Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/j4aGWIcUspqp-ZBkime5-rcd6yo.roa
File: j4aGWIcUspqp-ZBkime5-rcd6yo.roa (raw, json)
Hash identifier: fM45swqX0Ij4T3kR3cXKI5vjCL9r9CeNl/YvRi44wZg=
Subject key identifier: 8F:86:86:58:87:14:B2:9A:A9:F9:90:64:8A:67:B9:FA:B7:1D:EB:2A
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 60E0
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/j4aGWIcUspqp-ZBkime5-rcd6yo.roa
Signing time: Fri 16 May 2025 10:10:52 +0000
ROA not before: Fri 16 May 2025 10:10:52 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24800 (0x60e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 16 10:10:52 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=8F8686588714B29AA9F990648A67B9FAB71DEB2A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:15:66:18:43:c5:0b:2f:6d:45:d8:07:af:69:
9c:b8:d6:d8:86:09:79:27:0b:8f:a6:37:f8:16:09:
ca:46:d5:ed:9c:7f:a1:df:27:03:d4:26:8c:b1:93:
15:d8:de:27:2b:8a:86:53:7c:e0:f0:f2:79:4a:a7:
2a:7a:ff:2f:f5:df:bb:8f:df:62:a3:5a:92:50:c5:
d5:b9:43:be:31:a3:71:c0:58:59:96:06:83:26:97:
5d:22:7e:f5:7b:e2:4c:79:72:ea:66:67:df:b5:1d:
1d:a5:6f:c2:b4:1e:63:54:0a:03:c3:92:4c:8a:eb:
93:17:ab:89:b0:cd:5d:22:51:2c:da:3d:f6:23:30:
0c:6a:07:3e:4e:1f:5c:0b:ff:df:e1:ff:cf:c3:71:
65:ab:e9:f6:52:ab:44:0a:39:f5:cf:3c:84:0a:a3:
d8:a1:da:3e:9f:1b:f5:3a:34:81:a1:fa:75:6c:e0:
21:2d:2f:2c:9b:70:4d:10:25:e4:ee:db:ed:01:c8:
6d:c5:02:fb:6d:bd:84:b6:55:5b:78:9c:4d:b0:d9:
ec:47:76:1a:34:be:37:2c:60:c0:05:7f:fe:21:4d:
ba:df:f0:92:dd:de:74:71:55:88:f5:ef:9d:9f:1b:
c9:f9:b7:bd:7c:78:61:ae:ff:1c:e7:a9:de:42:f8:
76:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:86:86:58:87:14:B2:9A:A9:F9:90:64:8A:67:B9:FA:B7:1D:EB:2A
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/j4aGWIcUspqp-ZBkime5-rcd6yo.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
b3:e0:93:b3:64:df:6d:5b:24:08:29:04:0f:e4:c4:33:1c:e6:
67:0c:67:e5:27:01:48:f5:e9:35:5d:55:ff:27:83:0d:6a:95:
3e:e6:ec:b0:2d:0c:37:60:81:38:c1:97:b2:59:9f:31:a2:c8:
2a:3d:b8:7a:eb:90:a0:3c:55:fe:47:c2:2b:1f:b3:19:86:46:
44:01:0b:3d:29:0f:b2:c3:e3:b2:d1:b5:10:88:03:7a:4d:ca:
4b:56:91:4a:39:3c:a1:37:e1:f5:99:95:49:42:58:31:46:41:
0f:31:97:24:25:1e:a8:21:32:4a:c0:47:b9:e6:b4:7f:cc:d8:
b4:f4:f8:a5:c2:ed:47:0b:bd:8a:04:a2:3e:b8:14:bf:83:e9:
1c:5f:88:90:be:a1:9b:c7:d5:ce:c9:da:ed:e5:5e:4e:02:fc:
4e:3b:7d:47:10:c6:1e:cf:68:be:fa:a2:36:5c:16:bd:f0:2e:
ef:bb:a3:53:21:cf:70:9a:cc:2a:ff:11:ca:ab:ca:9b:08:f9:
71:92:c2:e8:39:41:7e:4a:21:ea:87:dd:05:20:0b:bf:55:8d:
3b:09:e5:e6:d1:36:ad:e8:ae:21:aa:83:f8:61:f5:03:a9:c6:
1a:98:21:4c:f9:d9:90:62:21:fa:2b:9f:34:21:7d:0c:31:17:
bc:86:c9:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 22:41:23 2025 by rpki-client