Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/oU0UJZfy7thpM9ue4q55kWA_NuQ.roa
File: oU0UJZfy7thpM9ue4q55kWA_NuQ.roa (raw, json)
Hash identifier: Chhku4evNB/t2aon0z5XjKrRpJQklxb0T9ZP9+hKhsg=
Subject key identifier: A1:4D:14:25:97:F2:EE:D8:69:33:DB:9E:E2:AE:79:91:60:3F:36:E4
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 6142
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/oU0UJZfy7thpM9ue4q55kWA_NuQ.roa
Signing time: Sat 17 May 2025 10:40:33 +0000
ROA not before: Sat 17 May 2025 10:40:33 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24898 (0x6142)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 17 10:40:33 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=A14D142597F2EED86933DB9EE2AE7991603F36E4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:03:a8:ca:54:ae:cb:47:75:11:8c:24:50:18:
0b:98:bf:0c:85:a8:fd:85:e3:da:ba:ac:09:a5:8c:
99:53:cf:c9:69:9b:a1:2b:d0:e0:85:0c:88:c1:28:
fd:c3:7d:b8:3d:1c:f8:98:8f:a0:f1:52:63:05:1d:
97:23:95:6b:01:34:37:29:e2:3e:3f:92:e1:62:71:
64:65:22:5e:59:02:66:0f:e6:8e:e2:44:1e:0f:78:
25:fa:c0:89:ce:01:92:f1:8c:73:5e:c6:3f:b5:d6:
10:bf:53:82:e9:a6:c1:55:30:5f:8c:bc:28:43:d7:
96:f8:94:34:d1:b0:bf:b2:db:bd:98:f1:bc:1d:2c:
ca:c1:49:91:4a:f1:e0:80:99:da:44:2f:ed:d0:e1:
1e:f6:51:13:4c:8d:f5:50:0c:d6:ff:da:6a:67:b7:
89:c8:94:ce:00:cd:ba:66:8e:71:44:da:fd:ae:51:
09:ed:39:26:64:32:29:e0:ae:9c:72:22:8b:4d:94:
c0:d8:12:d3:67:06:05:73:a5:bd:cc:0a:c8:13:66:
14:7e:69:81:cb:ba:2d:b3:fc:7e:47:f7:4e:f2:bf:
35:14:fc:6f:31:6f:b5:cf:c3:99:63:d2:61:2a:36:
81:8f:b1:05:d0:9e:c6:31:9b:3c:e0:00:53:51:65:
18:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:4D:14:25:97:F2:EE:D8:69:33:DB:9E:E2:AE:79:91:60:3F:36:E4
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/oU0UJZfy7thpM9ue4q55kWA_NuQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
53:72:38:e7:a4:b7:28:90:72:c2:99:8d:78:b8:fc:ca:56:9f:
ce:37:cd:66:1e:e9:b7:7a:ac:f0:1d:e7:a5:a0:12:57:78:37:
cc:66:49:52:d5:51:70:ca:74:c8:3f:69:59:49:f1:0b:7e:53:
d1:8b:8d:b6:d6:2d:26:33:0d:58:de:78:c8:02:f0:56:a0:a2:
a5:22:5e:9b:87:92:1d:46:f3:36:d4:60:1e:c3:00:f0:6b:0d:
e7:2c:1e:0f:65:0f:13:e5:12:51:62:09:6b:ad:65:73:d7:44:
a8:5d:6d:b7:09:7c:fd:dd:4e:9e:b9:65:b6:1b:e2:b7:0d:00:
3f:a1:00:9e:40:be:8a:bc:0e:62:ef:ed:21:33:36:73:92:96:
ec:52:b6:e0:3f:eb:04:5d:53:1e:cb:24:66:1d:d6:21:28:78:
fc:b0:ba:a2:13:d8:52:86:b3:ec:2c:06:63:2a:d2:20:b3:82:
ea:e3:8b:64:60:60:85:6c:37:2c:93:95:6c:9c:98:5b:b7:6b:
df:6c:a8:5a:bd:2b:da:db:fb:b2:92:7b:0e:e9:aa:43:51:4c:
3f:0a:d2:04:5b:c3:0e:4e:75:01:96:b2:01:64:10:bd:a8:0a:
7a:8f:9d:b0:01:5c:84:fd:40:44:6a:0d:9d:1d:4f:07:ca:ac:
8e:08:41:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 09:37:15 2025 by rpki-client