Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/6TJ4jCWqN2q3Z110mm06B0jrLo8.roa
File: 6TJ4jCWqN2q3Z110mm06B0jrLo8.roa (raw, json)
Hash identifier: Sl/FETpdFBeX1KdcoBQ3GOizUynq2yKrLMS66YkRuSQ=
Subject key identifier: E9:32:78:8C:25:AA:37:6A:B7:67:5D:74:9A:6D:3A:07:48:EB:2E:8F
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 74E0
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/6TJ4jCWqN2q3Z110mm06B0jrLo8.roa
Signing time: Tue 08 Jul 2025 23:45:01 +0000
ROA not before: Tue 08 Jul 2025 23:45:01 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29920 (0x74e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jul 8 23:45:01 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=E932788C25AA376AB7675D749A6D3A0748EB2E8F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e3:b8:f6:46:73:ec:87:8b:51:ca:90:74:16:
44:61:16:b1:4b:4c:ea:ba:27:7c:80:f4:7f:3e:77:
ad:74:f0:d7:e8:eb:a5:39:c5:24:0d:4f:69:97:59:
ad:62:e0:2c:12:86:9b:c5:d2:d2:2b:f6:4f:f1:80:
11:1e:9a:8a:75:05:2a:7d:d5:74:40:c9:f4:fc:bd:
e4:4a:7d:d9:3e:02:b3:f2:50:0f:86:87:26:ed:42:
19:a4:8e:96:f9:63:51:a0:ea:33:69:03:ed:ad:94:
0c:ca:b0:f0:9d:e7:59:f0:2b:70:d5:4d:f3:ea:9d:
6e:55:c1:0c:57:4a:50:99:41:2b:04:14:e0:93:fc:
c3:c2:90:05:7f:5a:9d:95:b8:f1:fa:dd:e3:9e:40:
16:a3:41:85:c4:3f:6d:c1:9f:df:79:17:fc:37:af:
ea:bc:df:53:cb:19:6d:13:d3:1c:04:63:6d:20:a4:
28:e9:ef:8f:4b:bc:fa:6c:06:05:93:fb:bb:7a:39:
f1:93:58:3e:bf:1e:ed:b4:bc:5a:0c:e5:39:55:6e:
9b:35:ef:c3:3c:bb:e8:d3:15:84:f5:74:75:05:86:
57:33:27:d0:20:80:c7:02:dd:ff:b5:73:86:52:51:
03:02:7d:e1:1e:92:0c:32:b6:d0:96:e8:81:88:0d:
49:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:32:78:8C:25:AA:37:6A:B7:67:5D:74:9A:6D:3A:07:48:EB:2E:8F
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/6TJ4jCWqN2q3Z110mm06B0jrLo8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
a9:14:e4:68:d5:e2:3d:a4:65:93:ed:6d:a0:a3:c0:ac:cb:20:
12:fe:ec:cb:30:e9:76:52:66:7a:42:dc:33:f0:b6:08:15:8c:
19:1a:56:e9:5d:d1:ad:1f:e4:6f:ac:4b:25:2d:44:f9:e6:01:
ec:3a:6c:d1:f0:19:63:9b:16:f0:40:0d:c1:fb:08:94:70:ad:
3f:56:a3:2b:e9:ee:11:d9:dd:82:5c:d6:38:00:bd:82:fa:6f:
2c:4c:f0:83:65:0c:72:85:4d:a4:44:cd:49:3e:14:2c:4c:c6:
74:f1:1c:20:55:01:f5:9c:04:ff:33:e6:d2:46:88:f1:96:84:
2d:d2:b6:4c:65:2f:ff:34:ce:ca:1f:45:d0:54:66:39:23:72:
f0:01:02:32:d0:3c:c5:4e:29:0c:e7:72:fb:e7:71:66:b8:45:
ca:33:57:7c:b3:bf:f7:bb:05:19:81:d5:32:66:62:89:0f:02:
49:f0:b0:a4:90:be:fd:8e:e8:47:ca:96:86:cf:bc:db:d8:50:
b9:77:d2:b4:9f:66:1d:f3:b2:c6:81:23:ed:c9:aa:ec:21:db:
c9:bb:8a:07:4b:7d:ec:77:cb:2d:c9:2e:d1:7f:e1:52:6d:c3:
25:a4:3b:35:1a:fe:8a:90:7b:1c:92:6f:a1:62:79:7b:d4:31:
e1:e5:23:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:55:35 2025 by rpki-client