Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/J6Em0WylncmbqE919NlzjBod6pU.roa
File: J6Em0WylncmbqE919NlzjBod6pU.roa (raw, json)
Hash identifier: VxqbtI5RICIDEmbZc6TcyKc+cMXgwEBsNbPYqOyXiGI=
Subject key identifier: 27:A1:26:D1:6C:A5:9D:C9:9B:A8:4F:75:F4:D9:73:8C:1A:1D:EA:95
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 641C
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/J6Em0WylncmbqE919NlzjBod6pU.roa
Signing time: Sun 25 May 2025 01:11:57 +0000
ROA not before: Sun 25 May 2025 01:11:57 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25628 (0x641c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 25 01:11:57 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=27A126D16CA59DC99BA84F75F4D9738C1A1DEA95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:17:c8:06:53:be:d5:e4:b7:66:f0:65:30:a4:
d4:c7:61:3f:e2:d8:1f:a1:f5:11:0a:bb:63:a0:df:
e3:1e:17:94:88:97:08:81:eb:f3:5f:4a:72:85:b6:
a8:be:f5:62:02:c9:a6:3c:e8:1d:84:cd:1e:a1:e0:
2d:e6:36:e9:31:3c:5e:07:b8:74:ae:e2:a7:25:18:
82:72:d2:6c:e8:4a:6c:9a:46:db:d5:85:2d:9f:93:
c4:0a:cd:7f:8d:ef:8c:28:5f:9f:c9:9a:d3:4c:5e:
6a:bb:6a:7f:71:f3:37:7d:09:90:b1:4a:4f:49:a8:
77:13:53:34:ff:d7:61:2f:11:56:a1:99:77:92:57:
56:b3:63:96:66:cc:64:35:2b:95:de:01:a1:be:94:
62:96:d0:54:5b:1b:2c:f5:1f:2a:36:8b:f5:2c:9c:
98:b8:b3:c3:70:88:ee:97:77:b7:c6:8e:25:61:d1:
44:b0:87:97:b9:06:45:88:df:a1:90:8d:87:76:89:
c7:5c:d6:e1:8e:a9:32:e3:29:fd:c8:38:c7:51:59:
4f:61:6b:0d:e0:af:d8:26:0e:47:66:e1:d1:bd:0f:
24:bd:14:8f:41:20:5a:f4:e1:fc:70:3b:e3:0c:74:
59:bb:cc:87:56:a9:67:09:ab:ea:05:69:a8:81:49:
2c:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:A1:26:D1:6C:A5:9D:C9:9B:A8:4F:75:F4:D9:73:8C:1A:1D:EA:95
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/J6Em0WylncmbqE919NlzjBod6pU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
93:1e:44:d6:2f:71:5f:d1:3b:6c:34:40:a0:55:cb:03:c0:2a:
34:a1:dc:06:75:fc:00:c8:36:b5:51:11:01:e2:c2:e2:20:bd:
74:9a:05:ff:09:85:38:8a:e0:bd:28:00:34:bb:b1:81:4b:f3:
06:08:8a:06:8d:37:85:21:dd:2e:1e:1e:da:8b:38:c1:eb:89:
34:76:de:bd:1c:15:3d:f8:16:7d:ea:42:c5:d8:f2:b1:13:c4:
44:27:d7:49:cd:63:e7:be:69:95:a5:7e:37:e5:ed:9b:31:fc:
01:8f:90:93:5d:ab:3a:dd:a0:81:61:3e:28:b6:ea:b0:4e:24:
6f:ec:ed:40:90:8b:42:5f:9a:40:51:a8:20:b2:5d:0b:a5:11:
1e:fb:31:a7:13:e6:39:05:30:16:ff:c1:ac:e4:63:65:ef:58:
8a:59:17:46:95:b9:ee:2d:e8:8a:2a:70:ce:ca:35:df:f4:10:
cb:fb:2d:76:25:e8:17:60:bf:ce:83:e6:b9:f1:d7:72:fd:6e:
c7:f3:89:73:26:73:d9:ba:98:2a:e5:04:c8:35:28:9e:34:90:
ea:3c:ce:7f:60:d8:00:b3:1b:ad:ef:5b:db:b2:5b:da:7f:3c:
82:93:76:eb:bf:1d:b6:0b:9f:73:39:56:eb:d9:92:da:c7:4e:
57:74:c8:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 18:10:00 2025 by rpki-client