
Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/nn_OhtC3-15N2TkyTqGLL9Padxk.roa
File: nn_OhtC3-15N2TkyTqGLL9Padxk.roa (raw, json)
Hash identifier: D1o+qbQpImh9S+k8xxQfdl9/2JTDv6pmoh6Sti5933o=
Subject key identifier: 9E:7F:CE:86:D0:B7:FB:5E:4D:D9:39:32:4E:A1:8B:2F:D3:DA:77:19
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 63A4
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/nn_OhtC3-15N2TkyTqGLL9Padxk.roa
Signing time: Fri 23 May 2025 19:13:22 +0000
ROA not before: Fri 23 May 2025 19:13:22 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25508 (0x63a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 23 19:13:22 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=9E7FCE86D0B7FB5E4DD939324EA18B2FD3DA7719
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:63:43:2f:74:37:4e:ee:39:43:c3:7a:0a:10:
55:90:7d:72:06:05:47:77:98:38:27:b0:54:dc:7e:
3e:bb:6e:aa:6e:19:a7:8e:24:3c:ce:6f:8c:97:36:
69:e8:80:ee:f1:ff:bc:cd:07:6f:2d:a3:d6:9d:b4:
6c:1d:16:98:15:c7:2c:dc:a2:18:3e:b1:52:7c:96:
dc:a0:84:be:30:fe:0d:09:b9:45:5e:79:c3:ff:6f:
fa:a0:19:4b:9c:96:c0:15:9e:ca:19:dd:c6:a4:84:
69:8c:54:19:9b:c7:f6:eb:f8:cf:08:be:49:37:68:
7d:33:1d:d3:55:2c:08:30:9b:f9:df:54:d7:48:1e:
56:30:76:e8:96:bb:f0:d8:03:34:13:d7:2a:22:65:
36:84:98:0d:1c:64:20:e2:7a:a3:34:41:92:d0:7b:
b5:fd:0c:4c:58:7b:49:3d:0d:3f:59:b7:0c:08:fa:
ed:de:fe:9b:86:0d:47:58:07:61:08:36:d9:5c:e0:
7f:e3:97:9f:8a:ca:04:fd:34:0e:b5:58:c1:06:96:
d2:55:de:52:88:93:03:7f:db:8c:2c:dc:e8:7a:6a:
d6:b9:34:7f:46:b1:6b:f4:69:8c:5a:e4:93:9c:f2:
05:c4:19:55:7d:35:a0:8e:71:cc:e8:e0:9d:0c:82:
2f:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:7F:CE:86:D0:B7:FB:5E:4D:D9:39:32:4E:A1:8B:2F:D3:DA:77:19
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/nn_OhtC3-15N2TkyTqGLL9Padxk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
0e:a4:fd:22:18:b9:4d:80:a3:83:b9:1c:6f:32:e0:80:ab:19:
94:82:a2:86:f8:df:ad:2a:cf:cc:fd:f8:fb:5e:73:3b:c6:91:
a7:30:c4:99:eb:c6:63:05:be:90:95:4f:5b:52:59:3c:72:69:
00:2b:c1:14:50:1b:b6:74:5c:85:a9:4e:54:80:60:57:c3:d6:
27:6d:c8:8b:98:a2:18:72:dc:02:36:bd:80:45:b4:11:d8:c0:
38:df:06:c1:5b:3d:c3:9c:80:1f:be:51:89:2e:7f:c1:ec:6c:
e6:22:60:62:ad:ca:4d:ef:82:e1:1d:7e:56:be:90:5a:93:be:
40:d2:1b:b4:b6:b5:54:f6:bf:c1:cf:d8:d2:a9:a5:b0:46:ad:
6f:2d:0a:46:d7:4f:9f:8a:dd:cc:80:e1:f7:47:f9:a4:6a:04:
72:40:ed:c8:16:97:2a:da:39:6f:b6:25:e0:f6:43:b9:f4:db:
37:e2:d7:e1:d6:a7:b2:b2:90:8e:f0:13:0b:76:4d:ea:ea:b7:
90:58:5c:db:47:2d:5b:27:9a:a8:95:cb:9c:39:40:c1:3c:17:
c6:a4:f9:c3:c7:be:f3:a8:c6:00:d4:52:7a:63:67:49:98:8a:
03:1a:a8:55:89:73:26:2d:60:9a:3c:00:1d:0d:b9:b1:21:cd:
0f:61:55:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:48:33 2025 by rpki-client