Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/5iBK3Fs-7wK4NGTinSCUhk0LbCI.roa
File: 5iBK3Fs-7wK4NGTinSCUhk0LbCI.roa (raw, json)
Hash identifier: dfgg3wg6yayI+PgzunA44V60O6+bvrc14xCk3mX3Mgs=
Subject key identifier: E6:20:4A:DC:5B:3E:EF:02:B8:34:64:E2:9D:20:94:86:4D:0B:6C:22
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 6C6E
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/5iBK3Fs-7wK4NGTinSCUhk0LbCI.roa
Signing time: Mon 16 Jun 2025 05:42:23 +0000
ROA not before: Mon 16 Jun 2025 05:42:23 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27758 (0x6c6e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jun 16 05:42:23 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=E6204ADC5B3EEF02B83464E29D2094864D0B6C22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:99:fc:3b:3a:5a:45:0a:02:46:72:d7:ae:f2:
a0:c2:1c:aa:a1:be:3d:24:69:9f:72:0f:0b:66:48:
ae:8f:0f:cd:a2:88:43:26:6b:80:90:a4:94:6d:51:
6b:18:40:68:d4:5a:e1:7b:50:d5:20:71:84:e0:7f:
ca:c3:64:71:27:30:e0:d9:bd:80:d9:97:5f:b8:ed:
f9:ac:52:e9:52:92:d0:60:be:be:79:3f:f7:85:60:
c1:30:5c:27:5e:8c:9a:68:d8:1a:c0:70:8a:65:05:
e8:64:33:41:8a:95:73:b6:7a:2b:b2:24:2e:06:05:
fa:42:66:80:e2:bc:08:32:3b:39:d2:8c:fa:81:c5:
23:87:85:2b:20:fd:55:73:bc:ee:e0:84:42:19:57:
73:3b:eb:67:c5:2d:0f:9a:73:2c:7d:c4:e8:d4:ea:
9f:cc:ed:1d:68:4f:c0:d2:57:b8:1c:2e:95:2e:68:
b0:1a:1b:00:09:bb:19:44:27:03:20:26:17:6a:79:
93:32:28:a5:d5:55:56:31:ec:bd:4e:7c:1f:e5:71:
f4:4f:ad:4a:5f:76:10:d4:6c:e8:c0:fb:71:05:15:
d2:09:87:bd:61:a1:99:a4:a4:c5:33:70:18:d6:7f:
29:a4:3f:2e:90:ab:71:0f:e2:e9:d9:87:65:ef:1a:
44:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:20:4A:DC:5B:3E:EF:02:B8:34:64:E2:9D:20:94:86:4D:0B:6C:22
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/5iBK3Fs-7wK4NGTinSCUhk0LbCI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
a2:8f:62:a4:55:44:35:52:0b:15:e6:fb:98:5a:36:22:a6:6a:
0f:19:fa:e6:63:cf:8a:1f:22:cc:41:38:54:7b:0c:52:a4:00:
18:1c:e2:01:d1:68:0d:33:11:4b:70:0d:01:f1:13:92:af:47:
84:4f:8f:31:54:e5:50:6b:8b:64:b7:8f:f4:b7:99:b4:25:44:
58:88:26:b5:69:a3:d0:df:d3:fb:d5:30:52:b5:e0:f2:fc:c5:
58:a2:e1:bf:71:27:d3:9a:ba:01:54:9d:97:c1:cd:bf:77:c8:
d6:1c:2d:be:f3:7b:14:9a:28:63:fc:e6:7a:be:03:5e:e5:f9:
9a:52:7e:41:1d:0e:ff:2f:03:f1:8d:a7:2a:76:26:c6:e6:7d:
14:ee:ec:59:78:7b:2f:ea:dc:bc:43:e3:d4:1c:99:c3:be:81:
76:18:69:2a:77:46:27:18:e2:7e:25:5b:88:75:07:94:20:b6:
8f:71:28:33:b3:bb:be:3c:24:73:a4:03:2a:9a:8e:3d:a8:20:
6c:20:b5:94:8e:08:ad:5c:14:a3:2d:c6:27:98:73:b6:7f:c5:
02:78:8c:1a:00:9b:ad:86:fa:0f:ac:e7:09:55:f6:39:cf:18:
9c:8e:db:65:ab:2b:25:80:d8:0c:0e:24:fa:61:38:81:3a:24:
40:f5:37:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:39:13 2025 by rpki-client