Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/vYZMkxtbcNqcjoPwkddFJDuIshE.roa
File: vYZMkxtbcNqcjoPwkddFJDuIshE.roa (raw, json)
Hash identifier: AHHPYf9jqpaZ+VhDIpaSl52Qa1ZarBIdepm1tOXXvGQ=
Subject key identifier: BD:86:4C:93:1B:5B:70:DA:9C:8E:83:F0:91:D7:45:24:3B:88:B2:11
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 6DEA
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vYZMkxtbcNqcjoPwkddFJDuIshE.roa
Signing time: Fri 20 Jun 2025 16:14:05 +0000
ROA not before: Fri 20 Jun 2025 16:14:05 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28138 (0x6dea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jun 20 16:14:05 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=BD864C931B5B70DA9C8E83F091D745243B88B211
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:3b:06:21:35:54:c1:80:b9:87:41:4c:a9:b7:
0d:36:bb:5d:78:3e:f4:5c:87:1f:c6:54:f3:f9:30:
ca:1f:27:8b:4f:eb:57:94:4a:bd:bb:92:4d:29:7a:
3d:52:cb:31:66:0a:17:d1:c6:64:29:cb:88:c5:e0:
78:94:ff:6c:b0:28:50:26:81:81:91:0f:92:0a:c6:
4f:34:56:c8:7b:fd:59:30:90:64:78:35:86:ff:7e:
46:1f:f3:eb:14:ae:c8:78:32:48:58:4e:ac:e5:16:
7d:0b:3a:f2:c7:66:75:f3:cf:7c:fc:d2:9b:2e:50:
ee:e6:61:d5:b1:77:5f:9e:a1:75:f7:60:82:e5:31:
aa:08:5a:00:5c:19:7e:88:ba:97:97:1f:72:c5:c9:
f9:48:5c:29:55:d0:dd:d3:1e:ba:7e:5b:53:23:af:
d2:a4:34:27:69:35:6a:94:b8:f1:74:94:00:f5:d6:
92:2a:70:5b:f4:bd:de:62:64:39:cc:0c:90:8d:fc:
95:94:30:9b:3d:87:38:19:c6:e9:f4:46:3a:fb:1d:
0d:ac:71:12:27:eb:e1:b9:8a:a1:d6:a6:eb:a0:13:
a4:d9:01:ab:da:15:75:96:69:21:d8:76:19:af:64:
a9:41:c5:53:77:6c:21:aa:33:f3:36:66:79:4e:40:
f2:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:86:4C:93:1B:5B:70:DA:9C:8E:83:F0:91:D7:45:24:3B:88:B2:11
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vYZMkxtbcNqcjoPwkddFJDuIshE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
92:e2:8f:24:26:56:6c:12:c2:93:15:2f:5b:39:44:7f:b2:f8:
04:2b:6d:6d:d1:72:dd:c3:2c:a3:d1:6a:25:89:46:dd:7d:36:
69:67:56:ca:e1:e3:12:3e:a0:3e:27:2b:a8:1e:85:14:67:68:
d9:93:60:34:f4:f7:cf:15:d4:b6:6a:4e:2b:a8:71:16:8b:15:
ce:9a:0a:69:ba:20:03:09:c0:01:76:87:b1:89:ba:2c:85:4e:
57:a6:93:f8:85:11:69:8a:35:bd:33:c0:ea:c4:fb:09:34:f1:
0d:f7:ce:db:48:27:04:d0:92:3d:b7:0e:0f:70:c8:af:c2:19:
ed:fd:31:78:92:f3:b0:34:c0:00:07:80:c9:20:6a:4a:f7:6c:
b4:2c:20:6d:13:aa:83:b6:fd:3b:8f:f6:3c:14:db:86:17:23:
fe:a3:bb:f5:2c:f8:ec:61:11:99:22:17:13:31:d2:63:54:79:
c6:1f:f0:52:a9:be:9d:32:c5:d0:b5:7e:83:49:47:2b:e4:c9:
65:68:f0:38:d8:13:91:89:25:e2:69:da:85:c8:65:91:08:4c:
3b:f9:2a:80:9f:f3:18:af:39:ac:13:21:2f:f8:d1:aa:ff:dc:
a9:2a:1f:a6:f9:84:db:0c:d9:fd:9b:00:d2:6f:c1:1f:4b:cf:
ab:09:3f:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:47:47 2025 by rpki-client