Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/Smu98gc3_k2XeCA5llRllPRMNyY.roa
File: Smu98gc3_k2XeCA5llRllPRMNyY.roa (raw, json)
Hash identifier: D8nZZ1Xe4BRal09qNk+ypviZYbmQVEf7KFSOjxD7LeI=
Subject key identifier: 4A:6B:BD:F2:07:37:FE:4D:97:78:20:39:96:54:65:94:F4:4C:37:26
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 6122
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/Smu98gc3_k2XeCA5llRllPRMNyY.roa
Signing time: Sat 17 May 2025 02:40:30 +0000
ROA not before: Sat 17 May 2025 02:40:30 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24866 (0x6122)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 17 02:40:30 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=4A6BBDF20737FE4D9778203996546594F44C3726
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:f8:a7:f8:e3:af:57:fb:b2:cc:22:98:55:7b:
37:a1:f2:79:e7:e5:e1:5f:e2:d3:3e:5d:f9:1a:ba:
56:ff:a2:1c:39:09:1d:f1:f5:59:cf:4e:9c:e7:9d:
8c:a6:78:2b:45:af:f9:4a:2c:72:db:b4:05:c9:c8:
ce:4b:ca:fd:78:94:ae:eb:23:4a:e9:20:b3:36:e7:
a8:e6:7e:6e:da:8e:89:24:51:4c:4d:aa:86:09:49:
32:c9:86:ec:36:3a:e4:d6:1e:e7:54:cc:54:94:6b:
cf:e3:18:02:6f:3a:e0:69:64:46:3a:71:74:dd:9e:
32:71:e8:22:e5:67:38:8f:b4:cd:1e:b0:bf:85:97:
7c:93:bf:02:c3:4f:c8:24:2f:85:14:c7:2f:26:95:
ee:a9:86:a4:a0:2d:b6:64:34:eb:78:89:1e:88:ac:
2a:4e:2b:a5:d3:c8:15:6c:2e:64:07:f9:95:2c:2d:
45:ae:a5:7c:70:ab:58:8c:e2:f8:13:37:81:49:df:
84:33:68:3f:ab:fb:82:f4:4c:ec:40:ef:4d:09:2b:
a6:7d:98:c6:bf:e9:13:f9:6c:9b:76:67:4d:32:67:
d6:a8:73:cb:d2:4f:e6:22:a5:50:5f:65:41:78:d4:
e2:c5:41:90:3c:66:f6:ac:42:16:5d:60:99:dc:46:
53:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:6B:BD:F2:07:37:FE:4D:97:78:20:39:96:54:65:94:F4:4C:37:26
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/Smu98gc3_k2XeCA5llRllPRMNyY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
b7:ec:db:9c:58:99:19:7e:8d:bd:ef:4f:9c:dc:c5:2a:4e:f3:
85:52:7f:8b:a2:f1:f5:7c:29:57:0f:19:70:fb:4d:fa:4c:3a:
93:71:15:c0:22:3d:06:e7:9f:55:90:e2:25:ab:a2:6f:10:db:
2b:03:68:eb:2c:b3:da:a4:a6:07:2e:1e:c9:29:49:08:df:03:
99:ef:93:69:49:ae:93:75:f7:94:ca:d7:cd:53:93:7a:29:2b:
30:35:8b:14:2b:ce:11:0e:30:80:da:e6:19:90:04:cb:1f:42:
45:30:e3:5e:03:a0:57:1b:32:85:0c:d5:b0:e0:ed:36:94:94:
e8:88:71:a7:b0:b4:bc:f6:f9:90:f4:86:12:28:8d:56:20:13:
c3:df:b5:e5:74:dd:47:d8:44:71:cc:f0:89:df:c9:10:d4:e4:
47:74:00:94:c9:27:98:d9:9a:5d:a2:cb:0a:aa:2d:01:9f:b1:
a9:dd:0d:94:a7:6f:89:ac:b4:2e:e6:d6:12:0f:96:ee:4a:27:
ed:ca:6b:1e:21:cd:48:c2:60:65:36:7c:d8:17:25:3a:d8:eb:
b5:60:0c:63:23:51:6c:e7:40:be:ec:ac:8c:4a:ec:44:f5:08:
68:7a:e3:dd:bf:1a:d9:82:3d:32:f1:60:33:f8:6d:71:2b:f0:
33:38:f2:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 23:15:45 2025 by rpki-client