Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/ySv0pnmW_AwRZ6qeLffgUdVsMKY.roa
File: ySv0pnmW_AwRZ6qeLffgUdVsMKY.roa (raw, json)
Hash identifier: 0wIeUgGQxDDSPgYWk22paknebzYw7GZcWNiNxZ7hFeM=
Subject key identifier: C9:2B:F4:A6:79:96:FC:0C:11:67:AA:9E:2D:F7:E0:51:D5:6C:30:A6
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 640A
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/ySv0pnmW_AwRZ6qeLffgUdVsMKY.roa
Signing time: Sat 24 May 2025 20:41:17 +0000
ROA not before: Sat 24 May 2025 20:41:17 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25610 (0x640a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 24 20:41:17 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=C92BF4A67996FC0C1167AA9E2DF7E051D56C30A6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:6d:b3:6d:3b:e2:28:60:5a:69:1a:73:8d:be:
82:3b:7c:d5:58:b4:85:dd:ac:0c:fd:05:eb:e3:c3:
25:51:0b:ae:de:0b:8e:d5:ad:b7:e7:dd:4c:6f:3d:
46:c2:37:8d:29:81:93:85:38:bf:f4:31:f2:33:e4:
e2:0d:b0:6d:2d:3a:7d:26:c0:2f:2b:14:b9:01:04:
16:ac:c6:33:52:88:95:df:73:05:5b:da:0e:d2:4a:
fb:5d:f8:a1:12:f5:af:49:1f:99:5b:14:98:0b:30:
1b:b8:ba:81:78:8c:5d:13:bc:9b:d9:c7:47:bf:a3:
15:99:a6:c2:86:99:56:5d:e0:c1:1a:9b:93:29:fb:
0e:fd:0e:4f:35:04:ee:41:93:b3:df:4a:85:e1:df:
24:71:95:64:76:6c:ff:76:cd:ee:ca:9e:20:5d:f7:
7a:be:6e:80:18:11:18:60:b7:bb:98:b6:5c:97:35:
57:cd:7c:93:91:cb:10:6e:55:27:13:61:0f:84:41:
4c:7b:fe:90:e0:51:42:ef:c2:d8:9e:cd:6d:40:91:
1f:46:02:6f:96:7f:29:e1:e1:2e:de:5b:94:3b:46:
a1:3c:2f:95:ef:03:6f:fe:9f:d4:bd:27:93:fe:33:
c3:54:ad:c7:e2:5d:fb:ad:90:88:b0:56:eb:c2:7e:
94:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:2B:F4:A6:79:96:FC:0C:11:67:AA:9E:2D:F7:E0:51:D5:6C:30:A6
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/ySv0pnmW_AwRZ6qeLffgUdVsMKY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
00:36:c0:0e:f8:35:f1:be:4a:3f:65:12:bf:86:a7:6b:3f:e9:
cd:04:32:60:5a:c0:8a:ee:3e:c3:29:23:3e:a2:c0:ab:2c:7a:
18:0a:fb:50:46:00:26:25:98:00:32:ce:a1:83:c7:3a:c9:60:
e8:6e:8a:95:68:b3:b1:8b:7a:c5:37:f4:ba:dc:15:a2:46:80:
62:bc:aa:1e:bd:ac:fc:bf:6b:b5:6e:ba:0d:db:f8:6e:61:79:
6f:ff:d7:53:1b:dd:8e:87:f0:4a:eb:94:c4:c2:a3:09:2f:34:
f9:5f:2b:39:f5:20:fd:ac:01:d0:c8:b7:10:7d:bb:0a:5c:97:
33:ad:c3:c0:30:ac:5f:19:c3:d0:50:c8:b1:77:79:54:72:7a:
8b:fc:00:74:de:b5:cc:0d:2a:b2:15:61:99:43:ce:03:d0:53:
c2:c5:d2:97:82:73:37:71:50:df:44:b2:95:dc:ab:8f:04:b5:
da:50:22:47:5a:0c:3f:62:2a:e9:1b:ab:1c:1e:38:06:5d:0f:
ca:2f:40:04:62:37:7c:f9:21:3a:9a:c4:41:fe:54:e7:a7:05:
af:03:31:77:61:cf:c0:e0:4b:b8:0d:0c:ff:c0:3e:b2:be:ae:
5f:c2:ed:1b:83:81:e2:32:74:f6:e6:85:2e:ba:25:b1:46:72:
83:8f:0c:c4
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgICZAowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNTA1MjQy
MDQxMTdaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKEM5MkJGNEE2Nzk5NkZD
MEMxMTY3QUE5RTJERjdFMDUxRDU2QzMwQTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCtbbNtO+IoYFppGnONvoI7fNVYtIXdrAz9BevjwyVRC67eC47V
rbfn3UxvPUbCN40pgZOFOL/0MfIz5OINsG0tOn0mwC8rFLkBBBasxjNSiJXfcwVb
2g7SSvtd+KES9a9JH5lbFJgLMBu4uoF4jF0TvJvZx0e/oxWZpsKGmVZd4MEam5Mp
+w79Dk81BO5Bk7PfSoXh3yRxlWR2bP92ze7KniBd93q+boAYERhgt7uYtlyXNVfN
fJORyxBuVScTYQ+EQUx7/pDgUULvwtiezW1AkR9GAm+Wfynh4S7eW5Q7RqE8L5Xv
A2/+n9S9J5P+M8NUrcfiXfutkIiwVuvCfpSxAgMBAAGjggI0MIICMDAdBgNVHQ4E
FgQUySv0pnmW/AwRZ6qeLffgUdVsMKYwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L3lTdjBwbm1XX0F3Ulo2
cWVMZmZnVWRWc01LWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwYgYIKwYBBQUHAQcBAf8EUzBRME8EAgABMEkD
BAIr7zADBAMr9gAwDAMEAiv2DAMEBCv2IDAMAwQCK/Y0AwQCK/ZgAwQCZyMwMAsD
AwJn7AMEA2fsEDAMAwQCZ+wcAwQCZ+xgMA0GCSqGSIb3DQEBCwUAA4IBAQAANsAO
+DXxvko/ZRK/hqdrP+nNBDJgWsCK7j7DKSM+osCrLHoYCvtQRgAmJZgAMs6hg8c6
yWDoboqVaLOxi3rFN/S63BWiRoBivKoevaz8v2u1broN2/huYXlv/9dTG92Oh/BK
65TEwqMJLzT5Xys59SD9rAHQyLcQfbsKXJczrcPAMKxfGcPQUMixd3lUcnqL/AB0
3rXMDSqyFWGZQ84D0FPCxdKXgnM3cVDfRLKV3KuPBLXaUCJHWgw/YirpG6scHjgG
XQ/KL0AEYjd8+SE6msRB/lTnpwWvAzF3Yc/A4Eu4DQz/wD6yvq5fwu0bg4HiMnT2
5oUuuiWxRnKDjwzE
-----END CERTIFICATE-----
Generated at Wed Jun 4 00:52:05 2025 by rpki-client