Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/vjFlLZaEs8S62jBIQaoZKgeZSMM.roa
File: vjFlLZaEs8S62jBIQaoZKgeZSMM.roa (raw, json)
Hash identifier: ZxspRiY/flQa9EN2kKfMve1IVLYmTHjzro53zaQbl9U=
Subject key identifier: BE:31:65:2D:96:84:B3:C4:BA:DA:30:48:41:AA:19:2A:07:99:48:C3
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 74A4
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vjFlLZaEs8S62jBIQaoZKgeZSMM.roa
Signing time: Tue 08 Jul 2025 08:44:58 +0000
ROA not before: Tue 08 Jul 2025 08:44:58 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29860 (0x74a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jul 8 08:44:58 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=BE31652D9684B3C4BADA304841AA192A079948C3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:72:c4:41:73:99:4a:5c:a1:c5:fd:ff:1c:06:
99:30:f3:ef:26:c1:88:1e:5d:ba:91:3c:18:13:c8:
b2:9e:2d:0d:72:6e:c4:98:a6:bb:ad:ac:ea:3f:04:
14:51:1b:a0:6a:69:1c:dd:cc:60:3a:30:f5:73:d1:
67:0d:1c:40:bf:39:bc:09:86:f9:91:7c:bb:0d:13:
2e:87:b7:a4:42:aa:51:e0:a8:2f:e4:e3:54:7c:0d:
60:0f:aa:d9:89:3c:a2:fb:be:3b:85:21:a4:c3:5d:
37:08:a9:5b:e1:1d:50:c0:30:2b:91:53:88:2c:d1:
62:2c:99:26:41:11:4e:04:a5:69:91:41:0b:e3:cd:
fe:1c:7f:8f:34:9f:90:b7:86:9b:97:58:74:38:21:
f1:ab:1d:91:f0:30:9e:66:2e:3c:cf:22:cc:e0:84:
de:72:fa:a7:b4:a2:99:2d:15:1b:fa:cb:ff:f4:c2:
fc:1b:d1:57:fc:29:87:c6:bb:b9:c4:ac:e5:b2:ba:
03:7a:20:2e:03:3c:92:70:c5:f0:19:74:8f:72:57:
85:a3:bc:66:87:4f:3d:a7:dd:4e:fa:6b:35:40:ee:
c2:5a:32:26:27:e6:e0:e6:9f:81:1a:05:d5:9a:73:
01:28:5f:ca:d1:bb:84:3d:11:d7:df:43:ac:44:90:
51:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:31:65:2D:96:84:B3:C4:BA:DA:30:48:41:AA:19:2A:07:99:48:C3
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vjFlLZaEs8S62jBIQaoZKgeZSMM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
10:69:a4:db:44:33:40:30:ba:54:95:cd:f2:7e:23:f8:a6:c9:
7b:2d:92:b2:be:23:03:d9:0a:0d:62:58:de:b8:5b:84:f8:f2:
ec:16:88:21:18:f6:96:cd:e8:d9:68:e8:ae:44:1e:5e:31:ad:
9b:5f:88:3b:8f:e8:e9:72:0b:02:09:73:ce:2f:71:11:49:20:
a9:cb:b3:fc:da:5d:7a:a3:ed:7c:59:59:d4:6d:54:49:c1:49:
1f:49:d6:2e:90:a6:6d:e8:2e:9b:bc:8c:8c:33:3d:a3:20:33:
e3:65:0b:f5:aa:69:5b:f1:21:75:18:8f:4d:d5:dc:ea:aa:79:
8a:e8:f4:c8:66:41:b2:1b:d2:3e:24:20:0b:35:ba:f4:0e:3a:
49:26:20:f8:af:0a:d2:a9:83:cc:bf:cc:79:3d:8e:f7:05:8f:
24:e1:bd:45:8e:1c:66:a8:e6:f9:cb:a9:7a:8f:66:7a:4f:54:
0e:71:03:30:07:2c:92:cf:7d:57:4c:2b:f9:cd:78:08:09:61:
71:65:8c:e2:d3:55:73:b7:2d:bc:88:89:8d:9b:72:b1:fb:a1:
11:10:5d:c9:09:07:bb:9d:c5:2f:ad:9b:ae:f2:55:da:3e:76:
c4:c1:ba:04:4c:72:b6:74:f1:0a:2c:57:ba:b6:b4:5f:9b:51:
10:8b:6f:fc
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgICdKQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNTA3MDgw
ODQ0NThaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKEJFMzE2NTJEOTY4NEIz
QzRCQURBMzA0ODQxQUExOTJBMDc5OTQ4QzMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDFcsRBc5lKXKHF/f8cBpkw8+8mwYgeXbqRPBgTyLKeLQ1ybsSY
prutrOo/BBRRG6BqaRzdzGA6MPVz0WcNHEC/ObwJhvmRfLsNEy6Ht6RCqlHgqC/k
41R8DWAPqtmJPKL7vjuFIaTDXTcIqVvhHVDAMCuRU4gs0WIsmSZBEU4EpWmRQQvj
zf4cf480n5C3hpuXWHQ4IfGrHZHwMJ5mLjzPIszghN5y+qe0opktFRv6y//0wvwb
0Vf8KYfGu7nErOWyugN6IC4DPJJwxfAZdI9yV4WjvGaHTz2n3U76azVA7sJaMiYn
5uDmn4EaBdWacwEoX8rRu4Q9EdffQ6xEkFEnAgMBAAGjggI0MIICMDAdBgNVHQ4E
FgQUvjFlLZaEs8S62jBIQaoZKgeZSMMwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L3ZqRmxMWmFFczhTNjJq
QklRYW9aS2dlWlNNTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwYgYIKwYBBQUHAQcBAf8EUzBRME8EAgABMEkD
BAIr7zADBAMr9gAwDAMEAiv2DAMEBCv2IDAMAwQCK/Y0AwQCK/ZgAwQCZyMwMAsD
AwJn7AMEA2fsEDAMAwQCZ+wcAwQCZ+xgMA0GCSqGSIb3DQEBCwUAA4IBAQAQaaTb
RDNAMLpUlc3yfiP4psl7LZKyviMD2QoNYljeuFuE+PLsFoghGPaWzejZaOiuRB5e
Ma2bX4g7j+jpcgsCCXPOL3ERSSCpy7P82l16o+18WVnUbVRJwUkfSdYukKZt6C6b
vIyMMz2jIDPjZQv1qmlb8SF1GI9N1dzqqnmK6PTIZkGyG9I+JCALNbr0DjpJJiD4
rwrSqYPMv8x5PY73BY8k4b1FjhxmqOb5y6l6j2Z6T1QOcQMwByySz31XTCv5zXgI
CWFxZYzi01Vzty28iImNm3Kx+6EREF3JCQe7ncUvrZuu8lXaPnbEwboETHK2dPEK
LFe6trRfm1EQi2/8
-----END CERTIFICATE-----
Generated at Sun Jul 20 12:43:15 2025 by rpki-client