Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/xozHOXnyBpSScRDGCE_MrBVXn0k.roa
File: xozHOXnyBpSScRDGCE_MrBVXn0k.roa (raw, json)
Hash identifier: llsP8bRHmCLtUrKjv3mNI2nDc8+whR24G/dQC4hVyD4=
Subject key identifier: C6:8C:C7:39:79:F2:06:94:92:71:10:C6:08:4F:CC:AC:15:57:9F:49
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 5FA2
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/xozHOXnyBpSScRDGCE_MrBVXn0k.roa
Signing time: Tue 13 May 2025 02:40:19 +0000
ROA not before: Tue 13 May 2025 02:40:19 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24482 (0x5fa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 13 02:40:19 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=C68CC73979F20694927110C6084FCCAC15579F49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:08:9f:2d:7d:bf:af:ab:e9:8c:94:0a:c0:42:
90:8d:11:ac:74:76:06:71:08:73:89:f6:4b:23:8d:
69:8a:b9:00:87:98:da:6c:6c:f3:90:39:e1:46:73:
93:9c:e9:6c:6c:6b:01:e4:30:16:3e:50:19:f5:ed:
e5:60:4d:1c:19:bb:11:bf:13:ae:ea:34:ba:4e:54:
c2:7b:8e:86:36:a7:32:b1:7b:76:de:2a:58:9a:77:
7b:f5:c4:cb:c0:66:bd:16:61:15:0b:2a:29:33:11:
32:92:7c:75:ac:c0:a0:9a:46:fd:38:db:22:e7:04:
64:3e:0f:b8:06:34:1c:86:42:59:45:e2:13:82:c8:
5d:d1:1a:32:de:40:f1:6d:8f:c0:66:9a:a7:9d:21:
f5:1c:4e:e9:48:79:2b:ae:c2:9c:08:2d:82:2c:98:
9f:95:fa:18:d2:85:6e:3e:8d:ab:94:c7:8c:62:8d:
67:87:bb:99:96:e3:f4:5f:01:1b:e9:2a:67:84:35:
dd:c5:30:f3:6b:8e:1b:b9:f3:49:37:fa:14:1d:e4:
58:15:2b:29:ae:20:34:58:50:16:3f:97:82:64:45:
5f:75:3c:ed:bf:b1:05:1f:b2:f6:51:a8:24:b4:8a:
76:8c:fd:6f:8b:25:64:41:01:0e:dc:f7:86:04:d0:
86:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:8C:C7:39:79:F2:06:94:92:71:10:C6:08:4F:CC:AC:15:57:9F:49
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/xozHOXnyBpSScRDGCE_MrBVXn0k.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
bc:5e:18:44:60:16:a7:70:c5:40:95:e4:90:94:a0:b7:2b:c1:
d1:6e:8a:d5:ca:6b:f5:ff:cb:f2:21:8f:8f:81:c7:ab:10:15:
e2:59:49:3c:d3:34:b8:82:5c:fc:7b:ed:9b:7b:da:01:c5:6e:
91:a8:2a:3c:52:83:f0:94:e5:63:79:16:56:c4:cf:f8:b3:24:
a7:2a:30:4a:30:4a:f9:ca:98:a2:b1:02:f8:b7:dc:7f:2e:23:
c1:e9:b9:9e:61:53:b1:79:d7:d7:ce:11:00:0d:94:57:32:e7:
d1:a1:20:90:d1:c0:86:8b:e2:e5:7c:aa:67:12:eb:a2:a8:bd:
0b:29:75:13:09:b1:1d:0b:6e:c7:44:00:ae:23:7e:9d:f2:d1:
7b:4a:87:fb:4f:d2:f9:5c:46:11:49:f1:53:fd:8e:bf:f8:ee:
43:21:60:31:60:ef:8a:3e:c0:78:c8:26:17:16:5d:2b:48:85:
fc:83:78:98:b1:d5:28:d2:ee:1a:ec:95:ba:5a:47:a9:11:5b:
15:b7:cf:36:cf:52:92:ce:7e:00:c2:db:d4:04:ab:9c:52:6b:
ad:e2:d3:f6:19:1c:ab:92:6d:fc:6c:d0:9e:32:db:a9:f6:0c:
2e:f9:64:8a:59:fb:ae:33:36:b5:a8:11:d9:88:c5:49:cb:a3:
02:23:ec:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 09:10:35 2025 by rpki-client