Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/vghtUqZEICD5xCAcLkKMoZIS8ro.roa
File: vghtUqZEICD5xCAcLkKMoZIS8ro.roa (raw, json)
Hash identifier: xDYAUUkeu7oV6xIgOuT/ngKKUBvQbOdCUwMLEXV1d+M=
Subject key identifier: BE:08:6D:52:A6:44:20:20:F9:C4:20:1C:2E:42:8C:A1:92:12:F2:BA
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 738C
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vghtUqZEICD5xCAcLkKMoZIS8ro.roa
Signing time: Sat 05 Jul 2025 10:47:27 +0000
ROA not before: Sat 05 Jul 2025 10:47:27 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29580 (0x738c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jul 5 10:47:27 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=BE086D52A6442020F9C4201C2E428CA19212F2BA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f1:7d:db:3f:08:da:b1:79:e3:1b:f7:71:3c:
c9:f7:a1:5a:f8:c7:54:88:39:3a:ed:8b:dc:60:64:
9a:bf:12:0a:2c:5f:eb:d5:1c:68:ad:22:9b:36:8c:
e9:e4:82:6e:66:d2:de:45:be:75:09:43:9d:5c:35:
60:34:aa:9f:5b:9b:b7:bb:82:d2:1a:c6:62:0d:a5:
96:22:75:b2:74:04:a3:e8:90:e1:78:b8:78:ca:59:
89:0e:39:ef:02:f7:93:d4:45:5d:19:a4:11:26:ac:
17:30:b4:19:eb:84:87:f7:f0:2d:52:7a:bd:67:c1:
8f:8e:38:19:e2:ce:0a:f0:b7:a1:9c:7c:d2:3b:6d:
c9:60:0a:8f:87:4a:b6:ea:d2:8c:f7:c8:84:71:d0:
e5:2b:04:e9:62:d1:ad:71:67:1b:83:25:6b:d1:7d:
16:0c:7a:32:d8:b3:1f:2b:95:cc:89:43:3f:83:17:
86:83:9a:16:b6:35:62:af:e5:7c:01:89:ef:f7:d9:
e0:f8:ad:60:e4:c8:61:d1:b4:c2:e0:ad:32:85:83:
20:d4:46:3b:f9:9c:67:f7:0a:c6:b1:3e:83:ff:ff:
04:99:17:bb:61:63:88:8b:89:66:a4:e3:36:ad:84:
f6:30:c0:98:ff:59:f2:31:ae:fd:96:8d:b5:f0:02:
6b:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:08:6D:52:A6:44:20:20:F9:C4:20:1C:2E:42:8C:A1:92:12:F2:BA
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vghtUqZEICD5xCAcLkKMoZIS8ro.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
55:14:a4:3a:c3:9d:ea:8a:17:ff:79:8a:e7:fc:e2:67:b8:a4:
17:fc:82:96:c2:9d:fb:f6:20:01:32:02:d0:ad:a1:d6:21:90:
33:e6:90:03:b3:0c:db:9a:71:38:6d:1f:69:b5:cc:cb:f8:0c:
a6:09:74:4f:9c:25:93:c8:5e:d7:c6:cf:ab:9e:52:84:b8:94:
67:85:25:6b:3c:3a:f8:33:d2:9c:06:dd:c2:27:c8:29:83:2f:
44:f7:84:dc:69:5c:c7:59:51:bd:09:d9:0b:d2:54:f1:9a:fc:
b1:eb:4d:49:84:1f:87:0f:03:2d:60:8d:1d:88:1a:ea:01:e1:
4b:19:ce:7a:0d:10:9c:49:47:30:24:a0:89:fe:8d:ba:67:53:
32:fd:06:cd:92:56:d7:62:4d:cc:a3:1e:48:f9:69:cb:7c:ac:
5f:f3:3a:a9:0a:db:69:58:c7:0d:11:a9:84:9c:59:d9:eb:dc:
7b:c5:a3:6e:f6:61:1b:ac:2b:e5:0b:e4:ad:16:35:80:44:a2:
05:48:cb:c4:46:01:b8:04:c8:40:36:10:39:a6:ce:38:df:9a:
51:c0:cc:8f:c7:41:6f:c9:4a:4c:f7:0b:ca:bf:ae:15:11:1f:
bb:1b:a5:3d:78:35:ab:b7:47:4f:60:e2:da:3c:d2:56:0a:0d:
c1:0f:42:94
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgICc4wwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNTA3MDUx
MDQ3MjdaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKEJFMDg2RDUyQTY0NDIw
MjBGOUM0MjAxQzJFNDI4Q0ExOTIxMkYyQkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC18X3bPwjasXnjG/dxPMn3oVr4x1SIOTrti9xgZJq/EgosX+vV
HGitIps2jOnkgm5m0t5FvnUJQ51cNWA0qp9bm7e7gtIaxmINpZYidbJ0BKPokOF4
uHjKWYkOOe8C95PURV0ZpBEmrBcwtBnrhIf38C1Ser1nwY+OOBnizgrwt6GcfNI7
bclgCo+HSrbq0oz3yIRx0OUrBOli0a1xZxuDJWvRfRYMejLYsx8rlcyJQz+DF4aD
mha2NWKv5XwBie/32eD4rWDkyGHRtMLgrTKFgyDURjv5nGf3CsaxPoP//wSZF7th
Y4iLiWak4zathPYwwJj/WfIxrv2WjbXwAmupAgMBAAGjggI0MIICMDAdBgNVHQ4E
FgQUvghtUqZEICD5xCAcLkKMoZIS8rowHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L3ZnaHRVcVpFSUNENXhD
QWNMa0tNb1pJUzhyby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwYgYIKwYBBQUHAQcBAf8EUzBRME8EAgABMEkD
BAIr7zADBAMr9gAwDAMEAiv2DAMEBCv2IDAMAwQCK/Y0AwQCK/ZgAwQCZyMwMAsD
AwJn7AMEA2fsEDAMAwQCZ+wcAwQCZ+xgMA0GCSqGSIb3DQEBCwUAA4IBAQBVFKQ6
w53qihf/eYrn/OJnuKQX/IKWwp379iABMgLQraHWIZAz5pADswzbmnE4bR9ptczL
+AymCXRPnCWTyF7Xxs+rnlKEuJRnhSVrPDr4M9KcBt3CJ8gpgy9E94TcaVzHWVG9
CdkL0lTxmvyx601JhB+HDwMtYI0diBrqAeFLGc56DRCcSUcwJKCJ/o26Z1My/QbN
klbXYk3Mox5I+WnLfKxf8zqpCttpWMcNEamEnFnZ69x7xaNu9mEbrCvlC+StFjWA
RKIFSMvERgG4BMhANhA5ps4435pRwMyPx0FvyUpM9wvKv64VER+7G6U9eDWrt0dP
YOLaPNJWCg3BD0KU
-----END CERTIFICATE-----
Generated at Sun Jul 20 12:57:52 2025 by rpki-client