Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/o44cmmgl9l97gTGCBylJmMp-GxY.roa
File: o44cmmgl9l97gTGCBylJmMp-GxY.roa (raw, json)
Hash identifier: NEoVdcHxvxRe1sB1PoKt9mmMO2K8PrcnPo/b5yJ9+Hw=
Subject key identifier: A3:8E:1C:9A:68:25:F6:5F:7B:81:31:82:07:29:49:98:CA:7E:1B:16
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 608E
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/o44cmmgl9l97gTGCBylJmMp-GxY.roa
Signing time: Thu 15 May 2025 13:40:30 +0000
ROA not before: Thu 15 May 2025 13:40:30 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24718 (0x608e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 15 13:40:30 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=A38E1C9A6825F65F7B81318207294998CA7E1B16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:eb:75:d0:ca:01:09:5f:1e:6e:6c:c4:88:bc:
7b:24:36:a6:9f:9e:79:f4:66:d9:8e:f8:78:85:52:
c8:30:9b:d2:41:25:55:35:43:40:d6:07:6a:a3:9b:
70:bc:e9:6f:03:06:44:ba:fc:b3:bc:2a:98:6e:c1:
a6:e4:33:45:b5:74:c8:d8:b9:38:e9:7b:0d:f0:ce:
54:08:9a:4f:c9:fb:e6:3c:6b:52:57:84:f3:00:d2:
05:93:34:14:22:b1:e5:d4:d5:68:3b:e8:81:43:b1:
1f:8c:23:bc:fa:85:a1:9d:64:ae:9b:d6:ab:28:16:
49:75:df:72:e4:dc:ef:da:4f:4a:e4:bc:ae:5d:75:
f2:fa:2d:1a:2d:bb:01:90:55:9a:68:a8:95:0c:04:
a8:c3:9a:6a:d7:8f:29:be:51:66:8f:9e:af:cf:d1:
c9:8b:9e:e3:af:48:45:5a:db:ed:f7:75:2c:49:6a:
17:35:b6:9d:d2:b3:c1:fa:4e:c5:a6:25:03:02:7a:
49:e5:08:ca:3b:4b:a8:06:b6:01:c3:f1:68:b3:17:
bd:d4:cc:d5:29:80:f5:b8:7b:24:40:1e:1f:dd:ff:
8b:5b:6b:1c:c0:22:d8:68:b5:d5:ff:13:7d:a5:73:
1f:2a:82:f3:4b:c2:39:fa:14:c9:26:77:c7:da:92:
a0:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:8E:1C:9A:68:25:F6:5F:7B:81:31:82:07:29:49:98:CA:7E:1B:16
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/o44cmmgl9l97gTGCBylJmMp-GxY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
46:72:fa:58:f4:a5:82:5e:a9:c0:8e:53:4a:67:9d:40:03:4a:
07:22:11:6f:13:3f:81:f0:4f:3c:93:e2:e9:c0:89:83:99:3b:
a3:74:71:b7:01:77:00:10:10:2f:d7:1f:e2:73:99:b4:83:ce:
db:d7:47:00:9f:3c:b5:b0:96:3d:13:b3:c5:21:d7:96:7d:0a:
90:57:70:1a:4b:32:2f:94:18:73:8e:a2:80:79:a5:b7:5f:93:
31:53:b4:33:a8:f8:1e:b1:53:f2:db:5c:a6:e4:e9:23:88:1b:
d4:1b:0b:92:6e:2e:fa:6c:a0:18:d4:c2:6b:d4:97:79:50:3c:
26:ac:04:7e:c3:47:2e:2e:a1:49:94:db:19:0c:a8:24:98:88:
ee:1d:18:4d:27:bd:d8:fa:6e:f9:b9:4b:43:b5:7a:4e:b2:a1:
1f:c8:17:ce:36:19:e5:92:76:a4:d0:11:21:8a:0d:d6:67:94:
30:b3:db:a4:88:3b:2a:b1:3f:a6:b3:31:26:22:ce:ee:ad:68:
69:6b:ee:21:cc:3f:be:0e:42:27:7a:f4:97:5e:79:90:91:4f:
33:fe:97:2b:cf:31:58:9d:ff:0a:b2:36:e0:e1:39:fb:cb:13:
85:e9:83:a7:8b:61:f7:ab:f0:0e:91:c5:43:d3:95:d2:d2:81:
51:07:bb:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 19:00:45 2025 by rpki-client