Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/6Qai2O0X3najYntzCM3fxfZZTg8.roa
File: 6Qai2O0X3najYntzCM3fxfZZTg8.roa (raw, json)
Hash identifier: TQOAhlfZ9N8UqG8XdqGLMyC+/jR/9qCKUkMJriJF69g=
Subject key identifier: E9:06:A2:D8:ED:17:DE:76:A3:62:7B:73:08:CD:DF:C5:F6:59:4E:0F
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 63D6
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/6Qai2O0X3najYntzCM3fxfZZTg8.roa
Signing time: Sat 24 May 2025 07:40:49 +0000
ROA not before: Sat 24 May 2025 07:40:49 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25558 (0x63d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 24 07:40:49 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=E906A2D8ED17DE76A3627B7308CDDFC5F6594E0F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:dd:ff:79:3a:b4:36:88:7e:9d:94:af:4c:a9:
1c:57:d4:d6:c4:b6:4f:fa:36:0f:93:b8:ba:6a:39:
9c:19:f9:86:07:cd:c4:67:cc:b1:e5:75:9f:dc:ff:
8a:60:65:25:85:c6:bd:31:d6:86:e2:eb:65:1a:2c:
45:c3:d3:74:40:74:7d:3c:77:ee:82:8b:d1:8d:7c:
0f:90:6e:f1:71:96:46:98:ab:8f:92:20:ff:f8:04:
35:b4:af:44:48:2f:8f:c8:0f:e5:97:61:89:50:eb:
d2:3d:8d:47:a7:3a:d4:80:74:6a:01:5b:e7:1a:53:
a0:9c:cf:e8:21:9c:02:30:1a:1f:b0:d2:c4:ae:25:
73:46:60:ed:26:00:b7:f7:bd:fa:8d:25:2d:80:cd:
7c:58:8d:08:e5:bd:b4:d9:08:78:3a:2c:26:db:c0:
24:d0:c3:81:f0:73:79:50:c4:fc:05:94:9e:c5:d4:
1c:26:9f:51:86:0f:57:b2:6d:69:d1:3c:31:c4:b1:
01:2e:82:41:c9:b3:20:66:34:e2:b8:4b:fa:95:30:
3d:77:d0:d0:89:0f:d9:d7:0c:eb:a7:77:e5:5f:6d:
22:28:46:77:4a:8c:49:2d:30:4f:b1:19:f6:93:47:
4d:69:23:7c:a7:34:b6:c2:ae:3b:11:ff:c6:2d:56:
8f:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:06:A2:D8:ED:17:DE:76:A3:62:7B:73:08:CD:DF:C5:F6:59:4E:0F
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/6Qai2O0X3najYntzCM3fxfZZTg8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
15:a7:9e:37:2c:9a:6b:98:27:c0:d4:83:50:ec:79:3c:7d:14:
fe:47:8e:94:71:05:ed:2a:35:bf:01:7c:32:33:cc:8b:07:95:
7f:5d:6e:f9:0b:c8:73:61:a3:c8:d2:23:3d:e9:cf:1b:08:f5:
e3:8a:a3:18:0f:bb:00:87:3a:de:05:4d:aa:4f:80:84:2b:cb:
6e:10:37:c5:44:28:06:36:19:27:cc:76:8e:44:1c:bc:8d:b9:
28:d5:e3:30:98:85:56:42:d1:7d:4b:db:38:cd:50:4e:48:a0:
6f:30:13:eb:e7:86:e2:02:14:8f:80:ce:a5:64:d4:9a:dd:93:
9a:f2:35:46:ed:f4:ed:7c:64:96:9a:5a:23:ab:5b:e8:c3:3f:
e6:eb:c3:51:b7:e2:55:4a:af:a4:23:c3:9d:8f:ce:dd:a5:da:
00:35:07:33:e8:d3:42:aa:f7:96:4f:06:d0:0f:02:3d:02:17:
2f:ed:8a:4e:89:fc:e9:3b:bf:04:28:19:11:f4:40:11:fc:a1:
73:cf:e6:91:8e:43:82:ba:24:eb:dc:60:4a:c5:b7:d4:1e:4b:
cc:d5:7c:b6:86:9a:ce:a5:3a:48:ae:6d:c9:68:95:0a:bb:8e:
7e:54:a2:04:6d:c8:18:25:66:83:89:ed:d5:b7:ff:9c:34:51:
b7:82:67:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:51:37 2025 by rpki-client