Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/pQiSLcRCg9mPuMsxBPrUkluP_Mk.roa
File: pQiSLcRCg9mPuMsxBPrUkluP_Mk.roa (raw, json)
Hash identifier: kXKcYTqmu6BSNzQkCQNZYmMWApfh4j5cOGcqoGmEAbs=
Subject key identifier: A5:08:92:2D:C4:42:83:D9:8F:B8:CB:31:04:FA:D4:92:5B:8F:FC:C9
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 6AE2
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/pQiSLcRCg9mPuMsxBPrUkluP_Mk.roa
Signing time: Thu 12 Jun 2025 02:45:18 +0000
ROA not before: Thu 12 Jun 2025 02:45:18 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27362 (0x6ae2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jun 12 02:45:18 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=A508922DC44283D98FB8CB3104FAD4925B8FFCC9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:25:4e:78:1f:2d:f4:1a:b9:95:90:bd:55:16:
65:08:29:7c:f0:1a:ca:f4:52:65:cd:94:09:33:99:
73:c1:ff:2c:7e:7b:7f:b8:96:58:cf:55:b6:f5:d7:
b6:74:74:23:bd:a2:b0:d5:9c:98:e1:6b:47:a2:80:
12:6d:f2:6a:22:b3:c4:1a:4b:df:49:bf:4d:32:be:
a3:3b:7b:e6:af:a0:43:bd:1e:3b:c9:57:f6:73:bb:
ab:01:80:e9:5c:f2:5a:f2:93:e6:6e:9d:68:18:81:
cc:03:cc:b1:d0:4b:71:ab:28:64:24:59:56:d5:08:
d1:83:31:60:71:2d:7e:3f:a1:87:35:26:5b:a6:7a:
da:09:54:8e:10:d8:e6:8f:45:3e:28:b2:2b:29:b7:
d4:5c:83:6c:fe:ba:46:9d:9d:24:8e:e4:2e:6a:41:
fc:16:2e:34:a4:2f:a5:39:89:77:42:0b:0a:19:6f:
f4:12:b9:6a:d5:d1:64:f1:d9:f4:30:b9:c6:32:52:
d8:1f:8b:38:48:b8:33:4a:9b:21:5f:95:eb:4d:b7:
f8:0c:94:94:17:65:e7:b9:cb:2e:7d:a8:16:a4:6e:
e6:1a:a1:b4:23:cf:78:ad:a3:ab:fe:d1:7b:c6:ef:
ba:90:98:69:03:04:e4:cb:77:0e:c7:7c:ab:15:84:
0f:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:08:92:2D:C4:42:83:D9:8F:B8:CB:31:04:FA:D4:92:5B:8F:FC:C9
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/pQiSLcRCg9mPuMsxBPrUkluP_Mk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
a6:84:a9:49:ca:f9:bd:64:da:1b:d9:20:c3:90:f7:80:ca:d3:
51:38:1f:a3:63:00:b2:e7:2c:46:15:5a:17:f9:97:c6:e5:2c:
10:99:31:55:bf:27:32:8b:5e:51:16:a2:1e:79:e3:9b:7e:45:
41:b1:e1:6b:cb:16:f0:a1:57:c0:34:7c:1f:b4:17:c0:f2:59:
23:d5:eb:6a:7f:7d:de:c5:0e:d6:75:a1:9f:8b:c6:0c:5f:8c:
81:3c:2d:7b:7c:76:65:86:f3:71:44:ca:10:5b:02:a0:0b:61:
5c:26:4d:29:7f:55:26:80:a3:b1:cd:0a:56:29:13:72:77:7e:
31:69:79:66:6e:4e:b8:17:3e:94:04:78:9a:8f:ee:16:f7:f2:
e1:70:0c:20:6c:8e:9d:b0:72:bc:80:82:4e:18:b1:f7:ef:74:
68:75:31:92:a1:00:71:e7:a5:90:fd:d8:63:9c:4f:14:10:ad:
39:54:a5:33:9d:0c:97:56:9b:9d:08:15:ce:60:9d:ad:84:5b:
c1:85:7e:bf:d3:a7:1c:82:7d:d8:5f:2d:47:78:e1:1b:d1:90:
18:f3:01:7f:78:d2:f1:a0:f9:6c:eb:ab:40:56:9a:cb:f8:57:
80:9d:72:d1:27:b5:4e:54:bd:a0:0b:e4:cb:84:20:31:81:e2:
b1:7a:42:46
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgICauIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNTA2MTIw
MjQ1MThaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKEE1MDg5MjJEQzQ0Mjgz
RDk4RkI4Q0IzMTA0RkFENDkyNUI4RkZDQzkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC+JU54Hy30GrmVkL1VFmUIKXzwGsr0UmXNlAkzmXPB/yx+e3+4
lljPVbb117Z0dCO9orDVnJjha0eigBJt8mois8QaS99Jv00yvqM7e+avoEO9HjvJ
V/Zzu6sBgOlc8lryk+ZunWgYgcwDzLHQS3GrKGQkWVbVCNGDMWBxLX4/oYc1Jlum
etoJVI4Q2OaPRT4osispt9Rcg2z+ukadnSSO5C5qQfwWLjSkL6U5iXdCCwoZb/QS
uWrV0WTx2fQwucYyUtgfizhIuDNKmyFfletNt/gMlJQXZee5yy59qBakbuYaobQj
z3ito6v+0XvG77qQmGkDBOTLdw7HfKsVhA+BAgMBAAGjggI0MIICMDAdBgNVHQ4E
FgQUpQiSLcRCg9mPuMsxBPrUkluP/MkwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L3BRaVNMY1JDZzltUHVN
c3hCUHJVa2x1UF9Nay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwYgYIKwYBBQUHAQcBAf8EUzBRME8EAgABMEkD
BAIr7zADBAMr9gAwDAMEAiv2DAMEBCv2IDAMAwQCK/Y0AwQCK/ZgAwQCZyMwMAsD
AwJn7AMEA2fsEDAMAwQCZ+wcAwQCZ+xgMA0GCSqGSIb3DQEBCwUAA4IBAQCmhKlJ
yvm9ZNob2SDDkPeAytNROB+jYwCy5yxGFVoX+ZfG5SwQmTFVvycyi15RFqIeeeOb
fkVBseFryxbwoVfANHwftBfA8lkj1etqf33exQ7WdaGfi8YMX4yBPC17fHZlhvNx
RMoQWwKgC2FcJk0pf1UmgKOxzQpWKRNyd34xaXlmbk64Fz6UBHiaj+4W9/LhcAwg
bI6dsHK8gIJOGLH373RodTGSoQBx56WQ/dhjnE8UEK05VKUznQyXVpudCBXOYJ2t
hFvBhX6/06ccgn3YXy1HeOEb0ZAY8wF/eNLxoPls66tAVprL+FeAnXLRJ7VOVL2g
C+TLhCAxgeKxekJG
-----END CERTIFICATE-----
Generated at Sun Jul 20 12:35:54 2025 by rpki-client