDbHlBCXszz/yC3l4PkwqhiYcyV37JV8emAhlPdt07qzRGjblFm
rrEW5Q3JZ7X9zLtREiUJ+VpQ4JIk+Hl4mj8FisT5Jj0NouJoB40uvbhX4S/vmEmw
gl+ow1/BC4bsuuEb0ifOeKP5meYNzggYZqRwPB/wLtdjfUNv5Sms3GI3S6vuXE22
KH2nmpvpfXI01TQLkE1bTNxbMg5KQlRI7zl/AgMBAAGjggI0MIICMDAdBgNVHQ4E
FgQUc5oU7AtF5XJ1a8MD/GpXJmSb4wEwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L2M1b1U3QXRGNVhKMWE4
TURfR3BYSm1TYjR3RS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwYgYIKwYBBQUHAQcBAf8EUzBRME8EAgABMEkD
BAIr7zADBAMr9gAwDAMEAiv2DAMEBCv2IDAMAwQCK/Y0AwQCK/ZgAwQCZyMwMAsD
AwJn7AMEA2fsEDAMAwQCZ+wcAwQCZ+xgMA0GCSqGSIb3DQEBCwUAA4IBAQCSUQT7
6VD77WHVsNWBvCtF3HsbbiypgxPWc+aHaByXjr5x7P+Lg94g+SkjBqjgRwSd4o2d
QsC4aXDQGerzBA77iLHfLVjmKDNYPKYb52eYCag3/MMaaDTIYYABS6P+gaNUBzJ7
/vtkSHnuJaH1nS9sFVTM+E5h9tf1Ti34z73iPDWy00jmLVQx3nkJB1HWbFHQSR1e
a1hpyfgLZo1T1Hif0tL7f3uf/oOippilaOnJa2+GxXTQjH7izosoEcPArTayRbOQ
N156N8cu8GUz4mwksORGmImGe8FG2MPfeSZh1UgheudCX6A7K6c0tGgjF+TSn4Og
50vPhEqNTROlTGMw
-----END CERTIFICATE-----
Generated at Wed Jun 4 00:52:12 2025 by rpki-client