Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/UOO3VpQiR5_D7UJCJQt_6N2gNwM.roa
File: UOO3VpQiR5_D7UJCJQt_6N2gNwM.roa (raw, json)
Hash identifier: vkpojqtTKQHCvGTPngNBB5Q4ANfBkMU1S+pR7YmUH7E=
Subject key identifier: 50:E3:B7:56:94:22:47:9F:C3:ED:42:42:25:0B:7F:E8:DD:A0:37:03
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 60C8
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/UOO3VpQiR5_D7UJCJQt_6N2gNwM.roa
Signing time: Fri 16 May 2025 04:10:24 +0000
ROA not before: Fri 16 May 2025 04:10:24 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24776 (0x60c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 16 04:10:24 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=50E3B7569422479FC3ED4242250B7FE8DDA03703
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c9:4f:dc:a4:37:ac:49:6e:04:97:60:70:b5:
e8:be:37:84:76:6a:b9:3e:ec:b2:82:83:55:18:70:
cd:5e:0e:e5:4b:68:00:22:00:6f:ad:56:75:ae:be:
47:e2:8c:c1:79:43:c8:d2:d1:f2:b7:37:2d:1e:a3:
2f:5e:c9:e0:25:59:2d:d3:7a:d1:46:30:2e:11:d1:
60:e0:ab:1a:c6:cc:36:2d:4d:11:ed:a4:6c:09:b5:
36:50:70:9e:c5:e9:23:ad:36:ea:0b:d8:2b:02:f5:
e7:32:6b:a1:a0:c6:9d:7d:18:79:a8:c7:2f:40:7e:
1a:82:49:76:2c:28:8d:08:6d:55:81:98:11:ca:f7:
96:25:d7:e3:38:41:d9:17:a6:dd:81:91:89:24:7d:
48:c1:e0:50:e4:79:6d:2d:27:48:66:4a:94:12:f9:
dd:f4:df:4c:5a:b6:1c:ee:ed:9d:04:da:a4:43:48:
8d:3d:ed:40:24:8f:73:4c:5f:98:57:3d:cf:1a:e7:
be:1a:11:57:35:c8:ee:c0:c7:05:f1:00:92:da:6b:
67:1f:9a:7a:78:f1:c3:c5:36:5d:f1:d4:8e:ea:9a:
aa:a5:1a:26:d0:35:51:c2:64:fc:07:2d:23:1b:6f:
96:de:72:05:87:9f:e2:49:da:fe:3b:82:5b:f6:9e:
f0:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:E3:B7:56:94:22:47:9F:C3:ED:42:42:25:0B:7F:E8:DD:A0:37:03
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/UOO3VpQiR5_D7UJCJQt_6N2gNwM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
0f:cf:1a:86:da:25:90:82:53:8c:ab:47:d0:bd:e2:eb:06:18:
2e:f3:5f:e0:16:0f:fd:90:62:23:2e:2b:b3:cd:aa:68:69:44:
a0:2c:f3:3d:c5:d5:bd:eb:46:77:53:04:42:10:c8:03:f0:ef:
91:75:92:22:4c:1e:1d:dc:69:8e:27:50:f9:b2:96:fe:91:d9:
b4:14:06:56:61:2e:a8:3b:d7:52:db:dd:77:6e:86:38:40:a8:
63:64:b4:69:71:7c:8f:13:2e:fa:76:9d:22:60:0b:39:31:42:
a1:12:9f:66:14:c0:d3:11:1b:4e:de:25:21:de:39:7a:ea:a5:
7d:9c:24:f1:61:4e:8c:b5:09:bb:69:8e:51:06:d4:9f:d9:e9:
2b:12:5c:fb:2e:e9:d6:37:d7:d0:ca:4e:71:57:fa:71:66:c4:
62:63:af:cd:dd:a0:51:37:8c:3c:dd:1a:f0:2f:43:57:e9:47:
c1:19:c7:c4:42:10:ed:12:34:31:70:20:c3:c6:7c:c3:d1:e2:
98:db:f6:cf:61:ba:ae:ca:32:e6:b3:e7:c8:86:9a:7c:c6:81:
d1:20:49:d5:46:9e:36:68:e7:69:97:11:35:bd:d2:f4:cc:5a:
7a:72:ea:29:0b:81:9c:78:07:08:47:24:c8:38:e0:97:81:2b:
1c:5e:6e:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 19:37:54 2025 by rpki-client