Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/mlF3MDcb-PVduzRBa_bMDXY3_PM.roa
File: mlF3MDcb-PVduzRBa_bMDXY3_PM.roa (raw, json)
Hash identifier: 2mTGwjge7HBz1WIf+AVPNandri1hfsrJW9/04zwaSsY=
Subject key identifier: 9A:51:77:30:37:1B:F8:F5:5D:BB:34:41:6B:F6:CC:0D:76:37:FC:F3
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 6B6E
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/mlF3MDcb-PVduzRBa_bMDXY3_PM.roa
Signing time: Fri 13 Jun 2025 13:42:20 +0000
ROA not before: Fri 13 Jun 2025 13:42:20 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27502 (0x6b6e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jun 13 13:42:20 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=9A517730371BF8F55DBB34416BF6CC0D7637FCF3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:cd:d2:d3:93:ab:91:cd:fc:2d:9a:d3:01:da:
66:f9:4d:b6:ff:90:12:11:a5:b6:6b:37:2f:50:f4:
0c:ff:33:24:6f:2c:a5:ad:0f:3e:73:87:98:70:ac:
b6:1b:55:79:79:22:f6:a6:5d:de:a6:1b:8f:6e:36:
02:f8:47:4c:cf:26:e7:d3:26:8f:64:18:8b:bb:24:
a9:ad:c0:dd:37:42:44:53:98:c3:77:72:7f:7d:c9:
ca:0b:9f:2a:73:fb:65:7e:19:bf:40:b9:41:63:b9:
a2:ae:5b:f3:9a:84:92:9f:f4:1d:28:0f:76:47:70:
c8:9e:02:ac:15:43:7a:6c:51:99:36:b2:ba:0a:84:
63:53:e9:fd:d5:9e:61:1e:34:44:fc:66:02:12:37:
25:3d:7d:5e:c1:d5:bf:28:7f:7d:b3:14:aa:5c:77:
81:fc:4c:e4:58:db:fb:ca:b4:ef:f9:2d:de:2e:24:
ed:78:5b:17:ba:b4:c9:f2:06:90:25:d4:7f:46:5b:
57:25:d6:a8:df:75:39:0f:22:03:df:55:08:9d:87:
ed:bf:00:35:78:3e:06:3a:b1:bf:69:83:7c:a2:51:
63:29:e9:33:a0:e3:6e:3c:91:45:0a:8a:08:31:09:
db:5f:88:01:c0:63:61:76:f9:48:5f:67:4e:fa:c2:
61:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:51:77:30:37:1B:F8:F5:5D:BB:34:41:6B:F6:CC:0D:76:37:FC:F3
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/mlF3MDcb-PVduzRBa_bMDXY3_PM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
27:b7:5c:73:47:1f:63:89:b0:e8:91:93:fb:5e:f3:6e:c7:05:
1e:e5:c5:49:58:26:2e:1e:56:46:e2:4d:14:ed:37:64:9a:16:
fe:66:a4:24:53:32:9a:8e:15:0f:18:f3:c6:95:2e:70:63:5e:
19:4c:16:02:87:41:cd:a8:f2:b4:38:62:83:3f:db:86:05:62:
6e:97:42:dd:ca:b6:58:85:f3:32:95:a6:f2:e2:7f:1d:3c:12:
4d:24:06:11:88:29:52:b8:be:e7:14:82:76:5a:a2:b7:eb:c7:
6b:e6:6f:c2:e2:4b:09:a5:37:dc:48:77:6f:45:69:d3:c3:63:
cd:a5:dd:9b:5c:10:2e:c2:7a:c9:9f:34:7a:4c:53:0d:f3:71:
95:29:35:b8:85:92:db:de:75:79:07:b4:f7:2a:5d:bf:fc:af:
ee:f2:ab:e0:0d:93:31:dd:58:a8:4f:0d:d2:a6:1c:0a:92:5b:
ad:22:3b:b7:41:0a:1f:14:6e:7c:7a:21:c6:c7:d0:50:01:26:
ac:39:46:89:77:f9:62:78:25:d0:e0:28:0f:d6:26:4d:a7:fb:
66:2b:78:5f:e6:bb:c9:70:ae:36:c5:c2:8f:1a:9c:93:a1:c9:
a5:a8:5b:10:ba:44:26:07:04:fb:1f:bf:0b:69:7b:0d:e6:59:
78:1b:7f:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:35:50 2025 by rpki-client