Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/kyEJnIUhPeopn7mW3cVHZqrRtx0.roa
File: kyEJnIUhPeopn7mW3cVHZqrRtx0.roa (raw, json)
Hash identifier: 8Pc5+WkOFfTWFUBjeunTLO9Tf2Np2LWQaDwsm40gAxE=
Subject key identifier: 93:21:09:9C:85:21:3D:EA:29:9F:B9:96:DD:C5:47:66:AA:D1:B7:1D
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 6066
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/kyEJnIUhPeopn7mW3cVHZqrRtx0.roa
Signing time: Thu 15 May 2025 03:40:21 +0000
ROA not before: Thu 15 May 2025 03:40:21 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24678 (0x6066)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 15 03:40:21 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=9321099C85213DEA299FB996DDC54766AAD1B71D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:01:9b:3e:1d:35:34:02:40:be:d8:4b:e5:2b:
44:04:73:87:44:fe:4b:4c:fb:97:5f:92:73:30:d9:
e9:1d:d1:7b:c5:76:6b:1c:c3:fe:0e:52:0f:4b:25:
c5:d5:3d:c9:b8:13:85:11:81:49:07:9b:7a:25:17:
6f:8c:94:40:c7:00:7a:c8:00:1a:9a:d4:6e:1d:42:
a7:72:01:e6:09:b6:f3:d5:b4:80:5e:43:80:60:09:
20:d9:38:6a:bc:db:8b:fb:b9:8a:3a:db:29:ff:6c:
d7:24:f6:3e:94:ef:36:74:25:0a:a1:73:f2:f7:ba:
2b:4a:c9:4c:50:00:b0:f2:87:2f:a9:0c:d4:c7:66:
1f:0c:65:f1:a8:f4:ee:f5:ab:cf:d2:8e:3e:86:01:
87:48:4c:b3:d2:23:56:01:7f:2e:50:ff:b3:e8:51:
0d:d6:89:e6:91:f2:a1:ea:eb:4c:57:a0:ad:e1:0b:
11:d2:ff:0f:eb:c0:01:f6:84:e8:d3:ee:f7:e3:d5:
ff:f7:87:99:f6:64:2e:e1:bf:6d:84:d8:06:1f:a9:
d4:05:4f:28:f1:ee:af:7e:c8:55:68:e8:41:35:31:
d8:12:c9:73:6c:05:65:9e:10:90:e3:0d:ad:66:d2:
b0:2c:3f:43:93:cb:3c:4e:91:8a:59:e4:69:bb:10:
fc:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:21:09:9C:85:21:3D:EA:29:9F:B9:96:DD:C5:47:66:AA:D1:B7:1D
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/kyEJnIUhPeopn7mW3cVHZqrRtx0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
57:f0:3e:23:d1:70:c3:35:a2:b3:f7:aa:a9:a5:14:cd:f1:79:
e1:3d:0b:a4:74:6f:b6:09:a4:08:06:8e:13:f3:9b:8b:d5:fc:
4d:25:d4:f9:27:86:45:82:ca:20:14:8d:86:f2:5b:10:85:bf:
df:43:71:fa:58:1b:8e:a8:ec:4d:71:f2:d2:8f:ce:05:03:36:
cf:70:af:4e:be:f5:16:45:2e:21:86:2a:96:b8:a5:10:15:54:
fb:69:f9:5f:a5:28:d6:30:99:f0:68:29:a2:c5:17:82:1f:25:
43:2c:15:9c:a2:ea:c3:0e:7e:cd:48:eb:e3:74:88:8f:e0:f0:
aa:25:23:b1:ef:1d:d3:94:bc:b7:3e:95:42:68:ad:46:bd:8b:
4d:1a:f3:24:e1:8b:50:7f:24:ef:57:90:c0:f7:30:ff:2c:be:
86:88:27:ba:b0:96:0b:a2:1a:2e:3a:b3:99:a9:1a:47:4c:50:
d2:f0:16:8e:16:88:f3:dc:4f:43:a6:29:b2:97:9c:6e:71:5f:
9a:26:65:bf:6b:5c:c8:e7:ed:ba:2b:76:93:47:8b:d6:da:0e:
ec:76:68:ba:95:da:a4:ab:76:4c:62:9b:57:52:b1:27:b1:32:
78:01:00:d2:72:ba:91:1e:6b:48:dc:5f:bf:67:7c:4d:9a:12:
c5:72:d6:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 03:07:31 2025 by rpki-client