Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/d5hJS2DU624urQ1ym86iipRs3OY.roa
File: d5hJS2DU624urQ1ym86iipRs3OY.roa (raw, json)
Hash identifier: D03bsNrTw3vd8XpheIQP/JgGDNlNVYa6KaRkQ8WC79o=
Subject key identifier: 77:98:49:4B:60:D4:EB:6E:2E:AD:0D:72:9B:CE:A2:8A:94:6C:DC:E6
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 625A
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/d5hJS2DU624urQ1ym86iipRs3OY.roa
Signing time: Tue 20 May 2025 08:41:52 +0000
ROA not before: Tue 20 May 2025 08:41:52 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25178 (0x625a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 20 08:41:52 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=7798494B60D4EB6E2EAD0D729BCEA28A946CDCE6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c0:11:8e:91:39:31:9c:93:20:54:7a:9e:cf:
be:fc:83:d5:f7:ca:07:00:ee:18:32:16:34:b5:cf:
b6:c1:91:f5:00:74:f7:e1:37:dd:1d:f3:9b:b0:49:
88:6e:ab:74:74:e0:29:9b:70:fd:a8:5e:51:f6:73:
ca:7f:9a:2e:86:5f:15:5e:39:77:14:ee:49:92:eb:
3c:28:3d:6f:8e:c4:59:62:5c:a3:b6:17:3f:61:7e:
2a:6b:ee:2d:a2:22:57:8f:32:98:8d:30:56:72:16:
a8:cd:bd:39:93:bf:7b:e9:63:77:b2:c8:00:1b:e3:
ea:76:58:a2:e7:c1:fd:04:83:ea:a4:ee:20:f6:9a:
4b:09:46:49:05:54:c6:f1:fa:fe:df:e9:17:50:5f:
54:a9:81:2d:77:3b:e9:8e:e9:25:ec:d6:1b:0f:94:
a8:e4:39:a2:76:d0:85:e2:0b:2f:2f:6c:60:13:9b:
8f:15:92:2e:d8:97:6a:a5:ed:0f:e5:5d:b2:eb:ad:
63:e5:1c:36:3d:96:91:24:25:02:53:b3:1d:77:e8:
6a:51:d6:7a:d7:1a:09:e3:5b:c7:fa:be:52:9d:60:
b9:91:0e:96:69:45:22:31:3a:c1:45:f1:95:d2:ca:
74:5d:ea:e6:04:2c:47:66:8a:f8:97:d9:b6:7b:c8:
b4:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:98:49:4B:60:D4:EB:6E:2E:AD:0D:72:9B:CE:A2:8A:94:6C:DC:E6
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/d5hJS2DU624urQ1ym86iipRs3OY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
35:4e:75:6a:e4:d5:26:1d:62:d7:11:e2:0c:7f:db:06:91:3a:
24:b3:2a:7a:a1:cd:2b:a4:a2:e9:62:3b:a8:74:70:97:30:0a:
e9:fe:a9:30:9c:75:13:cf:78:e8:6a:5e:99:77:5a:43:a3:83:
68:30:01:5a:b7:a0:a5:f3:c3:19:0e:a5:47:e7:64:cc:d7:cc:
f8:ce:da:72:d0:65:9f:54:73:0c:79:70:6f:6f:7e:07:85:26:
16:ac:1d:c6:f3:d1:88:09:38:e5:e6:8f:ba:fd:32:50:e0:75:
cc:0a:81:ae:7e:12:96:38:d0:42:a7:b7:68:de:25:96:b3:84:
b2:b0:d9:25:f9:a5:08:56:bb:88:88:25:da:f0:63:28:96:03:
58:c6:c3:c2:dc:2a:d6:1e:3d:d1:49:c6:c7:bc:8c:96:88:95:
56:3c:89:d0:4f:15:43:5a:d9:a3:d6:c6:fb:0c:a5:17:09:01:
ed:60:d5:57:cc:c8:2c:43:a8:ab:2a:83:2f:b5:0d:0b:9e:8c:
51:fe:2f:93:0e:8d:9a:84:5a:aa:2d:0b:42:ca:67:10:24:61:
b3:0c:cc:89:39:b2:44:a7:54:0b:31:e5:f4:01:98:3a:45:07:
0d:06:6c:60:2f:f1:f5:15:42:50:2c:b5:0a:60:d6:65:bd:40:
81:aa:23:89
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgICYlowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNTA1MjAw
ODQxNTJaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDc3OTg0OTRCNjBENEVC
NkUyRUFEMEQ3MjlCQ0VBMjhBOTQ2Q0RDRTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQClwBGOkTkxnJMgVHqez778g9X3ygcA7hgyFjS1z7bBkfUAdPfh
N90d85uwSYhuq3R04CmbcP2oXlH2c8p/mi6GXxVeOXcU7kmS6zwoPW+OxFliXKO2
Fz9hfipr7i2iIlePMpiNMFZyFqjNvTmTv3vpY3eyyAAb4+p2WKLnwf0Eg+qk7iD2
mksJRkkFVMbx+v7f6RdQX1SpgS13O+mO6SXs1hsPlKjkOaJ20IXiCy8vbGATm48V
ki7Yl2ql7Q/lXbLrrWPlHDY9lpEkJQJTsx136GpR1nrXGgnjW8f6vlKdYLmRDpZp
RSIxOsFF8ZXSynRd6uYELEdmiviX2bZ7yLR7AgMBAAGjggI0MIICMDAdBgNVHQ4E
FgQUd5hJS2DU624urQ1ym86iipRs3OYwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L2Q1aEpTMkRVNjI0dXJR
MXltODZpaXBSczNPWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwYgYIKwYBBQUHAQcBAf8EUzBRME8EAgABMEkD
BAIr7zADBAMr9gAwDAMEAiv2DAMEBCv2IDAMAwQCK/Y0AwQCK/ZgAwQCZyMwMAsD
AwJn7AMEA2fsEDAMAwQCZ+wcAwQCZ+xgMA0GCSqGSIb3DQEBCwUAA4IBAQA1TnVq
5NUmHWLXEeIMf9sGkToksyp6oc0rpKLpYjuodHCXMArp/qkwnHUTz3joal6Zd1pD
o4NoMAFat6Cl88MZDqVH52TM18z4ztpy0GWfVHMMeXBvb34HhSYWrB3G89GICTjl
5o+6/TJQ4HXMCoGufhKWONBCp7do3iWWs4SysNkl+aUIVruIiCXa8GMolgNYxsPC
3CrWHj3RScbHvIyWiJVWPInQTxVDWtmj1sb7DKUXCQHtYNVXzMgsQ6irKoMvtQ0L
noxR/i+TDo2ahFqqLQtCymcQJGGzDMyJObJEp1QLMeX0AZg6RQcNBmxgL/H1FUJQ
LLUKYNZlvUCBqiOJ
-----END CERTIFICATE-----
Generated at Thu Jun 5 19:14:03 2025 by rpki-client