Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/svvDBBLgw8mOs7WPfFZ2HwgUwLs.roa
File: svvDBBLgw8mOs7WPfFZ2HwgUwLs.roa (raw, json)
Hash identifier: m/hLDw6I5f3N8ryjC/pIHk8+fLrNsYmbOYM6U5xdTB0=
Subject key identifier: B2:FB:C3:04:12:E0:C3:C9:8E:B3:B5:8F:7C:56:76:1F:08:14:C0:BB
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 6014
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/svvDBBLgw8mOs7WPfFZ2HwgUwLs.roa
Signing time: Wed 14 May 2025 07:10:20 +0000
ROA not before: Wed 14 May 2025 07:10:20 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24596 (0x6014)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 14 07:10:20 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=B2FBC30412E0C3C98EB3B58F7C56761F0814C0BB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:1b:c3:6b:8a:c7:83:99:29:57:60:4e:04:fc:
01:43:3a:d0:f0:40:0b:7a:de:2f:4e:ad:b6:04:17:
64:fd:23:6c:8a:d9:8c:2a:11:ae:78:df:ce:1b:69:
fa:4e:7c:1f:64:ce:7e:6b:b3:57:a0:9f:4d:a4:6d:
aa:9d:c0:01:35:90:7f:f1:3f:28:a7:fc:90:61:15:
8c:2b:1a:9e:5b:ac:dd:d4:2c:39:b6:70:e6:95:c1:
0c:aa:7e:05:e0:4d:a6:a4:99:30:07:b6:95:f9:31:
21:61:95:16:9b:59:53:4a:b6:73:25:71:a4:19:e8:
8d:e2:d9:82:3b:7f:c2:67:7e:90:38:9d:b6:20:bd:
15:e6:ae:83:e2:b9:81:c6:e2:bd:1c:0f:84:af:63:
1e:76:10:60:8f:19:af:63:d7:1b:45:22:5d:04:c1:
89:fb:28:2d:60:48:16:83:1b:4b:59:7f:4b:7c:35:
6e:70:30:fd:a3:cc:2f:db:2f:1b:4f:2e:d9:01:06:
c7:5e:03:90:e5:44:26:ab:5c:dd:3d:57:39:7a:74:
8e:c4:51:54:8e:d6:ba:b7:2d:ae:eb:e0:5e:ec:62:
58:6c:61:ac:ce:85:64:b1:80:e6:21:f6:67:37:67:
04:0e:39:c1:3a:a2:0d:f1:06:5b:fc:24:72:a1:de:
33:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:FB:C3:04:12:E0:C3:C9:8E:B3:B5:8F:7C:56:76:1F:08:14:C0:BB
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/svvDBBLgw8mOs7WPfFZ2HwgUwLs.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
65:be:f2:a4:b1:d0:52:1f:80:35:d5:38:a5:d6:c1:8c:12:1f:
d7:4c:70:57:da:55:08:1b:68:6f:d3:cc:f9:ec:c2:46:4c:73:
37:e4:6d:87:ad:fd:35:8b:58:eb:88:57:80:fb:a4:43:83:45:
6f:4f:70:fa:2a:ed:74:3b:62:01:88:b6:36:33:74:ae:75:b1:
ad:0b:e7:92:ce:38:8c:7c:fb:4b:3b:4b:24:80:1b:48:62:fd:
f0:4e:fb:1b:e0:36:1c:9b:60:e1:08:1a:c1:12:07:35:9d:9e:
d2:a3:6a:47:6a:73:29:f1:a1:91:6b:21:18:f9:b4:f8:25:b1:
eb:1e:c2:a4:00:6b:73:a2:a3:3c:68:2a:c5:44:44:cc:2b:b0:
ce:3e:16:6a:39:c0:04:2d:7b:89:36:8f:4c:a4:c4:e3:26:9d:
53:cf:64:ce:2d:21:2e:0a:4f:35:c6:85:a0:f7:cd:22:38:92:
59:89:83:63:fa:32:b9:9d:73:7f:a4:22:a9:be:22:e9:21:26:
b2:32:bb:e0:77:f5:43:c4:a5:63:f0:06:0d:1a:c8:47:1a:7c:
87:bf:8f:b2:6a:66:0c:e9:bc:e2:db:6e:f2:8c:94:2d:e6:5b:
70:b4:11:5a:6b:10:24:e0:ed:ab:fb:22:be:92:83:96:cb:f1:
a1:8e:c4:55
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgICYBQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNTA1MTQw
NzEwMjBaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKEIyRkJDMzA0MTJFMEMz
Qzk4RUIzQjU4RjdDNTY3NjFGMDgxNEMwQkIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCYG8NriseDmSlXYE4E/AFDOtDwQAt63i9OrbYEF2T9I2yK2Ywq
Ea54384bafpOfB9kzn5rs1egn02kbaqdwAE1kH/xPyin/JBhFYwrGp5brN3ULDm2
cOaVwQyqfgXgTaakmTAHtpX5MSFhlRabWVNKtnMlcaQZ6I3i2YI7f8JnfpA4nbYg
vRXmroPiuYHG4r0cD4SvYx52EGCPGa9j1xtFIl0EwYn7KC1gSBaDG0tZf0t8NW5w
MP2jzC/bLxtPLtkBBsdeA5DlRCarXN09Vzl6dI7EUVSO1rq3La7r4F7sYlhsYazO
hWSxgOYh9mc3ZwQOOcE6og3xBlv8JHKh3jNzAgMBAAGjggI0MIICMDAdBgNVHQ4E
FgQUsvvDBBLgw8mOs7WPfFZ2HwgUwLswHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L3N2dkRCQkxndzhtT3M3
V1BmRloySHdnVXdMcy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwYgYIKwYBBQUHAQcBAf8EUzBRME8EAgABMEkD
BAIr7zADBAMr9gAwDAMEAiv2DAMEBCv2IDAMAwQCK/Y0AwQCK/ZgAwQCZyMwMAsD
AwJn7AMEA2fsEDAMAwQCZ+wcAwQCZ+xgMA0GCSqGSIb3DQEBCwUAA4IBAQBlvvKk
sdBSH4A11Til1sGMEh/XTHBX2lUIG2hv08z57MJGTHM35G2Hrf01i1jriFeA+6RD
g0VvT3D6Ku10O2IBiLY2M3SudbGtC+eSzjiMfPtLO0skgBtIYv3wTvsb4DYcm2Dh
CBrBEgc1nZ7So2pHanMp8aGRayEY+bT4JbHrHsKkAGtzoqM8aCrFRETMK7DOPhZq
OcAELXuJNo9MpMTjJp1Tz2TOLSEuCk81xoWg980iOJJZiYNj+jK5nXN/pCKpviLp
ISayMrvgd/VDxKVj8AYNGshHGnyHv4+yamYM6bzi227yjJQt5ltwtBFaaxAk4O2r
+yK+koOWy/GhjsRV
-----END CERTIFICATE-----
Generated at Sat May 17 22:46:01 2025 by rpki-client