Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/kyzEc9s8b1tAYo5TA0x9e7jP_ik.roa
File: kyzEc9s8b1tAYo5TA0x9e7jP_ik.roa (raw, json)
Hash identifier: LGGRSWHgGd+8wrJvKbRLmRNdR7ibK4D8UAqyBJ0RSCw=
Subject key identifier: 93:2C:C4:73:DB:3C:6F:5B:40:62:8E:53:03:4C:7D:7B:B8:CF:FE:29
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 6644
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/kyzEc9s8b1tAYo5TA0x9e7jP_ik.roa
Signing time: Fri 30 May 2025 19:11:33 +0000
ROA not before: Fri 30 May 2025 19:11:33 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26180 (0x6644)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 30 19:11:33 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=932CC473DB3C6F5B40628E53034C7D7BB8CFFE29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:bb:6d:b5:15:64:7d:6d:99:e8:46:6a:77:d3:
db:0f:99:ce:3a:32:79:8e:32:75:ac:5d:8b:91:0d:
9d:d9:71:6b:6d:ec:23:2e:26:9b:e9:25:8a:89:38:
b5:a2:13:75:2d:a7:18:ef:e3:89:ee:d9:2d:87:53:
ed:b8:71:5d:02:32:08:49:0d:26:ec:8e:0c:84:b4:
1a:02:96:b9:7a:0a:2c:ff:a8:7c:51:f7:d8:39:6f:
9f:92:a0:db:b9:44:53:80:ec:58:62:c7:3c:69:1b:
94:aa:e8:32:55:42:05:d5:3e:ad:5a:28:fd:7e:d3:
d8:f9:61:65:44:43:3e:28:b8:b5:c8:7f:f5:c1:2f:
40:17:3c:b8:77:f2:f9:04:a7:8c:6a:57:b8:83:21:
33:fa:ca:ae:a5:ac:36:f8:c9:e4:16:f5:c6:2a:fd:
03:46:6c:fb:27:93:62:9d:ac:4f:97:c7:41:0a:3c:
98:97:03:a3:e3:db:4b:b0:8f:49:16:4c:5f:e9:62:
cb:ae:22:40:f4:76:07:d3:eb:6f:12:cc:27:19:ee:
81:c9:57:d4:60:36:87:67:02:77:06:ce:d7:41:cb:
fc:b0:c1:77:66:c2:bb:04:4f:a3:a0:9a:84:9b:ef:
7d:cc:dc:47:46:3e:1d:0d:6b:3f:74:75:c8:8f:20:
82:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:2C:C4:73:DB:3C:6F:5B:40:62:8E:53:03:4C:7D:7B:B8:CF:FE:29
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/kyzEc9s8b1tAYo5TA0x9e7jP_ik.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
0e:b3:76:80:eb:f7:d5:70:6a:32:e4:40:db:35:3b:40:fb:d7:
f8:05:0b:00:0f:8d:4d:5d:d0:44:0b:4f:2f:7f:fa:d1:05:54:
58:f6:6b:d0:81:c7:4d:42:1d:a5:e7:b1:88:09:3a:51:0f:36:
df:3d:fd:7c:38:bf:9b:58:24:87:48:c8:4e:95:83:23:82:29:
4b:53:65:58:71:41:87:8a:6c:92:c9:48:40:ab:1e:05:9f:c2:
f0:32:5f:0e:3f:3a:78:10:81:6a:f7:27:fd:b2:ea:2a:2f:7b:
88:b9:f7:4a:9a:85:66:60:df:7e:35:67:04:39:76:d0:b4:5a:
dd:75:93:0c:d9:07:60:b5:9f:8c:68:c2:7d:c6:37:26:2b:dc:
a4:8d:c7:6f:03:9f:4e:11:69:c5:1f:8c:d1:48:f9:c6:b2:a3:
e3:3e:3e:59:e2:e8:96:99:26:58:73:54:f5:45:ed:ed:27:05:
d4:d4:4b:37:6d:bf:66:44:4e:b5:c4:ff:5c:a5:93:0e:d9:25:
2b:ad:d4:eb:4a:9e:00:a7:91:0f:19:ac:10:9e:de:8f:0e:64:
07:86:fd:13:ae:09:25:e5:54:6e:e2:ef:85:bf:72:7d:49:00:
33:84:70:8c:65:d0:1f:48:da:b7:30:0e:73:7b:89:23:01:d2:
de:b9:9d:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 01:14:30 2025 by rpki-client