Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/v6fNCK5FemhVl6VM7Pc_0C4eadY.roa
File: v6fNCK5FemhVl6VM7Pc_0C4eadY.roa (raw, json)
Hash identifier: VGzCKJd6ZEaiatqKXMHXKWZ2jGDlQL9sfEkc0pt0tes=
Subject key identifier: BF:A7:CD:08:AE:45:7A:68:55:97:A5:4C:EC:F7:3F:D0:2E:1E:69:D6
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 6DE6
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/v6fNCK5FemhVl6VM7Pc_0C4eadY.roa
Signing time: Fri 20 Jun 2025 15:14:08 +0000
ROA not before: Fri 20 Jun 2025 15:14:08 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28134 (0x6de6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jun 20 15:14:08 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=BFA7CD08AE457A685597A54CECF73FD02E1E69D6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:46:53:64:e7:d4:21:0a:65:e5:64:cc:57:46:
52:d6:48:de:74:46:16:ea:1c:38:ec:08:5c:27:78:
df:63:3d:18:63:28:4a:9a:0c:da:dc:f1:cb:bf:7d:
d8:cc:54:53:59:39:59:68:e0:27:0d:bd:e8:c4:b9:
74:96:1d:ed:bc:74:3e:5a:2f:62:e8:d0:e5:aa:00:
65:88:00:2c:a1:6d:94:c0:61:2b:5e:8e:65:9e:6b:
5b:f6:a4:1b:56:17:d9:16:06:74:7f:26:61:e7:5d:
0b:72:9d:a6:9e:6c:11:78:32:ea:b9:bb:50:7f:3b:
db:79:01:7b:ab:37:ea:ae:37:b7:9f:5e:c4:c4:34:
2f:73:57:28:0f:91:09:5f:1b:79:27:a9:13:c2:f9:
4f:01:d5:5f:e4:6f:b8:04:89:24:1c:c4:51:bd:b0:
27:00:57:be:8d:71:5d:7d:99:c6:ef:37:a6:c6:4e:
7c:d9:9d:d9:a0:c8:d7:68:53:ac:9c:0d:e6:e6:01:
4e:6f:72:30:f9:b0:4d:dd:c9:04:1b:3d:f4:42:e6:
87:f5:44:1f:fb:dc:eb:b3:3f:73:76:b6:ae:c9:35:
53:d6:9d:4e:88:21:e5:f6:47:a7:87:d0:74:a4:d0:
2c:07:ac:05:ad:40:77:3f:f5:1e:93:a9:e1:50:cf:
40:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:A7:CD:08:AE:45:7A:68:55:97:A5:4C:EC:F7:3F:D0:2E:1E:69:D6
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/v6fNCK5FemhVl6VM7Pc_0C4eadY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
26:71:c4:31:a4:76:b1:e4:32:bd:ca:53:3f:51:c3:7c:05:d1:
f7:98:0f:22:b3:d5:74:b9:a5:62:85:1d:2d:ea:f1:a1:f3:e4:
2e:4d:d6:03:4a:34:45:63:ce:13:3e:d2:8b:94:e8:1e:01:9d:
eb:f1:93:00:a9:56:fa:2f:0a:12:6c:44:a0:3a:8a:d9:73:cd:
be:13:ea:80:71:87:5c:26:f1:7e:85:ab:b7:b9:b0:85:30:49:
a4:33:50:43:38:cc:72:20:51:0f:6f:68:da:bb:15:71:ba:22:
4d:62:bd:9c:6b:85:7c:e1:f0:0d:8e:de:96:b4:01:30:ae:dd:
91:d9:c5:a4:30:a8:f6:df:dc:3b:8a:1b:9f:4c:a6:13:53:31:
a7:95:bd:5d:e0:ae:27:76:58:65:d2:8b:30:50:a5:44:b4:ae:
73:1f:5c:18:5d:56:20:50:56:82:77:0c:67:a7:1c:a3:94:c9:
28:42:9f:00:f8:42:41:bd:8f:49:47:18:ba:cc:c6:23:a7:49:
c0:de:5e:ad:26:f1:72:64:1e:a7:14:60:58:4c:16:d6:eb:2d:
83:9d:58:71:d3:07:19:45:c3:61:76:e7:78:8a:26:da:7d:36:
7b:d1:12:87:97:10:ab:95:f0:e3:11:46:16:62:9c:96:ab:58:
d5:d2:c6:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:41:21 2025 by rpki-client