Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/vzRcuX9OaTMzVlvsfH-k1hJVuRo.roa
File: vzRcuX9OaTMzVlvsfH-k1hJVuRo.roa (raw, json)
Hash identifier: Ow16251mvDgYsnAGslF+Kry/wDI7iq5+6Msl8B/xSf0=
Subject key identifier: BF:34:5C:B9:7F:4E:69:33:33:56:5B:EC:7C:7F:A4:D6:12:55:B9:1A
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 60B6
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vzRcuX9OaTMzVlvsfH-k1hJVuRo.roa
Signing time: Thu 15 May 2025 23:40:32 +0000
ROA not before: Thu 15 May 2025 23:40:32 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24758 (0x60b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 15 23:40:32 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=BF345CB97F4E693333565BEC7C7FA4D61255B91A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:e5:09:89:9d:74:36:d2:fb:51:14:78:5a:c8:
03:56:1e:b1:db:f9:d2:8a:3e:bc:14:9f:6e:ca:5d:
7e:29:e5:2d:48:6e:97:7d:d0:51:db:15:83:96:43:
7c:9e:2b:3c:37:5c:bb:74:75:db:2e:99:b2:87:27:
23:48:d2:e3:a7:74:43:61:26:ec:90:db:91:16:77:
e6:90:29:30:c4:f4:bd:c3:d3:29:d8:1c:d1:8d:c4:
50:df:03:cd:a6:26:f7:da:4a:0f:c6:f3:35:cd:77:
ec:b4:ce:6d:a0:3d:14:b8:dc:07:8b:8a:0e:95:4e:
7a:da:0e:39:96:87:63:85:80:9b:50:c1:88:aa:ca:
84:b0:ba:b8:af:cf:44:af:1c:c3:16:75:47:fa:1a:
69:b2:83:cd:f8:a9:a1:d7:91:bd:db:0e:51:af:2d:
1c:65:ca:7a:cf:f5:28:3e:b5:f3:e0:46:57:a1:9b:
80:3f:c3:a1:c3:67:f4:78:1d:d8:d8:7d:e1:6f:13:
2f:91:5f:5a:6d:91:42:56:09:18:1e:72:45:b5:60:
c1:a1:e9:b9:ce:5a:71:19:9d:30:da:4b:00:30:84:
23:b1:14:32:1c:c5:b4:1c:95:39:03:ca:02:6b:2e:
f7:7d:e8:12:3e:86:ff:11:ad:67:cd:7f:cc:cc:72:
0e:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:34:5C:B9:7F:4E:69:33:33:56:5B:EC:7C:7F:A4:D6:12:55:B9:1A
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vzRcuX9OaTMzVlvsfH-k1hJVuRo.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
23:9b:ee:97:f1:ea:b9:1d:ac:5b:4b:e7:b4:be:2c:09:cf:f3:
4b:48:60:8f:7a:0a:7a:57:de:bf:f9:f3:76:c3:01:1e:dd:fe:
18:b3:6b:b5:65:ee:06:6a:b8:f8:22:34:01:65:46:05:2b:39:
04:62:d6:27:f9:e8:58:6e:f8:6c:61:1c:6c:63:d6:e8:91:d1:
b7:33:3d:a1:ae:0e:8c:5c:92:5b:50:f8:46:2c:f8:c5:e7:ef:
2c:e1:97:7e:1d:67:03:1c:c0:94:7f:10:e8:a8:98:58:31:6e:
81:42:f9:30:a7:88:f2:8c:22:75:3d:79:a9:ff:54:85:f3:5f:
e5:6b:02:7d:08:5f:c4:ea:ea:91:60:dd:ef:4f:68:01:95:27:
29:c4:95:bf:b0:b1:37:18:23:a6:77:b8:ed:98:23:f2:88:5b:
a5:e8:ea:31:d5:d7:5d:75:92:a3:3e:15:e6:da:6b:ff:21:c9:
ed:d9:d1:38:6f:6d:0c:2f:fb:b7:ea:8a:1a:d7:60:05:0e:41:
e4:18:12:93:21:7b:e4:c0:97:d2:c8:f3:a5:ff:df:ae:89:4a:
16:39:1b:cd:bf:e9:58:ff:c0:a1:47:87:4a:bf:73:70:47:ce:
4c:19:9b:97:59:1c:94:8f:2b:44:b6:06:f0:0e:3b:ae:1d:ab:
f1:90:db:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 21:24:54 2025 by rpki-client