Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/mlUJcjVrSoLtnm7t1oDRsiUbgG8.roa
File: mlUJcjVrSoLtnm7t1oDRsiUbgG8.roa (raw, json)
Hash identifier: rOSInY2r7ZgBebsXf39FrK747iyw84Dkv4EMGNYtsZM=
Subject key identifier: 9A:55:09:72:35:6B:4A:82:ED:9E:6E:ED:D6:80:D1:B2:25:1B:80:6F
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 62DE
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/mlUJcjVrSoLtnm7t1oDRsiUbgG8.roa
Signing time: Wed 21 May 2025 17:40:48 +0000
ROA not before: Wed 21 May 2025 17:40:48 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25310 (0x62de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 21 17:40:48 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=9A550972356B4A82ED9E6EEDD680D1B2251B806F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:7d:84:fb:fb:bf:45:8a:8c:3e:03:62:74:f1:
7c:07:78:09:73:61:a1:c8:7b:b2:2a:42:44:bc:06:
fb:d6:07:a9:56:13:4f:57:3f:16:49:13:e2:3f:b0:
31:13:95:3d:95:6d:93:06:76:bc:5e:df:98:08:67:
19:27:57:0e:84:35:1a:37:0b:91:b9:38:7d:cd:91:
ab:d3:8a:7b:e8:e8:98:97:f6:4d:41:03:22:e6:dc:
6c:d4:08:77:d7:5e:1d:b7:70:48:6d:48:bc:c1:8e:
6c:70:01:d2:8a:39:7f:d3:cc:7b:70:ce:c3:b7:ee:
57:61:fc:66:a5:88:2e:71:b4:7e:93:89:a3:cf:2c:
10:27:a3:71:b0:29:b5:a5:3c:99:9b:b0:53:06:48:
cf:6d:a5:07:ac:8e:49:a0:ed:2d:66:72:6e:33:45:
f0:49:4a:76:14:93:4e:21:73:ce:b7:0d:a4:a1:09:
d7:e6:5a:09:56:05:40:88:c4:ad:6d:69:a7:ce:25:
db:5f:1a:54:c6:5a:25:66:b6:24:4f:ec:35:1a:24:
ab:9a:91:c2:6b:14:b8:a2:66:50:ec:19:c6:1e:44:
00:e4:58:25:8d:9c:17:28:f4:18:bf:aa:6a:7d:ff:
83:f3:89:38:f5:b6:af:f5:33:32:b0:cb:3f:0a:f1:
c1:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:55:09:72:35:6B:4A:82:ED:9E:6E:ED:D6:80:D1:B2:25:1B:80:6F
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/mlUJcjVrSoLtnm7t1oDRsiUbgG8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
a3:28:53:1f:b3:f8:17:e5:c0:1e:e5:7b:b5:51:91:be:7d:12:
5c:5c:4d:db:31:aa:ca:77:b0:3f:c2:8a:e7:81:24:0e:3a:54:
02:d3:07:39:36:dc:76:e2:32:00:09:7e:a8:47:e5:0c:d2:81:
d6:23:c4:ad:a1:bf:82:2f:d9:c2:84:4b:ef:5a:e2:b8:c3:60:
62:f4:57:72:dd:49:70:2a:92:ce:23:b3:ce:dc:5c:22:14:4a:
89:6e:57:f2:cd:a1:d4:b9:93:87:84:78:94:9b:e4:7a:93:3c:
3b:8c:3d:62:5f:95:8d:ab:11:35:04:2e:2b:17:54:45:e1:c0:
65:6d:73:e2:8f:c0:19:11:d6:12:7f:80:ab:dc:cf:c0:af:ac:
66:c8:c3:5f:0d:77:66:7a:46:6f:89:9b:80:9f:0e:d6:0c:ae:
e9:80:e6:3c:a6:fc:ec:05:7f:f2:4e:3c:84:99:4d:f6:03:4b:
f7:14:37:66:04:39:98:80:79:1e:7b:d4:85:dc:bf:87:07:20:
3b:3a:0b:74:7a:7a:9f:1e:09:4a:6d:19:2c:b4:83:91:33:df:
ce:d2:3f:55:aa:78:68:0b:8f:01:02:36:8e:aa:92:ea:28:be:
14:24:11:64:28:63:26:df:73:14:7e:d0:93:f2:12:de:b8:6c:
e6:53:16:d8
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgICYt4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNTA1MjEx
NzQwNDhaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDlBNTUwOTcyMzU2QjRB
ODJFRDlFNkVFREQ2ODBEMUIyMjUxQjgwNkYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDifYT7+79Fiow+A2J08XwHeAlzYaHIe7IqQkS8BvvWB6lWE09X
PxZJE+I/sDETlT2VbZMGdrxe35gIZxknVw6ENRo3C5G5OH3NkavTinvo6JiX9k1B
AyLm3GzUCHfXXh23cEhtSLzBjmxwAdKKOX/TzHtwzsO37ldh/GaliC5xtH6TiaPP
LBAno3GwKbWlPJmbsFMGSM9tpQesjkmg7S1mcm4zRfBJSnYUk04hc863DaShCdfm
WglWBUCIxK1taafOJdtfGlTGWiVmtiRP7DUaJKuakcJrFLiiZlDsGcYeRADkWCWN
nBco9Bi/qmp9/4PziTj1tq/1MzKwyz8K8cFdAgMBAAGjggI0MIICMDAdBgNVHQ4E
FgQUmlUJcjVrSoLtnm7t1oDRsiUbgG8wHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L21sVUpjalZyU29MdG5t
N3Qxb0RSc2lVYmdHOC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwYgYIKwYBBQUHAQcBAf8EUzBRME8EAgABMEkD
BAIr7zADBAMr9gAwDAMEAiv2DAMEBCv2IDAMAwQCK/Y0AwQCK/ZgAwQCZyMwMAsD
AwJn7AMEA2fsEDAMAwQCZ+wcAwQCZ+xgMA0GCSqGSIb3DQEBCwUAA4IBAQCjKFMf
s/gX5cAe5Xu1UZG+fRJcXE3bMarKd7A/worngSQOOlQC0wc5Ntx24jIACX6oR+UM
0oHWI8Stob+CL9nChEvvWuK4w2Bi9Fdy3UlwKpLOI7PO3FwiFEqJblfyzaHUuZOH
hHiUm+R6kzw7jD1iX5WNqxE1BC4rF1RF4cBlbXPij8AZEdYSf4Cr3M/Ar6xmyMNf
DXdmekZviZuAnw7WDK7pgOY8pvzsBX/yTjyEmU32A0v3FDdmBDmYgHkee9SF3L+H
ByA7Ogt0enqfHglKbRkstIORM9/O0j9VqnhoC48BAjaOqpLqKL4UJBFkKGMm33MU
ftCT8hLeuGzmUxbY
-----END CERTIFICATE-----
Generated at Wed Jun 4 02:08:46 2025 by rpki-client