Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/u4X5SBS3k6s1Q4ce18-oqt_KXJU.roa
File: u4X5SBS3k6s1Q4ce18-oqt_KXJU.roa (raw, json)
Hash identifier: 4igeljJkt77NK2xxRNp7AbmkrQlEDg3gdgLCjDiQsOw=
Subject key identifier: BB:85:F9:48:14:B7:93:AB:35:43:87:1E:D7:CF:A8:AA:DF:CA:5C:95
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 62B4
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/u4X5SBS3k6s1Q4ce18-oqt_KXJU.roa
Signing time: Wed 21 May 2025 07:10:48 +0000
ROA not before: Wed 21 May 2025 07:10:48 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25268 (0x62b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 21 07:10:48 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=BB85F94814B793AB3543871ED7CFA8AADFCA5C95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:2f:a9:35:6a:01:25:4a:7d:e5:71:4e:b1:d9:
b2:b6:c7:73:8e:5d:73:f8:fd:06:5a:9d:58:67:e3:
17:17:3e:19:4a:70:32:04:0a:57:40:f9:47:27:95:
35:5f:13:30:67:84:a2:83:fb:f9:48:a2:f9:74:6e:
cd:02:1a:37:99:66:93:09:75:2a:89:45:b2:fc:71:
44:94:c9:92:0b:96:ea:2d:0a:09:d4:a8:5b:38:6a:
bb:e8:1e:8f:84:28:03:a9:18:fa:7b:bd:c3:cc:0e:
52:7a:34:03:cf:30:25:18:d3:c8:f4:ec:14:5e:08:
72:f3:54:70:56:f2:e0:a7:98:9f:86:12:a8:68:4f:
1e:42:cb:d2:65:32:cd:83:ae:70:4a:57:8d:39:23:
f4:8f:04:d4:1a:d9:03:b6:9b:16:dc:80:75:d2:8e:
94:34:cd:86:31:ae:b0:36:e0:cf:68:e0:cc:78:f3:
25:44:dc:39:04:2d:89:11:e7:66:a1:4a:0a:78:81:
1e:9b:2c:1f:e2:80:b7:bf:e7:d7:4d:01:d1:49:8c:
20:75:15:ec:46:98:29:e1:a0:85:c1:a8:d5:2f:7f:
a0:9c:18:56:6e:57:7e:59:72:75:2f:a5:ab:78:36:
e6:73:c9:34:4c:c7:ea:cd:3e:3b:d5:48:9a:05:96:
2b:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:85:F9:48:14:B7:93:AB:35:43:87:1E:D7:CF:A8:AA:DF:CA:5C:95
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/u4X5SBS3k6s1Q4ce18-oqt_KXJU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
b1:e5:85:7a:2d:03:e1:c5:97:69:a0:a1:43:76:65:3a:b3:cb:
8c:39:38:41:ea:97:5d:c4:e1:48:4f:66:c6:c1:e1:d9:2f:40:
48:66:e7:89:ff:d2:2a:b2:4e:ca:cf:a5:a5:ba:fc:df:0a:6d:
55:60:38:84:56:16:92:89:d0:bd:d0:b9:d0:b9:3b:81:16:83:
40:ce:48:09:57:3c:f6:2d:02:74:86:71:d4:40:71:86:80:4d:
38:f2:49:d6:ed:ff:8c:ee:5c:ac:8b:5e:8d:7c:04:58:dc:b7:
b4:a2:64:30:80:0d:bc:6d:e0:ca:14:ae:67:e4:27:02:24:91:
1d:26:7c:84:ea:81:36:1f:8a:72:43:e6:79:0c:42:bb:8b:93:
3e:ba:91:67:f8:dc:05:93:6e:b7:be:ee:c5:9d:ce:a3:72:6a:
95:03:46:29:0b:c5:62:06:b0:c1:60:73:3c:a5:be:0e:bf:85:
e8:9e:d2:d2:c8:ba:72:6c:a5:cf:01:83:8c:e8:89:fa:39:b4:
29:f2:40:43:d2:98:0d:c8:33:6b:a4:1d:01:ad:08:44:38:1f:
67:49:49:7a:25:8f:bf:74:24:0d:5c:7f:82:ba:bc:f9:92:c2:
e1:e4:58:79:d6:84:61:d3:3b:93:d1:27:7a:66:52:b6:58:4a:
63:b4:80:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 01:00:03 2025 by rpki-client