Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/c6Lrx7pa1xyq63g1W6HBBL2V-bs.roa
File: c6Lrx7pa1xyq63g1W6HBBL2V-bs.roa (raw, json)
Hash identifier: jmolcLP9p9vuCYJC6l1nRlPtXf0SSA0a4vQ4B2H4HzM=
Subject key identifier: 73:A2:EB:C7:BA:5A:D7:1C:AA:EB:78:35:5B:A1:C1:04:BD:95:F9:BB
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 7192
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/c6Lrx7pa1xyq63g1W6HBBL2V-bs.roa
Signing time: Mon 30 Jun 2025 04:17:55 +0000
ROA not before: Mon 30 Jun 2025 04:17:55 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29074 (0x7192)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jun 30 04:17:55 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=73A2EBC7BA5AD71CAAEB78355BA1C104BD95F9BB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:51:e7:74:18:f5:2a:71:24:3d:f8:ac:cc:4f:
a7:85:b6:e2:9d:81:60:e2:57:b1:e0:ab:2a:e4:51:
1f:18:6e:9e:79:fa:b5:08:a4:f4:32:4c:37:39:ba:
9a:bd:66:0c:72:4a:38:b2:be:8a:bd:8a:47:1c:0f:
a0:76:dd:58:22:eb:7f:ae:78:b7:58:8f:f4:da:26:
08:49:aa:6e:40:a4:dc:13:6a:80:32:f1:96:98:24:
d2:ea:92:56:a1:01:0d:41:32:eb:02:b0:ac:f6:75:
71:7c:f8:39:86:02:5d:2f:04:2f:a9:0a:91:b3:a4:
a1:0b:cc:9f:44:38:ff:92:af:12:e6:b8:7d:50:07:
b5:ff:f1:32:ca:ff:f7:f4:e2:07:05:d0:7b:d2:47:
de:39:02:66:96:f1:a6:21:85:78:9c:f5:d8:32:7f:
e4:8c:2a:87:c2:f3:49:21:fa:db:12:34:9c:b4:4b:
d4:2b:5f:11:73:f4:2c:10:e2:ad:86:85:74:6b:35:
14:0a:5e:e5:95:f9:c3:e4:1e:d6:cc:aa:15:d5:9b:
ac:55:86:ba:4a:57:44:d2:ad:bc:29:db:98:58:09:
86:a3:cc:3f:d0:d7:8c:4a:7a:87:2d:dd:6e:32:f8:
a7:b8:78:de:05:70:5d:26:dd:ef:d6:3f:2a:0a:fd:
1b:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:A2:EB:C7:BA:5A:D7:1C:AA:EB:78:35:5B:A1:C1:04:BD:95:F9:BB
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/c6Lrx7pa1xyq63g1W6HBBL2V-bs.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
7b:04:5e:41:cd:e8:95:4d:e3:a2:f9:b9:a1:8e:d2:03:41:e6:
7f:3c:f7:45:9e:09:5d:e7:5b:c8:3f:ae:c1:e2:1b:05:04:9a:
0e:69:10:a0:d6:89:a9:33:b7:cb:d5:dd:8a:f1:b3:a0:dc:ae:
bc:a9:3b:9e:df:da:c6:85:e0:bb:c5:dd:7a:60:ba:9f:03:2e:
65:aa:16:da:65:94:1c:78:bd:7c:fa:96:82:0b:67:b3:5c:ad:
42:ac:19:e6:20:27:e7:9a:2c:a0:eb:dd:9b:80:cf:e0:ff:8e:
54:6d:34:df:b7:5e:fb:5b:c1:98:4c:09:55:d6:51:bc:91:bd:
38:f2:9d:82:20:27:93:66:fc:49:77:41:2e:d5:3c:d9:db:da:
27:29:26:ba:60:b6:9f:fc:cd:98:57:ba:ef:ca:92:e0:00:44:
9e:f3:0c:03:dc:79:d1:53:36:55:94:64:dd:24:dc:ab:57:32:
19:fa:5a:5d:6f:ec:83:80:5a:c9:56:04:2f:cb:cc:c5:11:f0:
ea:9c:08:00:2c:b3:19:80:8c:3a:85:b3:b5:1d:cc:1f:cb:ad:
6b:10:65:0f:ee:1b:80:9c:49:6f:90:d8:2d:91:7d:bd:2c:33:
a4:8b:8b:d5:81:38:6e:19:ca:b7:39:f1:8c:de:d5:d1:f6:7a:
f7:68:0b:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:53:20 2025 by rpki-client