Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/nC6EIE5dK9hTw-c_Dyr6w6qWKO0.roa
File: nC6EIE5dK9hTw-c_Dyr6w6qWKO0.roa (raw, json)
Hash identifier: eLWzdw0a5uWFHGCFExVbzI6ZR+aiV5QbByeEuiaVsEI=
Subject key identifier: 9C:2E:84:20:4E:5D:2B:D8:53:C3:E7:3F:0F:2A:FA:C3:AA:96:28:ED
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 70DC
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/nC6EIE5dK9hTw-c_Dyr6w6qWKO0.roa
Signing time: Sat 28 Jun 2025 06:44:39 +0000
ROA not before: Sat 28 Jun 2025 06:44:39 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28892 (0x70dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jun 28 06:44:39 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=9C2E84204E5D2BD853C3E73F0F2AFAC3AA9628ED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:2c:a7:86:0c:4f:af:f2:09:24:3e:36:78:72:
73:cc:2b:83:4f:e6:4c:86:7a:7d:de:09:63:79:52:
5d:4c:e2:ae:93:45:73:1c:60:64:57:4d:b2:61:af:
27:b0:13:3a:43:d6:10:ca:02:61:b3:2a:89:a9:74:
67:c3:fe:aa:2c:84:22:2d:9e:96:c7:c8:1e:e2:d8:
76:4b:64:bd:c2:d5:ed:2a:f3:f5:6e:2c:95:37:1a:
31:1d:b6:08:82:dc:f8:e5:86:f5:c4:83:a6:51:ca:
7a:c3:ea:76:b6:70:2e:fe:39:ac:55:cf:58:89:d5:
7b:be:03:ca:e2:e6:fb:15:d5:ac:24:05:31:49:cc:
74:2d:67:e2:0f:fc:47:ad:2e:7b:0f:8f:c7:68:1f:
39:b5:bd:39:a5:22:af:6e:90:72:04:99:9c:36:3e:
15:d4:28:b7:fb:76:61:a8:24:f2:09:06:13:a1:b7:
5b:14:6b:a8:d7:46:bf:ac:59:d7:16:b6:7f:12:99:
fd:76:41:19:dd:16:44:49:b1:da:60:f9:14:ed:1d:
04:8e:32:02:fb:79:a1:29:9c:94:be:cc:6d:fb:26:
15:69:b3:78:51:9d:a2:42:57:ee:1b:7c:7e:b5:9e:
6b:cb:22:34:c2:2b:8f:1e:a8:4d:43:fd:57:fa:12:
46:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:2E:84:20:4E:5D:2B:D8:53:C3:E7:3F:0F:2A:FA:C3:AA:96:28:ED
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/nC6EIE5dK9hTw-c_Dyr6w6qWKO0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
7c:68:5a:c0:55:12:11:2f:bc:57:7d:e5:e2:33:19:14:b6:1f:
83:d9:ed:3b:e5:8f:62:a3:f1:fd:b8:ab:96:fd:56:ad:dd:37:
4c:d7:6c:8f:a7:39:62:06:48:c9:bf:34:dc:99:5b:f7:4a:cd:
0e:bf:b0:9d:3e:02:24:08:a0:8f:0b:a1:4d:c4:dc:c9:5e:ae:
51:88:cb:fe:c9:ab:e9:71:08:2e:68:a2:01:e6:52:55:a9:be:
d9:57:45:98:2d:93:7a:9e:9e:4d:c1:e6:3e:8d:c9:73:a4:38:
9e:bb:03:0d:85:4d:e4:f4:65:10:97:9b:6d:36:9b:b3:c0:68:
59:98:5f:8b:a1:dd:34:96:83:f2:79:29:79:44:be:e6:5c:62:
2d:b8:96:5f:36:1a:bc:3c:83:c9:09:43:8f:5e:56:34:9a:88:
db:1c:5c:2b:6c:70:21:bd:14:6a:a2:8f:c5:5b:da:3c:15:33:
a4:c7:7f:18:c7:fb:a8:92:8a:7b:45:b3:c0:78:e5:a6:55:1d:
3e:b5:cc:ba:b1:48:7f:66:85:d9:90:47:77:74:09:7a:c0:1b:
77:ba:4f:b9:19:f5:d1:21:1f:81:f0:5e:b7:90:fd:c6:7c:d1:
2b:27:60:0c:b1:35:d4:c9:2c:a4:3f:82:73:2e:47:4e:56:6c:
ea:e1:ca:47
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgICcNwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNTA2Mjgw
NjQ0MzlaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDlDMkU4NDIwNEU1RDJC
RDg1M0MzRTczRjBGMkFGQUMzQUE5NjI4RUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC7LKeGDE+v8gkkPjZ4cnPMK4NP5kyGen3eCWN5Ul1M4q6TRXMc
YGRXTbJhryewEzpD1hDKAmGzKompdGfD/qoshCItnpbHyB7i2HZLZL3C1e0q8/Vu
LJU3GjEdtgiC3PjlhvXEg6ZRynrD6na2cC7+OaxVz1iJ1Xu+A8ri5vsV1awkBTFJ
zHQtZ+IP/EetLnsPj8doHzm1vTmlIq9ukHIEmZw2PhXUKLf7dmGoJPIJBhOht1sU
a6jXRr+sWdcWtn8Smf12QRndFkRJsdpg+RTtHQSOMgL7eaEpnJS+zG37JhVps3hR
naJCV+4bfH61nmvLIjTCK48eqE1D/Vf6Eka7AgMBAAGjggI0MIICMDAdBgNVHQ4E
FgQUnC6EIE5dK9hTw+c/Dyr6w6qWKO0wHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L25DNkVJRTVkSzloVHct
Y19EeXI2dzZxV0tPMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwYgYIKwYBBQUHAQcBAf8EUzBRME8EAgABMEkD
BAIr7zADBAMr9gAwDAMEAiv2DAMEBCv2IDAMAwQCK/Y0AwQCK/ZgAwQCZyMwMAsD
AwJn7AMEA2fsEDAMAwQCZ+wcAwQCZ+xgMA0GCSqGSIb3DQEBCwUAA4IBAQB8aFrA
VRIRL7xXfeXiMxkUth+D2e075Y9io/H9uKuW/Vat3TdM12yPpzliBkjJvzTcmVv3
Ss0Ov7CdPgIkCKCPC6FNxNzJXq5RiMv+yavpcQguaKIB5lJVqb7ZV0WYLZN6np5N
weY+jclzpDieuwMNhU3k9GUQl5ttNpuzwGhZmF+Lod00loPyeSl5RL7mXGItuJZf
Nhq8PIPJCUOPXlY0mojbHFwrbHAhvRRqoo/FW9o8FTOkx38Yx/uokop7RbPAeOWm
VR0+tcy6sUh/ZoXZkEd3dAl6wBt3uk+5GfXRIR+B8F63kP3GfNErJ2AMsTXUySyk
P4JzLkdOVmzq4cpH
-----END CERTIFICATE-----
Generated at Sun Jul 20 12:45:16 2025 by rpki-client