Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/bWwV8ydM-MpP59BjILb51q87d2k.roa
File: bWwV8ydM-MpP59BjILb51q87d2k.roa (raw, json)
Hash identifier: leY/wFmDp5wFcXYwJKrwbM9do0aNu3C7cZeN5H2K5XM=
Subject key identifier: 6D:6C:15:F3:27:4C:F8:CA:4F:E7:D0:63:20:B6:F9:D6:AF:3B:77:69
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 6FEE
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/bWwV8ydM-MpP59BjILb51q87d2k.roa
Signing time: Wed 25 Jun 2025 19:14:28 +0000
ROA not before: Wed 25 Jun 2025 19:14:28 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28654 (0x6fee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jun 25 19:14:28 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=6D6C15F3274CF8CA4FE7D06320B6F9D6AF3B7769
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:89:35:56:34:9d:46:a0:ef:c1:7d:4c:b9:54:
90:90:ea:57:cd:3f:09:e3:70:27:61:3b:8d:17:ac:
8f:32:9d:92:4e:3d:20:cd:1c:b8:30:0d:a5:4d:91:
10:f2:86:0f:3f:a2:ce:34:ae:ab:b1:23:db:da:7f:
6a:49:19:88:6b:3e:ee:e7:a0:21:c5:6e:63:a1:06:
66:8f:86:98:20:48:13:47:09:6c:86:1b:86:b9:9a:
58:a1:fc:28:a1:2a:a7:33:99:61:51:42:d5:77:18:
24:76:a7:09:9e:e8:e6:94:3a:03:b9:4f:81:04:3b:
b1:32:87:54:e2:48:c6:66:ab:58:29:cc:0d:68:4d:
90:ea:70:d8:22:f7:4c:8a:e3:03:ae:99:8e:e1:74:
dd:82:20:e9:45:5b:f2:dc:8a:3f:8c:4e:ed:61:aa:
ea:8b:8e:6b:d1:aa:ad:36:27:a8:42:2f:c7:49:00:
e1:4d:a1:19:90:ec:c9:ab:19:64:9f:b6:c3:dd:d0:
18:d3:70:4f:cf:36:3d:60:4b:f2:45:e3:a1:fd:c4:
db:76:64:98:3d:7b:a5:54:a8:b4:a4:a3:66:f4:52:
af:0a:21:00:20:a9:16:10:ea:7d:b9:09:ef:c4:cb:
8a:70:f1:d0:dd:7c:46:a3:3a:6f:52:29:35:02:1d:
1e:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:6C:15:F3:27:4C:F8:CA:4F:E7:D0:63:20:B6:F9:D6:AF:3B:77:69
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/bWwV8ydM-MpP59BjILb51q87d2k.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
82:ce:8b:66:72:9e:e5:82:3f:65:bf:aa:14:82:22:1e:1a:01:
31:78:c0:9e:83:df:a4:60:4b:3f:f6:e3:5c:44:b3:d7:9e:4f:
c7:bd:c7:b8:21:5f:65:5f:4c:77:d8:1e:3b:67:06:42:da:a1:
8f:a3:ab:8a:83:b8:31:58:e0:da:fb:31:26:bf:7e:8c:cc:bf:
b5:0f:e0:2a:8b:c1:a3:b9:c5:99:51:3a:ba:de:3c:54:dc:9b:
27:af:af:74:3d:a1:49:57:e2:40:2e:99:60:8d:e9:0f:46:d6:
70:51:78:f7:f1:52:83:ef:1f:51:7a:ff:21:95:28:2e:39:5c:
23:b7:ca:f3:ba:0f:39:60:32:b5:8a:a2:0e:d0:4b:2a:34:ec:
6d:cf:97:93:3f:47:54:f2:4e:a2:5a:99:3f:a8:52:1f:a7:79:
61:c9:36:57:22:1b:4e:c6:ee:c8:37:75:28:51:ec:76:23:be:
f6:c0:e6:85:8e:1f:26:ca:1a:9a:27:b6:6c:43:ce:f0:2b:a2:
b0:d4:17:3f:13:8e:e3:0d:78:c1:48:27:20:3c:1a:8c:06:d4:
26:ac:d2:80:e5:43:30:3c:d2:c7:37:67:3d:9d:11:d1:28:0a:
e7:ca:27:e9:99:d6:9f:91:03:73:d3:a9:af:32:d8:73:2c:3e:
3b:d3:e4:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 16:21:34 2025 by rpki-client