Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/d4Wk7Og2PYE49ACKyZta_Mfogh8.roa
File: d4Wk7Og2PYE49ACKyZta_Mfogh8.roa (raw, json)
Hash identifier: n2YqpQyl9M5Mzz30Upti3SEoBscM4cC/9rcYBvu1Byw=
Subject key identifier: 77:85:A4:EC:E8:36:3D:81:38:F4:00:8A:C9:9B:5A:FC:C7:E8:82:1F
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 7638
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/d4Wk7Og2PYE49ACKyZta_Mfogh8.roa
Signing time: Sat 12 Jul 2025 14:11:44 +0000
ROA not before: Sat 12 Jul 2025 14:11:44 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30264 (0x7638)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jul 12 14:11:44 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=7785A4ECE8363D8138F4008AC99B5AFCC7E8821F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:eb:05:3f:ed:36:ba:af:bb:d6:82:07:aa:88:
2f:ad:76:51:6b:d7:c3:cb:56:47:96:71:da:d6:c4:
d6:68:37:e5:3c:7b:5c:b3:e2:be:a3:49:bc:f7:a5:
df:61:b9:d7:9a:4c:83:bd:e1:6d:42:80:01:4e:3c:
07:89:19:63:bc:65:5a:85:df:23:b6:52:cb:c3:03:
5a:30:a2:7f:3c:af:63:37:76:e8:c4:2e:2b:dd:c8:
16:8c:5b:ba:15:33:e1:0d:65:70:46:64:9c:c4:18:
e8:c6:3d:7c:65:a0:0f:95:cd:9e:64:45:34:b2:21:
37:e9:b5:a9:20:55:20:ca:96:a4:f8:59:e4:81:ea:
8f:cb:76:b7:9e:3b:64:38:6f:71:be:60:a9:70:ec:
cd:34:36:c4:c7:fe:41:8f:87:5e:d7:12:87:45:0d:
17:ae:c1:92:e1:c3:34:a1:d9:33:ca:23:17:8a:48:
c5:10:4a:e6:5e:ec:3b:1a:55:c5:e3:65:a0:b9:ca:
4f:e5:64:bc:ac:f1:ef:16:34:82:8a:d9:b3:3f:9c:
f7:f0:f7:ee:99:4d:25:e0:94:b6:51:0f:3b:76:1b:
34:0a:5c:2b:b9:71:d1:17:ab:00:3e:8b:c2:f4:34:
fc:96:24:45:29:45:7e:ee:70:32:df:b1:07:22:7d:
2c:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:85:A4:EC:E8:36:3D:81:38:F4:00:8A:C9:9B:5A:FC:C7:E8:82:1F
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/d4Wk7Og2PYE49ACKyZta_Mfogh8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
6c:5f:96:31:d9:af:94:1a:1b:98:cb:1f:5d:47:6d:09:70:f8:
68:7c:5b:c8:b8:1a:7c:5d:43:8b:4d:a8:57:c8:35:f9:19:a3:
2e:be:35:19:9b:41:56:cb:f8:54:73:2e:11:0f:1e:a5:3f:41:
66:de:73:69:f0:0f:44:4a:68:bc:6e:2a:ef:65:cf:5f:74:f0:
b8:00:86:2f:e9:9f:b3:1b:18:0b:14:39:24:49:5a:d0:03:06:
7b:db:4e:a0:67:49:0c:b1:63:df:0b:be:05:11:3a:04:c2:24:
76:2b:8b:23:8a:98:ba:b4:94:c8:f4:82:6e:fd:4a:5e:0c:3e:
4f:bb:19:3a:cf:71:a1:e3:57:17:a1:6d:39:57:1e:44:f9:69:
8a:b5:ce:f0:83:ce:06:49:6b:d4:5e:5d:2c:3e:7d:7e:dc:6b:
9d:ae:b5:2f:96:f9:47:d7:1d:9b:6f:58:21:9d:5e:01:f6:2d:
a9:da:97:45:ca:60:63:d1:4a:b2:00:05:94:ef:13:be:2b:fb:
b7:d7:2d:4a:af:b2:3a:06:5e:ae:38:29:2c:81:67:12:a5:52:
7e:6b:27:67:3a:90:96:d3:60:1a:45:77:8f:b6:e6:02:52:5d:
37:e8:af:80:f6:74:26:5d:93:13:45:16:fd:f1:ad:b8:b1:5b:
dd:98:a3:3a
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgICdjgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNTA3MTIx
NDExNDRaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDc3ODVBNEVDRTgzNjNE
ODEzOEY0MDA4QUM5OUI1QUZDQzdFODgyMUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCl6wU/7Ta6r7vWggeqiC+tdlFr18PLVkeWcdrWxNZoN+U8e1yz
4r6jSbz3pd9hudeaTIO94W1CgAFOPAeJGWO8ZVqF3yO2UsvDA1owon88r2M3dujE
LivdyBaMW7oVM+ENZXBGZJzEGOjGPXxloA+VzZ5kRTSyITfptakgVSDKlqT4WeSB
6o/LdreeO2Q4b3G+YKlw7M00NsTH/kGPh17XEodFDReuwZLhwzSh2TPKIxeKSMUQ
SuZe7DsaVcXjZaC5yk/lZLys8e8WNIKK2bM/nPfw9+6ZTSXglLZRDzt2GzQKXCu5
cdEXqwA+i8L0NPyWJEUpRX7ucDLfsQcifSy7AgMBAAGjggI0MIICMDAdBgNVHQ4E
FgQUd4Wk7Og2PYE49ACKyZta/Mfogh8wHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L2Q0V2s3T2cyUFlFNDlB
Q0t5WnRhX01mb2doOC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwYgYIKwYBBQUHAQcBAf8EUzBRME8EAgABMEkD
BAIr7zADBAMr9gAwDAMEAiv2DAMEBCv2IDAMAwQCK/Y0AwQCK/ZgAwQCZyMwMAsD
AwJn7AMEA2fsEDAMAwQCZ+wcAwQCZ+xgMA0GCSqGSIb3DQEBCwUAA4IBAQBsX5Yx
2a+UGhuYyx9dR20JcPhofFvIuBp8XUOLTahXyDX5GaMuvjUZm0FWy/hUcy4RDx6l
P0Fm3nNp8A9ESmi8birvZc9fdPC4AIYv6Z+zGxgLFDkkSVrQAwZ7206gZ0kMsWPf
C74FEToEwiR2K4sjipi6tJTI9IJu/UpeDD5Puxk6z3Gh41cXoW05Vx5E+WmKtc7w
g84GSWvUXl0sPn1+3GudrrUvlvlH1x2bb1ghnV4B9i2p2pdFymBj0UqyAAWU7xO+
K/u31y1Kr7I6Bl6uOCksgWcSpVJ+aydnOpCW02AaRXePtuYCUl036K+A9nQmXZMT
RRb98a24sVvdmKM6
-----END CERTIFICATE-----
Generated at Sun Jul 20 12:51:42 2025 by rpki-client