Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/r_6btPg14xyf0nInurpMOJbnxVs.roa
File: r_6btPg14xyf0nInurpMOJbnxVs.roa (raw, json)
Hash identifier: 5ShA9MsP+uFlduh3Kfr8QSqrEnkvZN6fz68YSKvjHxQ=
Subject key identifier: AF:FE:9B:B4:F8:35:E3:1C:9F:D2:72:27:BA:BA:4C:38:96:E7:C5:5B
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 77BE
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/r_6btPg14xyf0nInurpMOJbnxVs.roa
Signing time: Wed 16 Jul 2025 15:42:40 +0000
ROA not before: Wed 16 Jul 2025 15:42:40 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30654 (0x77be)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jul 16 15:42:40 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=AFFE9BB4F835E31C9FD27227BABA4C3896E7C55B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:28:8c:bd:49:cd:13:57:cd:31:2a:bc:87:5c:
d2:42:d3:87:9c:c8:98:ce:18:f8:a6:2d:59:76:18:
f0:0b:86:18:eb:1c:96:c7:1f:a8:97:46:79:5d:95:
d5:0d:c3:d1:ae:f6:46:63:f1:98:df:d2:79:1e:6f:
95:12:07:d6:89:8d:34:91:e5:f7:f6:79:8a:b3:59:
be:53:38:47:65:af:1a:f8:63:f8:c0:3e:7e:1b:cd:
7c:ec:26:c6:05:61:a2:2d:e3:c4:a4:a7:6d:0b:f2:
1a:4d:d0:0c:3d:a7:20:1d:cf:1f:65:a9:f9:92:c1:
cb:41:c7:20:4b:3f:9a:4f:04:9f:79:e2:fb:ed:53:
83:fa:2a:12:71:9c:a8:d0:68:e0:30:ea:89:74:8d:
af:a9:fc:aa:58:b0:56:c3:7e:49:f3:8e:66:b1:17:
2c:f2:b4:a7:14:14:94:a8:32:6a:5e:0e:b3:99:48:
b4:77:69:37:fd:1e:1e:0c:7e:28:fa:d4:2f:ab:8e:
fa:8c:e5:1b:d0:4a:b3:c8:b6:aa:3c:2f:b6:9a:74:
79:7e:13:f5:48:91:f2:bf:4c:08:c7:fc:6f:73:41:
40:b9:3c:ed:2f:93:c8:56:4a:c0:c5:99:22:7f:14:
ad:06:b7:14:cb:41:14:6f:2e:54:35:e0:d9:c0:e7:
29:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:FE:9B:B4:F8:35:E3:1C:9F:D2:72:27:BA:BA:4C:38:96:E7:C5:5B
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/r_6btPg14xyf0nInurpMOJbnxVs.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
58:21:6a:ba:27:24:f3:38:f8:9a:cd:ba:3c:aa:f4:08:8e:3e:
6d:75:f9:06:9b:0a:48:e2:04:19:52:ce:d0:4c:a7:8a:2b:32:
51:17:5d:fe:d1:45:5c:fb:df:6e:25:7e:2f:2a:a2:7b:61:70:
b4:37:a0:af:0e:cc:b6:d4:de:38:76:eb:7e:b3:ef:0c:12:c3:
37:55:02:0c:16:12:13:24:d1:1e:9f:73:44:5a:24:44:fb:cb:
7c:6b:49:74:6f:20:52:73:43:1c:66:dc:70:64:e7:c5:63:bf:
85:f0:c7:0a:78:52:f9:45:fd:3b:8e:43:65:f1:c8:6a:26:96:
e9:31:87:91:da:38:78:c9:16:7b:6c:e6:d0:5d:3e:a6:19:67:
fe:51:7c:28:7c:29:e8:bc:3c:86:83:c8:bd:d1:2e:26:14:3b:
24:c9:1b:f0:0f:b2:35:9d:f4:fe:94:81:33:92:fe:64:62:bd:
39:da:2e:e3:36:ad:26:0f:29:8c:7c:18:7a:ad:c7:01:fb:83:
ab:e1:fc:93:cb:bc:15:f5:f6:02:02:7e:0a:3a:b5:de:ec:c6:
02:8d:2f:ef:e5:13:e6:a0:80:89:91:d8:5b:43:5b:c0:b4:dd:
70:84:b3:6b:41:20:14:21:51:78:5d:5d:95:2d:9f:48:7c:63:
68:68:b4:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:41:57 2025 by rpki-client