Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/nvMhYy4FJxRztN49lJ5LY5tbXKM.roa
File: nvMhYy4FJxRztN49lJ5LY5tbXKM.roa (raw, json)
Hash identifier: 3n5arc5yuHMGjRTe4hWmu2WQnLJmCiZVD0c67piyTrI=
Subject key identifier: 9E:F3:21:63:2E:05:27:14:73:B4:DE:3D:94:9E:4B:63:9B:5B:5C:A3
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 7048
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/nvMhYy4FJxRztN49lJ5LY5tbXKM.roa
Signing time: Thu 26 Jun 2025 17:44:30 +0000
ROA not before: Thu 26 Jun 2025 17:44:30 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28744 (0x7048)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jun 26 17:44:30 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=9EF321632E05271473B4DE3D949E4B639B5B5CA3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:08:c3:34:1e:8c:f8:5b:9f:fe:2e:fe:f0:8a:
f9:30:0f:ea:23:14:60:e6:d0:15:88:77:e0:96:b2:
7e:25:b7:71:09:97:9f:74:a2:cc:2d:33:a5:a1:e4:
b3:35:e5:85:88:26:cb:42:bb:32:aa:79:76:a9:c3:
bd:39:ea:be:29:20:d5:f5:af:34:9b:64:49:66:2e:
08:e7:f1:a7:f9:ce:27:b2:63:b5:dd:ae:22:d8:a9:
41:41:ac:c4:6d:33:bb:4a:32:1d:4a:8d:af:c3:a3:
52:09:34:bf:7a:bd:38:49:f1:35:ef:54:1b:bd:51:
7a:31:eb:79:bb:d9:10:e2:c4:39:6f:79:15:f5:9b:
c3:02:76:66:a0:38:3e:df:ae:85:50:8b:f5:37:fa:
67:72:2a:b5:44:9a:11:5a:a1:8f:94:a9:12:de:c2:
64:4d:1b:ae:16:9f:86:37:74:de:67:2a:83:1e:16:
77:d5:b6:58:55:54:d5:62:a2:89:0a:2b:64:f1:7d:
ab:76:d4:27:67:cd:ad:f2:5e:59:b7:87:39:1c:eb:
05:8f:d6:7e:dc:01:b9:e6:84:d6:9c:51:35:39:a0:
eb:ea:5f:10:92:1f:01:d2:79:48:ef:77:71:ff:d1:
07:1a:7c:5c:52:59:cd:46:27:cb:a7:38:64:15:6e:
f7:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:F3:21:63:2E:05:27:14:73:B4:DE:3D:94:9E:4B:63:9B:5B:5C:A3
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/nvMhYy4FJxRztN49lJ5LY5tbXKM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
21:3b:ed:89:a7:49:83:32:52:0a:c9:da:97:f5:d6:21:37:e9:
1c:75:a5:17:03:0a:3c:6e:61:6c:da:78:b0:1d:d1:63:a4:a7:
9e:e6:1e:6a:ed:3e:bf:e5:6a:1f:e0:56:07:44:d8:b8:ff:55:
4d:00:0b:76:1a:01:c4:cc:95:2d:59:cb:7c:64:ad:b3:93:c3:
3d:4f:f7:49:00:54:11:37:16:80:eb:dd:8c:be:b3:dd:3f:7b:
55:29:9b:10:a8:e4:83:67:40:ef:2a:85:89:ad:ef:60:7e:85:
ad:c9:b1:58:dd:a8:54:a5:72:80:fd:42:a7:f9:c3:fc:9f:15:
c8:65:2e:95:de:d7:5f:f8:cb:19:7f:40:14:05:18:5c:6c:86:
58:99:af:87:dc:fd:5c:a5:23:60:4f:13:8a:e9:fb:7c:dc:25:
a4:7c:77:f3:59:5f:81:de:28:1c:cf:1b:09:9b:6e:bc:f1:41:
4d:4d:54:79:d6:2c:9f:59:53:e8:5e:d9:e9:10:ae:63:ec:af:
a7:4d:ef:1a:19:e1:c5:28:6a:f5:e8:32:e5:76:e4:be:02:c6:
62:29:30:e1:69:48:c3:bb:04:e1:cc:a5:d2:91:9a:fb:34:70:
ca:26:af:74:d7:06:32:40:ae:19:8e:9b:5e:73:3a:0c:84:ac:
17:27:e1:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:53:23 2025 by rpki-client