Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/x1oIdCMc9jHl-xaPRn8pD4Z-IT0.roa
File: x1oIdCMc9jHl-xaPRn8pD4Z-IT0.roa (raw, json)
Hash identifier: 7RRvpa6M2eaginuS0wd4UkU38fugoqR8f5zWQLxgvWk=
Subject key identifier: C7:5A:08:74:23:1C:F6:31:E5:FB:16:8F:46:7F:29:0F:86:7E:21:3D
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 6DB0
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/x1oIdCMc9jHl-xaPRn8pD4Z-IT0.roa
Signing time: Thu 19 Jun 2025 23:06:59 +0000
ROA not before: Thu 19 Jun 2025 23:06:59 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28080 (0x6db0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jun 19 23:06:59 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=C75A0874231CF631E5FB168F467F290F867E213D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:6d:90:de:ae:89:6b:53:e2:a6:c9:bb:aa:4c:
46:1b:a2:47:54:4b:31:f1:14:1f:03:2a:a1:a3:07:
fd:7f:de:fa:55:ac:7e:f1:67:39:6f:a3:c3:bc:4a:
3a:30:86:f1:54:29:bf:9f:04:65:8d:a0:37:12:ee:
f7:0b:d2:f1:2e:66:40:fc:89:df:ea:ad:f5:05:24:
8a:65:3b:af:31:39:42:e3:c2:e2:5d:ca:ae:df:35:
99:3c:8b:d5:be:25:cd:c3:53:08:cb:4c:e3:39:81:
2f:d7:a2:76:94:ae:9e:ea:8c:f8:7e:2b:96:ee:5f:
fe:32:e6:66:89:f0:d0:bf:44:c9:61:a4:be:83:cc:
92:89:f4:79:40:60:b3:43:6d:84:7e:b6:8a:8a:92:
51:df:d9:33:81:74:08:8d:8c:bb:32:d7:7a:bf:f4:
d6:d6:a7:4c:d4:de:45:64:03:6e:d7:df:97:8c:6f:
a7:b0:e0:73:61:c9:4c:f8:74:14:51:cd:de:6a:f4:
c4:6c:1e:d9:69:e4:a9:79:6c:01:8a:6d:cb:f2:a4:
bc:a2:fc:ca:42:50:2f:54:48:81:af:25:01:28:92:
0d:1a:0a:a7:df:a4:7c:fe:f9:a2:6c:0c:e9:63:17:
9d:e5:a8:a2:89:45:10:ab:2f:30:b8:ef:f6:c7:e6:
bf:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:5A:08:74:23:1C:F6:31:E5:FB:16:8F:46:7F:29:0F:86:7E:21:3D
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/x1oIdCMc9jHl-xaPRn8pD4Z-IT0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
27:fd:c9:71:4f:08:9d:36:b6:bd:b8:36:b9:2d:09:82:44:4d:
06:56:d3:3d:d9:73:70:03:d0:41:1a:82:64:d7:ae:73:90:68:
e9:c3:ce:57:7c:56:ee:62:da:20:d7:2d:01:c4:99:79:e6:86:
77:73:a7:c3:1b:0d:f7:27:87:38:db:8d:b3:b0:7a:4f:31:6b:
98:28:4e:8d:b7:fd:70:d9:7e:48:c6:b1:18:34:19:cf:d4:4c:
27:2e:f9:79:a1:1f:31:0c:ac:03:d6:a4:ad:ce:55:0d:de:dd:
62:6d:85:3e:6b:c9:ca:29:1a:57:1a:32:50:72:05:48:ca:59:
2b:75:44:e5:58:4f:81:06:50:ca:c9:5f:94:26:19:ad:d6:85:
ab:6d:d5:e7:27:15:3f:5e:2f:1b:b4:fb:86:87:47:6b:99:0d:
51:80:84:7b:f0:93:5a:f3:1d:63:11:c6:1d:59:0b:12:97:1e:
a1:c8:b3:a6:cc:c9:35:e7:a5:47:0d:a7:2a:b4:a5:fa:6a:f5:
00:56:39:69:3e:ad:30:16:de:2e:02:e0:35:46:a8:b6:26:45:
41:50:ad:bd:88:cf:cc:7d:e3:8a:be:4e:d6:2d:52:7b:e2:02:
13:0e:c7:9a:65:65:d8:ac:0e:5b:11:7e:3b:ea:6d:ec:dd:db:
ee:ef:76:fd
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgICbbAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNTA2MTky
MzA2NTlaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKEM3NUEwODc0MjMxQ0Y2
MzFFNUZCMTY4RjQ2N0YyOTBGODY3RTIxM0QwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCqbZDerolrU+KmybuqTEYbokdUSzHxFB8DKqGjB/1/3vpVrH7x
Zzlvo8O8SjowhvFUKb+fBGWNoDcS7vcL0vEuZkD8id/qrfUFJIplO68xOULjwuJd
yq7fNZk8i9W+Jc3DUwjLTOM5gS/XonaUrp7qjPh+K5buX/4y5maJ8NC/RMlhpL6D
zJKJ9HlAYLNDbYR+toqKklHf2TOBdAiNjLsy13q/9NbWp0zU3kVkA27X35eMb6ew
4HNhyUz4dBRRzd5q9MRsHtlp5Kl5bAGKbcvypLyi/MpCUC9USIGvJQEokg0aCqff
pHz++aJsDOljF53lqKKJRRCrLzC47/bH5r9TAgMBAAGjggI0MIICMDAdBgNVHQ4E
FgQUx1oIdCMc9jHl+xaPRn8pD4Z+IT0wHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L3gxb0lkQ01jOWpIbC14
YVBSbjhwRDRaLUlUMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwYgYIKwYBBQUHAQcBAf8EUzBRME8EAgABMEkD
BAIr7zADBAMr9gAwDAMEAiv2DAMEBCv2IDAMAwQCK/Y0AwQCK/ZgAwQCZyMwMAsD
AwJn7AMEA2fsEDAMAwQCZ+wcAwQCZ+xgMA0GCSqGSIb3DQEBCwUAA4IBAQAn/clx
TwidNra9uDa5LQmCRE0GVtM92XNwA9BBGoJk165zkGjpw85XfFbuYtog1y0BxJl5
5oZ3c6fDGw33J4c4242zsHpPMWuYKE6Nt/1w2X5IxrEYNBnP1EwnLvl5oR8xDKwD
1qStzlUN3t1ibYU+a8nKKRpXGjJQcgVIylkrdUTlWE+BBlDKyV+UJhmt1oWrbdXn
JxU/Xi8btPuGh0drmQ1RgIR78JNa8x1jEcYdWQsSlx6hyLOmzMk156VHDacqtKX6
avUAVjlpPq0wFt4uAuA1Rqi2JkVBUK29iM/MfeOKvk7WLVJ74gITDseaZWXYrA5b
EX476m3s3dvu73b9
-----END CERTIFICATE-----
Generated at Sun Jul 20 12:40:17 2025 by rpki-client