Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/MRd0jNp_zycKThlQIYrtEfxR9Tw.roa
File: MRd0jNp_zycKThlQIYrtEfxR9Tw.roa (raw, json)
Hash identifier: mvcWQuf2YyE1mfpMzkn7QuK8IudZtMSxNGNe4DmRfFo=
Subject key identifier: 31:17:74:8C:DA:7F:CF:27:0A:4E:19:50:21:8A:ED:11:FC:51:F5:3C
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 60C4
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/MRd0jNp_zycKThlQIYrtEfxR9Tw.roa
Signing time: Fri 16 May 2025 03:10:29 +0000
ROA not before: Fri 16 May 2025 03:10:29 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24772 (0x60c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 16 03:10:29 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=3117748CDA7FCF270A4E1950218AED11FC51F53C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:2f:b5:be:cf:4e:5e:e0:57:c8:57:3d:b6:f1:
dd:a1:6d:a8:31:cf:f2:2a:e8:0c:42:4d:e2:31:e6:
5b:34:84:94:7d:3d:21:3d:6e:5f:09:02:25:1b:bd:
af:4b:3d:ba:b6:b9:6f:b4:e5:71:b4:7b:2c:76:9e:
36:86:fa:de:c7:10:9b:e9:01:c7:5e:3f:94:9d:f5:
aa:b2:55:b3:ca:9d:aa:1f:bb:42:19:52:8a:27:5c:
82:f9:1b:e9:ba:8c:0f:72:69:4a:80:5f:dc:0f:94:
8b:ee:4f:8a:28:3b:7e:a6:fe:20:7c:27:24:55:6c:
5c:3b:29:b0:1c:08:8b:0e:37:29:94:26:7f:c0:50:
06:48:17:fb:01:54:06:cf:93:a1:e5:64:00:3e:19:
a9:34:1e:40:a1:19:d5:88:87:17:3c:f2:c5:5a:94:
7e:86:2e:94:32:b9:e2:39:77:10:bd:5f:8c:6f:95:
89:3e:2e:2f:9b:fe:c9:75:78:1e:f2:b9:eb:03:ca:
8d:0d:1b:5c:c3:cf:96:20:e7:bb:e6:0c:cc:28:5f:
3c:bb:9b:f6:dd:e8:05:d7:98:d4:3b:13:aa:2f:e1:
69:64:e3:48:4e:50:fd:27:b6:de:d4:6d:e8:ad:3a:
7b:c7:c6:32:bb:06:1c:1c:5e:97:84:ff:63:48:49:
ed:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:17:74:8C:DA:7F:CF:27:0A:4E:19:50:21:8A:ED:11:FC:51:F5:3C
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/MRd0jNp_zycKThlQIYrtEfxR9Tw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
16:d3:8c:5a:c0:e9:17:c2:c5:5a:09:7c:3a:c2:87:f6:ab:c3:
75:87:cc:d4:f7:85:d0:ba:02:4d:56:ca:b2:aa:24:cd:31:bb:
71:3f:e6:48:3c:42:77:60:ce:a0:2a:a2:f4:41:e1:f8:16:2f:
0b:2d:56:34:d1:cd:28:0e:0a:66:8f:79:7b:72:ff:54:62:68:
ea:95:a6:13:14:12:44:86:fe:85:03:54:bf:5c:b4:37:fa:dd:
ca:74:96:9e:62:30:be:d7:e4:cc:b7:67:bc:30:0c:0d:9f:05:
d9:db:6d:5b:11:60:af:ee:89:16:9e:32:d5:ca:5f:68:67:93:
55:2f:d7:3b:29:1c:ef:a6:34:08:b1:44:2d:3b:76:91:2b:95:
f3:d3:ce:17:29:91:56:63:1e:b2:1d:95:de:99:7d:c3:b8:09:
89:1f:48:85:f4:df:43:f4:a5:46:6e:8f:cf:68:e0:15:e0:f9:
83:cb:24:e0:3f:2f:c6:a7:cb:df:47:20:ab:c1:9f:ec:d1:04:
27:1a:39:26:52:46:e5:6e:e3:a7:6a:c3:58:c3:58:b3:16:46:
f7:63:4d:6b:c3:0b:9b:b6:8d:b8:d2:16:e3:ae:ce:32:be:d6:
24:38:9d:ae:91:fc:dc:49:9a:39:33:83:0c:57:de:7c:ed:3c:
b0:e3:05:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 19:58:02 2025 by rpki-client