Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/q9Li_dCF18QhCKIqaHxaMdKsf0k.roa
File: q9Li_dCF18QhCKIqaHxaMdKsf0k.roa (raw, json)
Hash identifier: m6WuTYFV9zx1dLyLeieWbvxU2MX+WOWOJtpExx43GgA=
Subject key identifier: AB:D2:E2:FD:D0:85:D7:C4:21:08:A2:2A:68:7C:5A:31:D2:AC:7F:49
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 60A4
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/q9Li_dCF18QhCKIqaHxaMdKsf0k.roa
Signing time: Thu 15 May 2025 19:10:29 +0000
ROA not before: Thu 15 May 2025 19:10:29 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24740 (0x60a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 15 19:10:29 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=ABD2E2FDD085D7C42108A22A687C5A31D2AC7F49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:7b:ec:a7:80:fe:29:a7:33:e6:3d:b7:1f:67:
8c:15:b1:d2:0c:c3:be:be:ae:db:fb:50:f4:c3:f4:
2b:64:ed:08:73:a8:b5:ea:e7:56:6d:1e:81:1e:50:
42:1d:c7:67:77:10:af:ef:a5:67:ea:43:b1:81:04:
ab:40:79:64:96:6d:cc:bd:87:2b:9c:51:3a:10:ac:
4e:8f:3e:f7:86:69:93:e2:ad:97:f1:f1:ac:6e:30:
cd:3a:7e:4b:6a:96:a7:24:1f:b9:f1:9e:0e:04:f9:
ad:5e:b5:a0:49:4e:56:26:c7:60:c7:c4:3b:d6:09:
43:6c:bb:b5:84:1f:f8:72:a8:3a:ba:7f:d0:f3:56:
96:1d:bd:8e:67:0e:22:4e:b6:3f:db:5c:67:ab:3e:
40:c8:1f:85:20:65:a6:3c:09:14:e1:5e:bc:82:92:
62:4b:ca:16:1f:cd:a8:43:d8:51:c3:7a:86:7f:84:
06:d1:28:27:b4:41:89:d2:12:5f:4e:11:a8:49:14:
4a:f3:c8:ae:91:d5:1d:df:b9:5f:11:79:3d:4e:be:
02:a6:a6:c1:61:e9:ad:7b:39:84:d8:db:73:e1:f1:
31:d1:9a:d6:00:2a:0d:a3:a4:c6:c6:67:9b:1e:2f:
d6:5a:65:7c:82:8c:9b:79:49:14:2b:44:19:98:a3:
17:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:D2:E2:FD:D0:85:D7:C4:21:08:A2:2A:68:7C:5A:31:D2:AC:7F:49
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/q9Li_dCF18QhCKIqaHxaMdKsf0k.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
02:18:ca:3a:f7:af:bc:57:24:77:f7:da:8e:bb:53:73:ca:61:
5e:ab:7a:8a:f8:74:a0:15:f0:8c:17:a7:f0:f8:25:08:60:d9:
0f:28:7f:34:a3:64:32:8c:da:b8:1f:02:7c:de:8a:8d:8d:cd:
d9:58:24:8e:22:9e:c1:2d:54:21:6e:31:b3:14:6b:7d:61:1a:
f9:3e:81:57:80:14:f1:1c:44:3b:0a:bb:07:92:97:6f:1c:3b:
11:9f:59:3e:b6:c9:f0:20:70:2f:87:47:d9:dd:ad:e9:b2:e6:
7e:86:95:d9:77:96:82:81:72:11:42:74:3f:23:ec:b2:48:51:
78:05:92:c9:f8:fa:e6:ce:0f:3d:ac:39:96:e8:ac:70:7c:83:
52:e6:6d:6b:ea:4e:82:a9:1d:1a:af:26:9f:9b:d5:d3:0b:e5:
e9:fd:bb:0c:f0:3d:a2:33:42:5e:8a:ad:e8:89:87:7c:06:e0:
2c:c5:35:e4:80:10:5d:4e:9a:ae:29:b1:af:ed:72:38:41:29:
d8:56:17:84:5e:03:97:45:44:9f:c4:d7:31:95:0f:a5:2d:44:
e0:ee:70:e1:f9:76:01:94:88:c0:c2:d0:85:72:c0:52:90:4f:
7d:1d:7d:d2:18:30:e7:8e:9e:2f:ad:38:7b:89:6e:5c:2c:1d:
ff:59:6b:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 02:02:49 2025 by rpki-client