Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/YGJM1xs7UjP24r-Ed8LTHR1unXo.roa
File: YGJM1xs7UjP24r-Ed8LTHR1unXo.roa (raw, json)
Hash identifier: s7v1Dh5we1BjsWMcIYYasEHzn71CDxNIJQaPSAiNExc=
Subject key identifier: 60:62:4C:D7:1B:3B:52:33:F6:E2:BF:84:77:C2:D3:1D:1D:6E:9D:7A
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 6112
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/YGJM1xs7UjP24r-Ed8LTHR1unXo.roa
Signing time: Fri 16 May 2025 22:40:33 +0000
ROA not before: Fri 16 May 2025 22:40:33 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24850 (0x6112)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 16 22:40:33 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=60624CD71B3B5233F6E2BF8477C2D31D1D6E9D7A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:52:62:5f:07:bc:44:59:cc:5f:3e:30:be:62:
b8:0f:ca:f5:c3:14:ab:a7:87:9c:95:9e:db:ff:61:
3e:2a:cb:89:40:b9:83:f5:fb:df:9b:b9:05:49:5f:
b4:a2:ee:cc:aa:cf:6d:ba:40:89:8c:06:6e:bf:9c:
28:b3:b8:c1:5c:c2:50:96:ba:c3:7d:db:c0:61:2d:
b2:05:50:d4:ac:e1:be:df:f5:95:5f:cf:c6:38:6e:
72:e7:44:8d:02:40:f9:02:30:d2:22:4d:b5:e3:2c:
5f:c7:4e:96:2a:65:be:7b:41:d1:6b:94:85:95:31:
aa:e7:61:f2:d9:60:5f:f3:82:ea:00:93:2e:5d:16:
3b:cc:00:ba:d1:74:d4:3b:2d:36:ac:b7:6e:c0:5a:
2d:f9:bb:87:b5:1c:ec:b6:ac:42:28:ff:b0:1c:cd:
13:8c:97:c5:fb:27:ae:01:54:0f:7a:98:50:85:82:
5c:0f:cc:b1:08:1a:4a:2f:69:bd:8a:bd:88:99:4c:
ba:83:04:15:48:67:55:43:60:f9:8a:83:80:f5:7f:
11:ab:f6:6d:f9:b6:a3:33:11:a9:8e:e0:3a:30:13:
83:43:4a:7f:28:cc:74:07:1d:a4:e6:2b:39:8d:8b:
db:09:ce:1f:5d:1f:4b:40:05:44:49:ec:3b:5c:72:
9c:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:62:4C:D7:1B:3B:52:33:F6:E2:BF:84:77:C2:D3:1D:1D:6E:9D:7A
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/YGJM1xs7UjP24r-Ed8LTHR1unXo.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
71:e3:95:be:9a:ef:b7:d4:8e:55:f4:bd:a7:49:db:2a:69:ac:
43:9c:e5:8f:b5:dd:01:c2:15:31:a2:9a:d6:9c:b2:0a:6c:78:
71:6a:a0:83:66:01:78:9d:bd:25:3c:17:f4:e6:24:93:02:62:
c7:77:ed:57:c2:a1:0b:d3:47:7b:45:50:95:2c:49:78:68:bf:
7d:92:c7:73:eb:ae:ec:62:e1:cc:82:6d:87:b6:cd:5f:8a:3d:
b9:41:8c:c8:be:25:04:44:bd:b4:41:c8:5e:50:6a:bf:4f:0d:
9e:83:d4:a7:fb:91:cd:6f:b4:e2:01:8a:a8:84:92:6f:c5:06:
59:de:c4:c0:b0:d6:13:3f:59:1a:ba:0a:e1:3f:ba:8f:f9:dc:
d8:65:d7:62:06:1e:2f:ed:16:0b:ef:4d:83:04:23:e6:12:24:
94:f2:ce:a2:2e:70:da:db:18:bd:35:88:a6:59:2a:8b:52:e6:
22:b2:9b:1f:fb:f7:5e:54:78:cb:80:c7:95:f5:e7:23:e1:f7:
d1:2f:20:e8:38:69:9d:75:a2:0d:27:db:0b:0e:86:29:19:d3:
ff:31:77:a5:21:c7:2b:90:66:74:25:da:12:3b:49:3f:a8:fa:
96:38:86:54:f6:c3:80:ad:fc:fb:3f:03:71:f7:e6:ea:9e:88:
2d:1b:b0:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 04:50:54 2025 by rpki-client