Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/Ma9KQZLkGmitpsjNaw8E_PQxvUs.roa
File: Ma9KQZLkGmitpsjNaw8E_PQxvUs.roa (raw, json)
Hash identifier: nj0Yhz7dBwQFUptF67zh1B8iksnScz2Jc1uuBvB091w=
Subject key identifier: 31:AF:4A:41:92:E4:1A:68:AD:A6:C8:CD:6B:0F:04:FC:F4:31:BD:4B
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 5FEC
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/Ma9KQZLkGmitpsjNaw8E_PQxvUs.roa
Signing time: Tue 13 May 2025 21:12:25 +0000
ROA not before: Tue 13 May 2025 21:12:25 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24556 (0x5fec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 13 21:12:25 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=31AF4A4192E41A68ADA6C8CD6B0F04FCF431BD4B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f4:55:76:f7:4e:2f:b1:16:d5:75:bd:17:80:
39:e3:d4:c7:47:67:c5:c5:78:55:70:65:ed:eb:73:
27:9c:31:89:87:30:63:54:cf:ef:06:63:b5:c5:1d:
de:e3:80:bf:df:5e:fd:d3:9f:52:ab:e4:9a:17:10:
24:c4:15:37:9e:8c:8e:0f:ef:d3:25:42:7c:ab:f5:
21:8d:1c:0c:4b:40:31:ed:ef:62:2b:66:81:cb:58:
2c:5b:a2:bc:d1:a6:3f:41:d7:53:e3:01:59:db:2e:
90:74:ea:1c:ee:9e:fc:09:a5:44:60:09:5a:8c:a4:
33:e6:c6:1a:d4:c8:e0:0d:ca:3a:80:a3:72:90:e6:
e6:26:73:70:43:0f:04:e4:3b:ec:08:d1:c7:97:f6:
2f:68:a7:3c:72:52:dc:03:70:1d:fb:91:94:2d:8c:
68:04:2d:ed:76:b9:c5:9e:4b:f4:05:ee:5d:3b:85:
fc:30:9b:33:5d:cc:04:d6:3a:04:c8:66:4c:84:aa:
6c:03:d8:f2:e9:7e:d9:2a:c6:d6:4a:d4:25:1c:80:
73:00:de:1f:a9:84:3e:46:3e:a0:18:61:87:7e:7b:
7d:69:8a:77:ea:ea:e6:b1:73:be:76:dd:01:ec:9a:
26:8b:fe:5c:42:83:3b:e9:64:6e:0e:b0:f1:f9:d8:
b9:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:AF:4A:41:92:E4:1A:68:AD:A6:C8:CD:6B:0F:04:FC:F4:31:BD:4B
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/Ma9KQZLkGmitpsjNaw8E_PQxvUs.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
a4:53:cd:9a:53:8e:6b:c8:2e:ed:85:e1:e9:12:b2:46:bf:03:
ca:c3:43:c2:7e:d5:5b:9a:5e:38:ef:45:50:aa:4e:84:e8:ee:
96:b4:0d:56:a2:7d:91:6a:ce:9e:25:6c:e4:30:b5:7a:39:05:
28:7b:e6:42:a8:f2:dd:1d:ac:d8:02:70:90:43:84:48:30:5f:
d4:87:fe:97:8b:00:3a:bd:af:2d:f9:ba:10:49:a2:8e:ff:64:
6c:3a:9b:92:c2:d7:22:65:3e:e1:46:cf:ca:18:97:37:8a:b2:
51:8b:2c:1b:4d:2d:f7:87:e0:1e:b6:bf:49:f2:38:4d:74:0e:
a1:64:0c:33:2c:e9:07:8e:9c:7d:25:5d:5e:56:62:33:4a:cd:
b2:96:60:0a:d6:1a:09:4b:92:21:5e:6c:f1:4d:39:67:78:dc:
b3:0f:a5:d0:fb:85:dc:1f:d0:e8:e0:1b:38:43:00:0d:a9:f7:
db:48:2c:3a:66:8a:aa:a5:8e:58:aa:2e:2f:cb:3e:27:40:bb:
b6:cd:9e:d9:de:dd:db:f0:4a:bc:1f:68:d1:72:da:d7:0b:03:
24:2d:b1:e8:ca:cb:6b:4f:3c:00:f7:c6:47:0c:c6:90:9d:bd:
cc:ee:33:71:37:a2:75:c2:ff:1c:84:92:78:f6:32:fc:22:ab:
e5:b7:74:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 22:45:26 2025 by rpki-client