Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/aGoCBFhtA9AkbgNgVid4Y0kl5Sg.roa
File: aGoCBFhtA9AkbgNgVid4Y0kl5Sg.roa (raw, json)
Hash identifier: i0qgODpGtcuHraO6rhMaeUZKuQSZbvWl8X8TX4kjwGU=
Subject key identifier: 68:6A:02:04:58:6D:03:D0:24:6E:03:60:56:27:78:63:49:25:E5:28
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 6130
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/aGoCBFhtA9AkbgNgVid4Y0kl5Sg.roa
Signing time: Sat 17 May 2025 06:10:35 +0000
ROA not before: Sat 17 May 2025 06:10:35 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24880 (0x6130)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 17 06:10:35 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=686A0204586D03D0246E0360562778634925E528
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:94:79:77:2e:2c:d9:ea:de:2b:0c:56:55:b1:
51:8b:58:67:3f:3f:72:d9:a6:aa:55:89:bb:8b:64:
04:13:de:56:8e:4a:10:85:b3:94:90:3f:f6:dd:28:
8b:37:e1:1f:9c:06:de:07:e8:74:29:bb:4c:da:da:
4e:b9:58:19:8b:3e:42:34:7f:34:4b:55:69:65:5f:
69:d1:7b:4c:88:5f:7c:86:5c:0f:ca:77:80:19:f4:
e9:a7:21:c7:20:2f:fc:84:70:2f:cd:9c:15:4b:81:
53:b8:b4:54:a7:72:c4:25:f7:0c:a3:44:ca:78:ac:
d1:5d:fd:d2:60:fe:66:1e:e4:80:eb:f5:83:a2:eb:
79:f3:2c:cc:93:ca:46:29:54:c1:1d:91:28:74:ad:
1c:37:07:93:ad:7c:70:8e:af:58:dc:7d:f3:73:0f:
35:84:df:c4:f5:fe:5e:5d:f8:84:b5:6e:0d:a3:52:
a2:7f:af:4d:ac:2b:fc:9f:1c:08:e0:c2:a5:13:8e:
23:d7:d5:2c:06:45:8e:28:23:5f:d8:64:d1:00:05:
d6:80:75:8c:2a:42:c5:87:86:d4:75:cd:ee:14:79:
76:83:ee:ce:8b:da:41:2e:1b:4b:78:ff:11:0b:81:
3a:16:94:94:a2:05:52:7b:01:c0:e8:67:b7:31:47:
b7:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:6A:02:04:58:6D:03:D0:24:6E:03:60:56:27:78:63:49:25:E5:28
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/aGoCBFhtA9AkbgNgVid4Y0kl5Sg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
17:c2:2e:01:68:05:0c:8d:18:2a:56:ce:e0:38:db:23:9e:68:
27:cd:65:a5:92:27:8d:07:10:e5:47:c9:70:ef:5c:c7:67:6a:
25:c7:48:6c:30:43:8e:29:50:84:66:74:2d:cd:71:54:b4:37:
31:19:e5:e3:6c:54:09:4c:e0:4c:6c:2b:1c:8a:3a:bc:c3:d2:
3b:ba:da:cc:e6:b3:6a:c8:e6:c4:6f:3d:45:fc:1b:9a:08:ad:
e7:ce:e7:e2:10:d0:49:8e:c9:bd:45:48:7f:1e:aa:95:a4:93:
99:10:fc:52:92:d5:4f:87:fa:8d:b6:c8:4b:a2:76:81:87:27:
91:8c:85:59:19:ee:3c:ec:57:41:ce:45:9b:5c:94:b0:7d:d4:
cb:17:63:9c:a7:b5:38:e0:8e:98:1d:a8:48:d6:e6:79:f4:48:
b8:71:ec:85:68:50:ab:f4:e6:5b:e6:7e:61:85:1a:e7:f0:5f:
cd:d6:15:ed:ee:7b:39:6d:47:ab:e4:18:2d:f5:cd:5e:ae:fa:
8c:e9:67:12:64:5a:d3:cb:16:61:c6:b6:95:e0:52:72:64:ff:
88:aa:5f:de:97:30:2a:53:7a:6e:a0:f9:40:af:23:92:b8:37:
9b:a9:22:06:70:3e:df:84:e1:47:10:33:19:e1:bc:97:e3:28:
0c:6d:45:fe
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgICYTAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNTA1MTcw
NjEwMzVaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDY4NkEwMjA0NTg2RDAz
RDAyNDZFMDM2MDU2Mjc3ODYzNDkyNUU1MjgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDOlHl3LizZ6t4rDFZVsVGLWGc/P3LZpqpVibuLZAQT3laOShCF
s5SQP/bdKIs34R+cBt4H6HQpu0za2k65WBmLPkI0fzRLVWllX2nRe0yIX3yGXA/K
d4AZ9OmnIccgL/yEcC/NnBVLgVO4tFSncsQl9wyjRMp4rNFd/dJg/mYe5IDr9YOi
63nzLMyTykYpVMEdkSh0rRw3B5OtfHCOr1jcffNzDzWE38T1/l5d+IS1bg2jUqJ/
r02sK/yfHAjgwqUTjiPX1SwGRY4oI1/YZNEABdaAdYwqQsWHhtR1ze4UeXaD7s6L
2kEuG0t4/xELgToWlJSiBVJ7AcDoZ7cxR7fPAgMBAAGjggI0MIICMDAdBgNVHQ4E
FgQUaGoCBFhtA9AkbgNgVid4Y0kl5SgwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L2FHb0NCRmh0QTlBa2Jn
TmdWaWQ0WTBrbDVTZy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwYgYIKwYBBQUHAQcBAf8EUzBRME8EAgABMEkD
BAIr7zADBAMr9gAwDAMEAiv2DAMEBCv2IDAMAwQCK/Y0AwQCK/ZgAwQCZyMwMAsD
AwJn7AMEA2fsEDAMAwQCZ+wcAwQCZ+xgMA0GCSqGSIb3DQEBCwUAA4IBAQAXwi4B
aAUMjRgqVs7gONsjnmgnzWWlkieNBxDlR8lw71zHZ2olx0hsMEOOKVCEZnQtzXFU
tDcxGeXjbFQJTOBMbCscijq8w9I7utrM5rNqyObEbz1F/BuaCK3nzufiENBJjsm9
RUh/HqqVpJOZEPxSktVPh/qNtshLonaBhyeRjIVZGe487FdBzkWbXJSwfdTLF2Oc
p7U44I6YHahI1uZ59Ei4ceyFaFCr9OZb5n5hhRrn8F/N1hXt7ns5bUer5Bgt9c1e
rvqM6WcSZFrTyxZhxraV4FJyZP+Iql/elzAqU3puoPlAryOSuDebqSIGcD7fhOFH
EDMZ4byX4ygMbUX+
-----END CERTIFICATE-----
Generated at Sat May 17 22:41:34 2025 by rpki-client