Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/A6iFClxdn7O9cSTxSrNFgSRN-5I.roa
File: A6iFClxdn7O9cSTxSrNFgSRN-5I.roa (raw, json)
Hash identifier: LCQA2bEcpmtG09VOLbE0p/b2oQrk+oglJFKyKQJ8CfY=
Subject key identifier: 03:A8:85:0A:5C:5D:9F:B3:BD:71:24:F1:4A:B3:45:81:24:4D:FB:92
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 64D8
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/A6iFClxdn7O9cSTxSrNFgSRN-5I.roa
Signing time: Tue 27 May 2025 00:13:28 +0000
ROA not before: Tue 27 May 2025 00:13:28 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25816 (0x64d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 27 00:13:28 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=03A8850A5C5D9FB3BD7124F14AB34581244DFB92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:e4:12:c8:0b:dd:bf:0e:89:cf:0c:9c:fc:b1:
1a:9d:97:70:b7:52:0c:7d:f7:17:37:77:5e:3f:b4:
31:0e:23:66:ac:d5:a1:a7:38:e6:20:3a:33:1e:1c:
b1:dd:23:cd:ff:df:81:29:1d:12:42:87:59:a4:6c:
3d:3c:05:46:9b:72:46:93:48:3c:43:08:15:f5:98:
34:3a:09:7d:67:03:bd:24:a1:c2:f1:05:9d:44:32:
87:ab:67:70:6c:8f:8c:7d:e7:fc:fa:c4:c6:04:76:
4f:35:b3:0e:74:de:7a:0b:5e:2a:41:50:e6:0c:58:
de:d0:be:1c:98:f5:32:b9:1d:0d:c3:52:fa:f1:6f:
c9:3d:33:b9:96:51:85:53:f2:fe:ae:8b:fe:34:ed:
d4:13:fe:77:77:d3:b2:20:15:47:d6:24:0e:e3:44:
3c:24:3f:08:4b:ab:93:4d:7e:5a:71:4b:ec:3e:46:
a1:bc:b3:70:87:97:c2:54:55:b1:67:14:17:9e:93:
90:c2:ba:a9:06:59:35:6c:4b:28:cd:8f:02:2a:31:
7a:11:3a:29:80:28:5f:66:25:10:bf:90:54:7a:0c:
89:7b:bf:2a:25:aa:78:1a:53:cc:92:75:3a:66:3e:
99:0b:42:88:30:18:65:56:9c:c8:70:f7:c9:2e:09:
7f:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:A8:85:0A:5C:5D:9F:B3:BD:71:24:F1:4A:B3:45:81:24:4D:FB:92
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/A6iFClxdn7O9cSTxSrNFgSRN-5I.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
12:32:9d:47:5f:26:fe:06:91:4e:d9:f1:10:b2:f2:0a:6f:7c:
43:64:90:c6:56:fd:72:6c:b5:e7:56:87:de:66:17:44:95:a7:
ca:3b:6f:cb:cc:37:52:85:f6:b1:37:12:6e:a1:8e:26:fa:8c:
35:f4:bb:a5:b3:3f:60:1a:67:36:e5:99:a5:df:5b:2a:35:88:
cd:db:e3:1d:ad:c4:5a:97:73:21:b1:90:c5:6c:55:c0:29:de:
8f:90:69:5a:85:70:dc:dc:8f:3d:79:dc:86:25:14:2d:c6:62:
d7:8d:df:11:8d:e5:2a:84:f2:77:ca:9b:99:d6:93:e2:a9:9b:
55:79:08:42:ac:95:e4:34:2e:88:57:d8:f2:03:ac:7e:26:50:
0e:c6:4a:6f:c1:88:de:61:ab:bf:4c:ca:18:12:ad:fa:ef:3a:
21:2c:0c:ef:f6:e1:d5:c3:7c:b7:02:64:3f:7e:45:d6:96:32:
55:ef:85:c6:4d:d1:3b:48:3d:8d:6f:39:d5:08:03:39:f9:69:
ff:33:f6:cb:6a:f4:64:76:e4:bf:14:b3:55:87:a3:82:04:02:
8e:fe:f2:d1:0a:79:92:ff:ca:fe:90:84:7d:48:6d:6e:e3:3e:
1e:15:cf:76:f1:d6:fa:7f:60:21:8d:86:6c:b2:6a:f1:f7:c8:
94:30:6f:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 16:44:41 2025 by rpki-client