Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/w6RPjlncQ-CobglsPZ1tFHLEgOE.roa
File: w6RPjlncQ-CobglsPZ1tFHLEgOE.roa (raw, json)
Hash identifier: PEu/DKvo8AgD3Uwbxzi4ftrQ0RZYuwEoi+kr4sukVsM=
Subject key identifier: C3:A4:4F:8E:59:DC:43:E0:A8:6E:09:6C:3D:9D:6D:14:72:C4:80:E1
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 71B0
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/w6RPjlncQ-CobglsPZ1tFHLEgOE.roa
Signing time: Mon 30 Jun 2025 11:44:40 +0000
ROA not before: Mon 30 Jun 2025 11:44:40 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29104 (0x71b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jun 30 11:44:40 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=C3A44F8E59DC43E0A86E096C3D9D6D1472C480E1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:2f:d1:1a:e7:57:82:fe:97:ce:39:e0:e5:d7:
85:04:d4:dd:79:47:1b:2b:09:08:c8:9d:6b:de:53:
40:3f:6e:8b:4a:39:18:b6:be:92:78:ad:a9:c3:69:
05:fc:f2:24:ee:10:7c:21:33:44:2d:81:25:ce:36:
22:30:31:ea:fe:0f:0f:f4:a5:84:1b:a3:f4:b1:c4:
80:53:c7:00:c0:27:b7:ec:3e:7e:ee:7f:00:e7:e5:
da:b6:1a:91:07:c5:39:fb:8b:39:a8:ba:46:b6:a1:
ec:c9:5a:48:93:c9:68:52:42:8a:51:82:14:7a:5e:
92:9d:80:d6:d0:83:ef:0c:08:fe:44:bd:f6:3a:7e:
9d:c3:08:15:10:53:a1:68:fc:ae:bd:a3:7f:d6:9c:
22:66:97:cf:0a:34:81:5d:a9:66:d2:e3:9f:12:85:
da:65:ca:08:73:93:ac:7a:19:ac:97:3f:b3:72:2e:
67:7d:23:bd:80:5d:5a:c9:a4:c6:34:07:97:a5:98:
ad:7f:04:fd:18:09:3b:a5:ef:12:79:79:a9:71:8c:
38:2a:d6:21:58:10:60:55:89:d8:9e:0a:d8:36:0c:
c0:c5:86:92:d0:0a:ad:ec:17:e9:c0:c9:92:46:fb:
71:2b:4f:7d:c4:5b:db:56:ef:d3:eb:09:35:23:76:
25:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:A4:4F:8E:59:DC:43:E0:A8:6E:09:6C:3D:9D:6D:14:72:C4:80:E1
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/w6RPjlncQ-CobglsPZ1tFHLEgOE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
14:d6:52:75:54:e0:d7:6f:7c:55:f8:e8:f2:69:39:72:98:03:
94:69:b1:2b:f5:cf:3f:7f:86:8c:36:6c:41:3a:c2:f0:35:8e:
62:84:a3:cb:ec:c3:8b:53:6b:40:f2:81:67:47:a8:f8:22:d0:
94:b8:5e:83:4a:28:d8:03:ec:b9:ad:0a:e0:74:58:66:86:8b:
d5:9c:2b:24:96:af:e4:5e:9e:da:a8:7d:8c:50:81:f9:40:ff:
ca:f4:53:d1:7b:09:fe:90:51:30:bd:5f:9e:58:2d:4a:39:98:
c5:bf:91:06:32:d4:4f:92:00:65:90:c7:5d:39:bb:4d:a9:b9:
cf:03:4e:86:54:ce:3c:74:1d:71:eb:a4:5b:45:66:eb:52:77:
61:ec:8b:ea:9f:48:ce:ff:3d:e1:13:38:dc:ef:c5:59:2f:6e:
41:2c:67:e9:c7:b8:a4:df:39:d3:a7:aa:c0:8e:93:65:e2:3b:
19:22:f5:dc:c7:22:2f:79:0f:6f:16:d9:4a:68:1c:3c:f8:40:
a9:08:52:d9:96:37:01:9e:67:ed:2f:41:60:e2:f4:c6:4f:20:
78:3c:01:f3:a9:fa:45:df:ae:28:99:57:bc:14:ca:30:45:56:
6a:8b:c6:28:97:b2:74:ae:9f:52:5b:05:aa:e3:2b:fe:79:fb:
7e:dc:38:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:50:37 2025 by rpki-client