Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/6XDbXIPScKOqTu6kBc73RqUcFhU.roa
File: 6XDbXIPScKOqTu6kBc73RqUcFhU.roa (raw, json)
Hash identifier: xMDu//5mYpGMLeXS62Y+8HzUN7TLU6wMJPo0RA2D5T8=
Subject key identifier: E9:70:DB:5C:83:D2:70:A3:AA:4E:EE:A4:05:CE:F7:46:A5:1C:16:15
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 6F7C
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/6XDbXIPScKOqTu6kBc73RqUcFhU.roa
Signing time: Tue 24 Jun 2025 20:44:30 +0000
ROA not before: Tue 24 Jun 2025 20:44:30 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28540 (0x6f7c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jun 24 20:44:30 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=E970DB5C83D270A3AA4EEEA405CEF746A51C1615
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:40:a4:04:c2:6e:c1:02:43:49:6b:99:01:34:
19:be:04:3c:41:29:b4:2f:c6:f8:20:ea:15:51:a3:
d8:cb:b0:56:31:bb:43:8a:4c:b6:7d:46:00:e0:f0:
f0:32:59:4e:6a:90:f4:42:dc:b9:79:e2:3d:e2:5a:
a1:95:66:0e:0b:76:11:4d:8f:96:d3:81:5f:7e:ce:
1c:a4:da:18:57:5d:f6:0f:7d:7d:ae:2b:75:81:89:
fd:c7:58:22:46:b2:52:10:6a:6f:ec:58:f0:de:a1:
74:00:a4:9d:10:0e:13:5a:80:ae:75:24:db:95:39:
c0:23:a6:6d:30:ef:15:4b:36:f5:92:44:e4:05:48:
e4:50:64:00:47:7c:8d:1d:1f:57:6a:21:f8:03:da:
37:06:5b:e6:d4:f1:94:09:fa:aa:2c:25:1f:db:16:
df:ec:da:67:ab:84:4a:d7:26:01:31:59:b2:ba:b6:
f1:4b:53:8c:f8:a3:a2:fb:d1:62:2e:e2:d1:4a:dd:
99:f3:25:2f:10:84:01:28:39:f1:47:46:72:bc:7f:
2d:94:33:4f:51:54:a4:4f:ba:a0:a1:3b:f8:1b:85:
35:cb:d5:74:67:66:99:16:5b:60:0c:f3:13:1c:50:
96:1a:f7:84:f8:44:5b:09:cc:1b:47:68:33:6f:46:
f6:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:70:DB:5C:83:D2:70:A3:AA:4E:EE:A4:05:CE:F7:46:A5:1C:16:15
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/6XDbXIPScKOqTu6kBc73RqUcFhU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
63:4e:b0:52:ab:c4:a0:14:52:49:84:6c:f6:cf:9d:e3:6e:bb:
63:5f:9f:31:9a:41:61:00:c2:aa:ba:e7:40:6b:04:82:37:b2:
20:43:b5:59:81:48:ae:c8:cf:34:3a:de:76:da:f2:f8:96:d3:
17:c0:ef:1a:33:cc:b0:96:99:f7:d8:08:ca:a5:d7:bd:67:1b:
11:48:27:b3:af:b0:39:a7:1f:30:54:d9:2f:f4:80:48:45:63:
44:22:b4:a9:18:cd:d5:67:5c:37:5a:50:90:67:64:a2:df:77:
97:d9:2e:13:5e:2d:1c:f7:0d:8a:85:e9:43:0b:46:a8:cb:f8:
a0:81:84:3f:ab:eb:a0:be:08:66:84:75:2e:c7:28:51:fe:75:
90:1d:8d:50:e8:19:59:cb:e8:7a:b1:1d:27:4b:02:90:6a:30:
81:8d:63:48:cb:7d:e5:ed:f8:00:71:4f:b4:80:7c:c8:bd:24:
bf:d2:0c:4b:c9:67:3e:c2:f0:db:c9:35:9e:5a:70:22:b0:91:
1a:fd:a6:8f:93:74:9a:7f:fb:fc:a9:c0:54:e0:28:7c:71:f3:
09:13:31:20:62:88:90:00:d0:aa:14:08:0e:32:67:0d:e6:40:
5a:fe:59:f8:8e:d0:48:a0:aa:32:08:12:d4:91:0a:02:be:c7:
74:51:e6:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:55:55 2025 by rpki-client