Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/qSUhZZVYmJXQSPNiLgl2AwfM2IM.roa
File: qSUhZZVYmJXQSPNiLgl2AwfM2IM.roa (raw, json)
Hash identifier: abEzl/mzRwiKuAnyKOXnlJR54GX7t/XbR9ttFRDYKeM=
Subject key identifier: A9:25:21:65:95:58:98:95:D0:48:F3:62:2E:09:76:03:07:CC:D8:83
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 600C
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/qSUhZZVYmJXQSPNiLgl2AwfM2IM.roa
Signing time: Wed 14 May 2025 05:10:23 +0000
ROA not before: Wed 14 May 2025 05:10:23 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24588 (0x600c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 14 05:10:23 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=A925216595589895D048F3622E09760307CCD883
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:42:b1:7c:30:1c:6d:3a:62:ad:1a:e3:0b:cf:
3f:28:3b:2f:cd:f4:95:dd:91:af:0d:82:4f:4a:24:
99:74:4d:0c:bc:11:e3:df:8f:cf:8e:74:b9:fa:e5:
c7:86:82:a3:03:19:e5:01:93:81:db:d9:69:5c:01:
d1:e9:c2:cb:45:18:c9:20:23:f6:da:0e:ae:15:74:
7c:c6:7e:18:a9:1a:9f:62:0b:4a:a8:e9:74:39:e7:
5e:10:ad:62:4c:a8:be:68:bf:61:5c:21:38:c3:a5:
ea:e1:0e:1e:48:65:dd:7e:a7:69:9b:40:89:94:10:
e2:e9:1b:ae:00:4d:68:7f:38:ec:e8:8f:8f:86:51:
77:a0:0f:6f:f5:cc:88:96:b2:a6:8e:5d:a5:ca:ff:
b7:11:9d:bb:c0:11:17:33:62:a9:f9:5a:b6:8d:5e:
03:e3:54:0c:63:07:7f:20:e5:cc:ed:63:06:d9:5b:
86:16:a5:78:37:f0:27:b0:f2:56:9f:85:af:71:f4:
ed:74:f4:32:61:80:e6:42:8f:77:24:20:06:82:46:
ea:16:79:15:6c:c7:a3:f7:6d:9c:14:bf:0c:96:2b:
93:cf:26:0c:c5:24:13:9b:b6:88:8c:a9:12:c5:71:
92:35:aa:9f:48:2d:1b:a0:59:46:41:07:e2:e0:f7:
4e:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:25:21:65:95:58:98:95:D0:48:F3:62:2E:09:76:03:07:CC:D8:83
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/qSUhZZVYmJXQSPNiLgl2AwfM2IM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
b4:62:2b:86:1e:f0:7c:ab:65:f6:b5:45:6b:3d:6f:13:eb:4a:
c3:63:3e:7e:14:fa:21:ff:13:95:e1:71:a9:45:4d:68:f6:b5:
71:a3:40:e4:3d:45:c4:5e:fd:a1:fd:b5:08:1b:ff:47:3e:d0:
7a:bc:a5:16:65:2d:73:b5:5f:52:5a:f3:ed:ff:e9:82:62:ac:
b8:8b:9b:18:5b:6a:97:35:b6:ea:74:55:ee:a8:43:35:b1:76:
da:95:72:56:1c:99:fa:b1:4c:4f:fa:6f:07:f2:80:aa:cb:ee:
92:c6:70:df:cc:b1:e6:3f:41:4e:29:81:a5:bc:b9:ad:ef:ca:
24:d1:60:ce:33:f6:97:85:f8:20:d7:10:6b:44:81:45:b9:32:
49:94:89:4c:cd:58:97:8f:aa:33:f5:be:59:78:ad:c5:76:29:
90:43:03:f3:63:5f:f4:79:da:8c:ea:1d:27:40:e7:67:f5:aa:
80:6b:45:45:98:d6:27:b7:89:8e:f1:bb:7f:22:aa:5d:22:a8:
a2:06:86:6e:53:ca:90:dc:69:5b:b1:12:3c:12:9d:1f:f7:bc:
ca:b9:c5:d6:0b:3f:b7:81:65:cc:cf:5c:86:a2:f7:eb:38:dd:
9a:0d:2a:80:e4:6d:e2:9d:45:e8:08:bf:81:19:e4:f2:36:76:
0a:d7:25:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 19:36:43 2025 by rpki-client