Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/c6wkTBYjuLG525W-4u2q1Nv1z94.roa
File: c6wkTBYjuLG525W-4u2q1Nv1z94.roa (raw, json)
Hash identifier: 6FrnQ9BIaUMd7Wiy3V5u1jEg02cOpDdxZedU1GIrdG4=
Subject key identifier: 73:AC:24:4C:16:23:B8:B1:B9:DB:95:BE:E2:ED:AA:D4:DB:F5:CF:DE
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 71C6
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/c6wkTBYjuLG525W-4u2q1Nv1z94.roa
Signing time: Mon 30 Jun 2025 17:14:41 +0000
ROA not before: Mon 30 Jun 2025 17:14:41 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29126 (0x71c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jun 30 17:14:41 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=73AC244C1623B8B1B9DB95BEE2EDAAD4DBF5CFDE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:82:b9:46:e7:1f:e4:c1:2c:08:37:65:66:ea:
c8:1c:56:6e:25:78:c1:2c:4c:5a:17:6c:5c:35:cb:
0a:0a:e8:65:41:3e:90:6b:6a:f7:4a:33:f1:33:81:
87:b6:59:67:9d:b9:7c:f9:e8:58:7b:6d:4f:ae:b7:
8a:d0:70:d6:30:38:96:f2:c6:b9:3c:9f:df:47:0b:
ec:d8:9a:81:be:fc:22:89:8d:58:d8:d4:1f:50:75:
5f:24:27:3c:ee:83:0a:48:28:09:e3:dc:d1:2d:0c:
5f:2f:0f:ff:65:30:2e:94:a3:7b:23:c1:ca:c3:f1:
8b:bf:7e:fe:21:a6:82:da:5f:83:40:99:37:b7:ee:
d9:9b:c8:3d:c9:3c:b4:50:12:0e:0a:30:c0:60:91:
b9:7b:3c:59:80:87:c6:c0:87:84:49:7a:a0:3d:5e:
c0:93:c1:f5:80:8e:b0:70:72:f2:e7:ce:dc:d9:0e:
0d:33:71:90:b0:f2:60:9b:5b:e9:bf:ba:01:86:e8:
19:37:58:9f:38:fc:0f:89:f1:a0:17:08:0e:5d:3c:
26:b4:b5:6b:6d:b6:60:b8:9d:95:6d:9a:c4:2c:1d:
44:2a:e6:67:99:26:d0:1a:c8:9b:f3:6e:20:7d:db:
8c:aa:bf:d2:28:23:2c:db:27:be:b2:27:07:be:6f:
77:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:AC:24:4C:16:23:B8:B1:B9:DB:95:BE:E2:ED:AA:D4:DB:F5:CF:DE
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/c6wkTBYjuLG525W-4u2q1Nv1z94.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
84:be:10:ac:3c:4a:bb:1f:c4:8a:e2:d1:ab:6f:7b:24:04:d6:
7b:b0:2e:61:0f:ea:76:ec:70:58:6e:a3:40:b5:50:4c:cb:28:
f9:1a:31:c6:62:01:71:3a:a5:18:bc:ea:37:45:bc:15:0b:d7:
3d:f0:28:f1:2a:e4:cb:ee:0e:a8:8c:d5:01:de:41:de:0a:10:
53:32:89:df:43:d0:99:e3:d1:f1:58:78:4a:d6:c0:d8:be:86:
38:29:bc:94:6f:f5:af:9d:a9:c9:5a:b0:53:d8:6e:77:61:5f:
cb:22:97:fe:ab:3b:78:6d:eb:13:5e:75:e8:18:2e:8c:7c:9a:
b7:1e:8f:8c:5d:ed:93:de:b0:6c:50:2c:6e:9a:04:3a:25:a3:
43:06:85:7c:65:3f:8b:df:97:eb:42:b4:a4:f6:4d:c6:89:fb:
fc:66:e7:81:d6:86:88:56:0f:69:1b:ff:5b:c0:c9:a5:c5:07:
32:ba:1b:89:48:83:1d:5a:74:c7:12:83:9c:d8:be:d1:5f:ce:
a2:87:94:4a:a5:4c:41:ac:06:ec:82:bf:e6:98:a9:93:28:ee:
62:5f:35:92:f0:79:b7:9e:79:3b:10:54:4b:f2:32:55:15:03:
14:c1:d4:91:20:64:88:21:72:63:f2:d3:1b:4f:71:2c:5f:e0:
61:fc:8b:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:57:52 2025 by rpki-client