Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/dgVzmza5VXKhk561Y0WufKwszkU.roa
File: dgVzmza5VXKhk561Y0WufKwszkU.roa (raw, json)
Hash identifier: JVeXfnNhncXmMuKvixyxaJSPmXgU3w3cHqjbBFUQVO4=
Subject key identifier: 76:05:73:9B:36:B9:55:72:A1:93:9E:B5:63:45:AE:7C:AC:2C:CE:45
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 7498
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/dgVzmza5VXKhk561Y0WufKwszkU.roa
Signing time: Tue 08 Jul 2025 05:45:07 +0000
ROA not before: Tue 08 Jul 2025 05:45:07 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29848 (0x7498)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jul 8 05:45:07 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=7605739B36B95572A1939EB56345AE7CAC2CCE45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:cb:da:8f:4f:fd:38:e3:cc:ca:5d:6a:2f:d5:
70:5c:8c:fb:9e:42:1e:52:8d:de:9c:8a:8c:65:24:
a4:59:ab:22:75:8a:2b:36:ed:f0:72:e4:38:3f:35:
89:43:a6:a9:50:75:5d:8d:23:64:76:45:12:5a:23:
b2:ca:9a:98:04:6c:7b:92:e1:ad:fc:81:ec:68:17:
f2:7d:57:27:de:4f:b7:e8:c0:35:5e:20:5c:4c:4e:
20:5c:5c:d5:fd:31:4e:af:5c:b7:91:a4:e8:49:49:
c7:8f:75:c9:4c:f3:3d:a8:44:19:b6:dc:93:ea:36:
12:3a:a5:28:7a:9f:1d:b6:df:fa:d3:fd:60:8d:bb:
96:55:09:36:b8:a2:1d:d1:ed:c7:6f:b9:ed:a0:f8:
6c:72:87:ac:58:94:3c:a0:7b:14:ac:70:a7:dd:ce:
1b:a3:06:93:07:e3:11:e7:66:6b:bd:e5:dd:80:11:
ee:25:4d:a3:39:f1:9d:70:e7:bb:48:86:52:c3:d8:
78:2c:3b:27:29:e7:e0:fa:d7:80:7e:84:b0:37:88:
ed:03:9e:75:32:76:36:af:cb:11:02:0c:a6:bf:c6:
c8:a4:03:85:ae:bb:a5:de:b7:d3:e6:97:3c:98:0a:
4d:7a:97:25:ef:30:0e:63:ce:4f:b9:51:df:9d:32:
ab:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:05:73:9B:36:B9:55:72:A1:93:9E:B5:63:45:AE:7C:AC:2C:CE:45
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/dgVzmza5VXKhk561Y0WufKwszkU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
4c:63:80:a4:e5:78:cc:1e:02:50:e8:85:9a:68:90:e5:3a:62:
cc:62:c1:b1:90:e9:6e:ec:3d:56:dd:91:64:3f:eb:a8:2b:22:
cf:21:92:ec:70:53:6f:c1:8f:ce:e9:36:38:c7:de:bc:53:63:
62:b6:1b:e2:9d:ab:3b:f0:18:77:83:a6:d4:51:08:21:f7:84:
e7:d2:7e:df:aa:ef:57:1f:6b:53:b0:b8:bd:f7:73:fa:fb:aa:
93:98:ae:10:3f:56:99:de:aa:39:1e:f1:fe:08:95:5b:31:bd:
f0:9c:7f:a0:c2:5f:02:81:98:da:76:b4:00:e9:3c:0c:4f:e1:
64:ac:c7:8f:9b:b6:fb:1d:6d:00:05:3b:a8:30:02:f6:f0:25:
ac:a5:e1:2e:8f:40:12:86:8c:6f:9a:1c:0d:a8:aa:1d:28:16:
1e:ad:7d:61:fa:12:cd:89:08:9d:1d:22:56:14:62:09:9b:34:
3d:90:50:fa:1d:08:b5:a7:ca:e4:9f:8b:85:14:87:94:2c:47:
27:34:8b:f4:3f:f9:ac:37:77:b1:a4:f7:98:5e:ba:bb:7a:65:
ad:3c:e6:02:d2:af:69:e2:10:01:e2:d1:99:da:a6:a4:7c:fc:
ab:7a:27:9e:7f:61:68:ee:2a:5b:f9:55:c8:bb:8e:8e:7b:eb:
0e:f1:97:22
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgICdJgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNTA3MDgw
NTQ1MDdaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDc2MDU3MzlCMzZCOTU1
NzJBMTkzOUVCNTYzNDVBRTdDQUMyQ0NFNDUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC3y9qPT/0448zKXWov1XBcjPueQh5Sjd6cioxlJKRZqyJ1iis2
7fBy5Dg/NYlDpqlQdV2NI2R2RRJaI7LKmpgEbHuS4a38gexoF/J9VyfeT7fowDVe
IFxMTiBcXNX9MU6vXLeRpOhJScePdclM8z2oRBm23JPqNhI6pSh6nx223/rT/WCN
u5ZVCTa4oh3R7cdvue2g+Gxyh6xYlDygexSscKfdzhujBpMH4xHnZmu95d2AEe4l
TaM58Z1w57tIhlLD2HgsOycp5+D614B+hLA3iO0DnnUydjavyxECDKa/xsikA4Wu
u6Xet9PmlzyYCk16lyXvMA5jzk+5Ud+dMquTAgMBAAGjggI0MIICMDAdBgNVHQ4E
FgQUdgVzmza5VXKhk561Y0WufKwszkUwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L2RnVnptemE1VlhLaGs1
NjFZMFd1Zkt3c3prVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwYgYIKwYBBQUHAQcBAf8EUzBRME8EAgABMEkD
BAIr7zADBAMr9gAwDAMEAiv2DAMEBCv2IDAMAwQCK/Y0AwQCK/ZgAwQCZyMwMAsD
AwJn7AMEA2fsEDAMAwQCZ+wcAwQCZ+xgMA0GCSqGSIb3DQEBCwUAA4IBAQBMY4Ck
5XjMHgJQ6IWaaJDlOmLMYsGxkOlu7D1W3ZFkP+uoKyLPIZLscFNvwY/O6TY4x968
U2Nithvinas78Bh3g6bUUQgh94Tn0n7fqu9XH2tTsLi993P6+6qTmK4QP1aZ3qo5
HvH+CJVbMb3wnH+gwl8CgZjadrQA6TwMT+FkrMePm7b7HW0ABTuoMAL28CWspeEu
j0AShoxvmhwNqKodKBYerX1h+hLNiQidHSJWFGIJmzQ9kFD6HQi1p8rkn4uFFIeU
LEcnNIv0P/msN3expPeYXrq7emWtPOYC0q9p4hAB4tGZ2qakfPyreieef2Fo7ipb
+VXIu46Oe+sO8Zci
-----END CERTIFICATE-----
Generated at Sun Jul 20 12:52:20 2025 by rpki-client