Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/O04wBo1gg42wHTFr2t5ZBu1qsQs.roa
File: O04wBo1gg42wHTFr2t5ZBu1qsQs.roa (raw, json)
Hash identifier: MX0YQOy9w0IN9eeMv+WxWVh+K3CXwOKQquMERujaKA4=
Subject key identifier: 3B:4E:30:06:8D:60:83:8D:B0:1D:31:6B:DA:DE:59:06:ED:6A:B1:0B
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 616A
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/O04wBo1gg42wHTFr2t5ZBu1qsQs.roa
Signing time: Sat 17 May 2025 20:40:33 +0000
ROA not before: Sat 17 May 2025 20:40:33 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24938 (0x616a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 17 20:40:33 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=3B4E30068D60838DB01D316BDADE5906ED6AB10B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:e5:39:12:49:5a:5d:47:e2:4a:05:b2:2c:bf:
08:a0:b8:0f:f2:3d:bf:a0:b2:79:0c:9e:5a:e9:68:
33:74:0b:8f:20:4a:61:ac:83:0a:07:2b:9d:f5:53:
77:2c:68:4c:c6:28:5f:17:e1:cf:e1:c0:0c:bf:1c:
9c:38:00:80:6c:e0:4d:0d:ad:13:79:27:76:4c:53:
21:b2:e0:04:81:b4:b8:26:47:0c:8c:1a:82:11:09:
a8:15:a1:3b:56:42:54:5b:80:ed:bb:3d:ef:17:d6:
b1:77:7a:43:a7:5d:f4:29:13:ad:1c:9d:1d:dc:bd:
ac:c0:10:63:e5:ff:21:c8:7f:65:6f:c2:39:e7:85:
72:23:10:38:69:a3:11:55:4c:a0:e7:cc:8e:03:95:
ff:a3:7a:8a:c5:9d:8c:19:59:bf:61:57:f9:80:d8:
cd:96:42:75:9b:15:a8:f9:63:29:74:c5:90:7e:0b:
93:7d:a3:ea:98:8d:cd:44:1b:bd:24:2d:dd:f4:1b:
0e:ea:50:06:31:64:f0:a3:e1:3a:29:22:5f:65:02:
57:e7:de:92:fe:5d:ae:b8:df:f2:8c:e3:24:7e:f2:
43:b6:be:8d:b6:37:72:96:6d:a5:80:dc:c4:56:5a:
40:06:69:e9:8f:b6:c4:37:b8:25:8a:8d:4d:61:81:
fa:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:4E:30:06:8D:60:83:8D:B0:1D:31:6B:DA:DE:59:06:ED:6A:B1:0B
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/O04wBo1gg42wHTFr2t5ZBu1qsQs.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
0c:66:d2:3d:ec:9f:60:1d:ba:ac:8c:13:5e:6c:af:b2:bd:dc:
92:98:36:18:2f:3d:47:65:23:a9:be:8a:6e:de:0e:37:9c:9a:
70:8a:ac:6b:83:07:86:8f:2e:70:44:ed:15:ca:36:0f:b5:55:
cb:02:2d:c3:96:cd:24:b8:41:22:b8:fe:18:1c:07:da:1b:0d:
81:dd:98:8f:7d:44:65:5f:b3:f2:bf:47:bf:a5:86:93:65:d3:
4c:0a:a9:5d:02:85:33:fa:ad:1a:19:fe:de:7a:dc:68:ae:d5:
34:fe:01:d4:c2:5a:c8:99:b8:a3:73:92:46:c2:a8:73:67:6e:
81:38:52:e1:87:2d:b1:10:05:19:56:36:99:f9:cf:65:5c:4d:
83:d4:fb:71:92:d2:12:07:70:bb:a4:0d:03:ec:4b:4e:75:3e:
62:63:75:4a:4b:6a:76:8e:0f:ba:22:ca:31:5a:fe:27:71:4b:
99:13:7b:3e:c2:18:92:f1:73:7c:86:f2:25:fd:cf:d8:a6:94:
21:25:87:4c:84:30:02:50:94:ba:42:d2:aa:58:de:95:94:62:
d4:ae:6e:b9:0b:04:e7:a4:1f:fd:cb:b6:45:4c:b8:5f:c7:c5:
1a:d1:f4:ab:d9:1b:58:0e:90:6c:39:92:de:a4:38:af:7a:4f:
d4:fe:40:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 02:59:08 2025 by rpki-client