Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/sb9NJY4SFw0Th81bb-nKyOm8-R8.roa
File: sb9NJY4SFw0Th81bb-nKyOm8-R8.roa (raw, json)
Hash identifier: d6TscGHLNqZQc9gjBnRoOkA2OP9NF8adpFlP0OMimW0=
Subject key identifier: B1:BF:4D:25:8E:12:17:0D:13:87:CD:5B:6F:E9:CA:C8:E9:BC:F9:1F
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 737A
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/sb9NJY4SFw0Th81bb-nKyOm8-R8.roa
Signing time: Sat 05 Jul 2025 06:15:01 +0000
ROA not before: Sat 05 Jul 2025 06:15:01 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29562 (0x737a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jul 5 06:15:01 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=B1BF4D258E12170D1387CD5B6FE9CAC8E9BCF91F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:12:7d:19:e6:7e:6f:44:56:a7:fa:6a:22:13:
d6:f6:51:27:a2:96:26:76:be:cf:c6:23:af:b0:d8:
21:45:2f:2f:07:4a:61:82:4e:f9:50:b9:ae:6c:ae:
63:1d:04:70:f2:0c:02:aa:78:65:b2:8f:17:70:4a:
8c:d6:db:71:fc:c9:c5:28:f3:2d:bd:12:61:25:4b:
03:67:09:88:26:42:ee:eb:03:b0:da:64:03:d7:f1:
bb:9b:32:be:3c:27:c1:d6:e6:fc:d3:9f:b7:c5:02:
34:62:35:89:c7:5a:67:98:a4:18:98:85:9f:1e:ed:
e9:ac:02:1f:43:a0:c4:b2:ce:26:bb:f9:4e:c4:2d:
3e:ac:29:fc:a5:f0:8a:76:1b:2e:61:75:3f:4e:bd:
d9:4d:3d:46:c8:aa:8c:51:ee:30:e4:4d:ad:b7:8c:
41:31:9f:8c:d4:e6:95:ef:f5:cb:51:22:47:d5:5a:
f8:fc:d8:c0:22:60:3d:2a:55:02:b1:39:ad:5c:09:
c0:f3:e4:44:26:6a:03:22:bd:7a:01:bb:85:77:8a:
1b:dd:7b:29:6b:75:e9:2d:c7:7a:bd:fb:58:b1:69:
e9:3e:c3:9e:dd:e3:a7:73:c7:a9:c2:c4:b7:21:f6:
f0:4c:73:dd:82:cf:79:e3:a0:64:e6:df:37:7b:b8:
b3:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:BF:4D:25:8E:12:17:0D:13:87:CD:5B:6F:E9:CA:C8:E9:BC:F9:1F
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/sb9NJY4SFw0Th81bb-nKyOm8-R8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
20:83:ed:35:27:0b:a5:4e:6e:af:0a:c6:f9:5c:56:b7:9a:20:
63:07:0c:9e:b4:b4:75:ec:19:83:d7:f7:fa:b0:36:97:a6:63:
ae:2f:66:42:58:30:2a:a0:84:a1:2f:f2:96:8a:8a:06:78:22:
02:c6:d4:74:3f:c3:b9:06:dd:0c:c8:13:0d:22:91:3d:4d:17:
5b:6a:d5:5c:ff:1f:8b:ce:b8:71:52:9a:f4:fa:44:57:62:a6:
44:bc:9a:eb:fd:d0:16:42:65:bd:6c:fc:01:7e:ed:c9:4b:4b:
aa:d9:4c:04:86:03:16:34:22:3e:cb:35:50:85:af:aa:f1:73:
10:fc:d0:a1:4f:9a:04:18:6f:b1:08:2b:8d:01:56:4f:8a:9b:
6b:dd:c3:99:0e:a0:61:6b:68:c4:5a:c9:09:8e:5f:18:59:60:
4a:82:34:ab:1b:46:58:c3:49:57:b2:bb:f3:35:19:20:19:60:
7b:93:cb:d7:a0:54:4a:bb:71:d3:c1:ae:b4:01:2c:b0:e2:2c:
ac:19:90:2f:b1:f5:cf:5a:8d:4f:41:48:34:24:3e:10:07:db:
1e:0f:ed:bb:43:95:75:46:3d:7c:44:a2:4e:1c:1e:f6:b8:7e:
77:c9:bd:54:76:2b:2b:9d:6a:11:4b:60:de:db:6a:e2:ee:f0:
c8:87:f7:90
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgICc3owDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNTA3MDUw
NjE1MDFaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKEIxQkY0RDI1OEUxMjE3
MEQxMzg3Q0Q1QjZGRTlDQUM4RTlCQ0Y5MUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDPEn0Z5n5vRFan+moiE9b2USeiliZ2vs/GI6+w2CFFLy8HSmGC
TvlQua5srmMdBHDyDAKqeGWyjxdwSozW23H8ycUo8y29EmElSwNnCYgmQu7rA7Da
ZAPX8bubMr48J8HW5vzTn7fFAjRiNYnHWmeYpBiYhZ8e7emsAh9DoMSyzia7+U7E
LT6sKfyl8Ip2Gy5hdT9OvdlNPUbIqoxR7jDkTa23jEExn4zU5pXv9ctRIkfVWvj8
2MAiYD0qVQKxOa1cCcDz5EQmagMivXoBu4V3ihvdeylrdektx3q9+1ixaek+w57d
46dzx6nCxLch9vBMc92Cz3njoGTm3zd7uLNfAgMBAAGjggI0MIICMDAdBgNVHQ4E
FgQUsb9NJY4SFw0Th81bb+nKyOm8+R8wHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L3NiOU5KWTRTRncwVGg4
MWJiLW5LeU9tOC1SOC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwYgYIKwYBBQUHAQcBAf8EUzBRME8EAgABMEkD
BAIr7zADBAMr9gAwDAMEAiv2DAMEBCv2IDAMAwQCK/Y0AwQCK/ZgAwQCZyMwMAsD
AwJn7AMEA2fsEDAMAwQCZ+wcAwQCZ+xgMA0GCSqGSIb3DQEBCwUAA4IBAQAgg+01
JwulTm6vCsb5XFa3miBjBwyetLR17BmD1/f6sDaXpmOuL2ZCWDAqoIShL/KWiooG
eCICxtR0P8O5Bt0MyBMNIpE9TRdbatVc/x+LzrhxUpr0+kRXYqZEvJrr/dAWQmW9
bPwBfu3JS0uq2UwEhgMWNCI+yzVQha+q8XMQ/NChT5oEGG+xCCuNAVZPiptr3cOZ
DqBha2jEWskJjl8YWWBKgjSrG0ZYw0lXsrvzNRkgGWB7k8vXoFRKu3HTwa60ASyw
4iysGZAvsfXPWo1PQUg0JD4QB9seD+27Q5V1Rj18RKJOHB72uH53yb1UdisrnWoR
S2De22ri7vDIh/eQ
-----END CERTIFICATE-----
Generated at Sun Jul 20 12:45:30 2025 by rpki-client