Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/njM4CipA01FG2RKuOM_tU40rWB8.roa
File: njM4CipA01FG2RKuOM_tU40rWB8.roa (raw, json)
Hash identifier: IRWtXxfLdJm2tqt47+u7UANQ6nSB5FLP4E27Xq+YAcI=
Subject key identifier: 9E:33:38:0A:2A:40:D3:51:46:D9:12:AE:38:CF:ED:53:8D:2B:58:1F
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 68E4
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/njM4CipA01FG2RKuOM_tU40rWB8.roa
Signing time: Fri 06 Jun 2025 19:11:59 +0000
ROA not before: Fri 06 Jun 2025 19:11:59 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26852 (0x68e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jun 6 19:11:59 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=9E33380A2A40D35146D912AE38CFED538D2B581F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ae:6c:1e:82:01:6f:2a:f4:07:27:b2:14:f5:
a7:e6:c3:d3:a6:18:a4:50:c5:c9:a2:dd:3d:01:f0:
e3:2e:06:e1:f0:5c:02:f8:15:ff:11:36:49:78:40:
50:25:84:bf:47:1f:ef:2f:b6:35:39:49:78:dd:36:
b9:b3:dc:f4:12:61:22:df:1f:17:d6:9b:c1:80:b4:
b7:f7:32:75:e2:c6:a2:c0:45:06:42:90:ca:7b:63:
32:64:34:4f:88:dd:13:c9:8a:fa:89:2c:fc:e0:01:
49:05:3c:c5:bf:63:a8:c8:4b:c8:4f:d1:2a:c4:4f:
9f:ae:81:d6:81:eb:cd:f9:a6:ac:e5:2c:0e:de:18:
96:96:44:e5:91:7b:ef:13:47:b3:9e:e4:26:be:ba:
58:1c:4b:ff:88:f7:83:98:5e:58:c2:34:aa:6f:79:
48:74:27:9c:da:b8:f5:2f:56:aa:e3:5f:66:ed:b4:
f8:bb:e6:0d:12:f7:b6:3b:45:36:ed:32:34:a3:e3:
f0:08:22:15:e1:b0:15:39:9b:a5:9a:90:63:53:a9:
dd:99:46:45:6c:63:19:c3:32:8d:87:b1:bb:c9:14:
d1:42:51:cc:23:a4:19:3a:a7:82:f3:5a:7e:50:4f:
42:7b:ee:4a:fd:24:1d:cc:62:36:06:c7:43:ee:86:
bc:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:33:38:0A:2A:40:D3:51:46:D9:12:AE:38:CF:ED:53:8D:2B:58:1F
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/njM4CipA01FG2RKuOM_tU40rWB8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
75:eb:9a:52:d4:00:d4:04:fe:a5:d9:3f:72:5a:b0:1e:7e:8d:
64:3d:17:93:6d:f4:61:f3:2b:e5:f2:aa:d1:10:9e:94:fd:f7:
a6:d2:bc:18:c9:54:97:2b:19:fb:89:6c:38:00:d8:fa:5a:0a:
c5:df:18:1d:c2:91:d9:ec:56:47:97:19:85:59:3b:1e:75:ba:
fc:3e:52:28:15:71:9f:4b:36:81:96:4b:94:87:5a:19:0d:be:
be:31:42:3f:6f:cb:6f:8e:2d:f3:d4:16:d0:0a:fc:87:8a:8f:
b8:68:09:33:53:b1:39:e0:a5:3e:88:8c:11:00:4f:fa:7f:f6:
68:7a:8a:43:3c:1c:43:f3:0c:d1:71:25:d2:ea:db:b3:ef:03:
fb:92:a0:99:9a:5e:c0:8b:4d:2c:9d:cf:52:d4:3e:87:a8:15:
57:da:d4:25:ea:db:fb:25:d2:57:44:37:20:47:f5:77:e5:73:
d9:ee:cd:5c:a7:ed:83:c5:c2:6f:27:b9:4e:b2:65:0f:d1:6d:
e1:81:f0:83:1b:18:ad:d0:b1:0c:f1:d5:a4:8d:f0:bc:d8:f3:
f2:2a:64:22:fe:9c:16:37:c2:c3:75:a4:a2:be:38:5f:56:d7:
4f:b5:3e:60:9d:95:d6:7a:0f:5a:18:1c:6c:a3:4e:d0:43:01:
88:37:d0:9f
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgICaOQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNTA2MDYx
OTExNTlaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDlFMzMzODBBMkE0MEQz
NTE0NkQ5MTJBRTM4Q0ZFRDUzOEQyQjU4MUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDSrmweggFvKvQHJ7IU9afmw9OmGKRQxcmi3T0B8OMuBuHwXAL4
Ff8RNkl4QFAlhL9HH+8vtjU5SXjdNrmz3PQSYSLfHxfWm8GAtLf3MnXixqLARQZC
kMp7YzJkNE+I3RPJivqJLPzgAUkFPMW/Y6jIS8hP0SrET5+ugdaB6835pqzlLA7e
GJaWROWRe+8TR7Oe5Ca+ulgcS/+I94OYXljCNKpveUh0J5zauPUvVqrjX2bttPi7
5g0S97Y7RTbtMjSj4/AIIhXhsBU5m6WakGNTqd2ZRkVsYxnDMo2HsbvJFNFCUcwj
pBk6p4LzWn5QT0J77kr9JB3MYjYGx0PuhrznAgMBAAGjggI0MIICMDAdBgNVHQ4E
FgQUnjM4CipA01FG2RKuOM/tU40rWB8wHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L25qTTRDaXBBMDFGRzJS
S3VPTV90VTQwcldCOC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwYgYIKwYBBQUHAQcBAf8EUzBRME8EAgABMEkD
BAIr7zADBAMr9gAwDAMEAiv2DAMEBCv2IDAMAwQCK/Y0AwQCK/ZgAwQCZyMwMAsD
AwJn7AMEA2fsEDAMAwQCZ+wcAwQCZ+xgMA0GCSqGSIb3DQEBCwUAA4IBAQB165pS
1ADUBP6l2T9yWrAefo1kPReTbfRh8yvl8qrREJ6U/fem0rwYyVSXKxn7iWw4ANj6
WgrF3xgdwpHZ7FZHlxmFWTsedbr8PlIoFXGfSzaBlkuUh1oZDb6+MUI/b8tvji3z
1BbQCvyHio+4aAkzU7E54KU+iIwRAE/6f/ZoeopDPBxD8wzRcSXS6tuz7wP7kqCZ
ml7Ai00snc9S1D6HqBVX2tQl6tv7JdJXRDcgR/V35XPZ7s1cp+2DxcJvJ7lOsmUP
0W3hgfCDGxit0LEM8dWkjfC82PPyKmQi/pwWN8LDdaSivjhfVtdPtT5gnZXWeg9a
GBxso07QQwGIN9Cf
-----END CERTIFICATE-----
Generated at Sun Jul 20 12:38:36 2025 by rpki-client