Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/VtW6iwDm0R6DUa4qW4sJmiqMofM.roa
File: VtW6iwDm0R6DUa4qW4sJmiqMofM.roa (raw, json)
Hash identifier: Z7QccXUIds/kTYiV98myTfM3IMpHcJrLFyEi0XIUep0=
Subject key identifier: 56:D5:BA:8B:00:E6:D1:1E:83:51:AE:2A:5B:8B:09:9A:2A:8C:A1:F3
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 6910
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/VtW6iwDm0R6DUa4qW4sJmiqMofM.roa
Signing time: Sat 07 Jun 2025 06:11:49 +0000
ROA not before: Sat 07 Jun 2025 06:11:49 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26896 (0x6910)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jun 7 06:11:49 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=56D5BA8B00E6D11E8351AE2A5B8B099A2A8CA1F3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:57:ac:67:61:99:40:77:a7:c2:04:37:62:25:
f7:58:40:01:5e:c6:c5:2c:ac:fd:0b:00:e9:09:ae:
c1:38:ec:ee:a9:f1:97:80:15:65:9c:c2:e9:70:44:
20:57:ad:9e:bd:1e:05:cf:2b:5a:be:f0:42:56:86:
9f:7b:f9:9b:93:75:17:f2:ec:f8:16:00:40:ff:35:
71:cd:76:7c:a6:20:f9:f6:6f:d1:f1:72:dc:a8:83:
12:e7:60:0d:98:4f:83:ca:a6:14:26:80:8b:af:66:
3a:00:63:ac:af:0e:0c:4b:32:ae:69:c0:8e:f5:ca:
7b:ba:4a:e6:82:b3:93:fa:ad:80:00:71:64:12:fe:
f2:9b:6b:36:92:e8:3f:ae:62:a5:b4:42:a6:9a:fe:
e4:77:06:54:30:e5:e6:7d:69:dd:27:8c:d0:f1:69:
67:e7:5a:b0:c6:5b:9a:ea:14:1c:17:01:6c:82:45:
c6:a6:c5:38:5f:45:1f:d4:b0:58:8e:06:02:e1:3e:
f2:15:01:16:b5:03:63:7d:4a:18:7c:f3:ab:d2:5c:
d7:ff:0d:1c:80:37:fd:58:fc:f1:08:e6:99:71:76:
40:cf:4c:b2:4d:af:03:96:fa:60:49:f2:25:6e:18:
05:90:2f:29:51:7b:ed:0f:02:56:82:63:94:fd:9f:
33:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:D5:BA:8B:00:E6:D1:1E:83:51:AE:2A:5B:8B:09:9A:2A:8C:A1:F3
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/VtW6iwDm0R6DUa4qW4sJmiqMofM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
8a:2a:fa:ee:2e:f7:5d:a6:15:99:b9:38:79:a3:03:60:4e:86:
6f:66:88:79:4d:bb:4c:77:0b:cf:e7:af:9f:d9:df:f1:ef:19:
23:ac:1b:02:11:e5:b5:95:10:31:7d:d5:27:5e:90:6e:a5:6c:
b3:63:3f:55:6c:c6:03:ee:36:b1:fc:99:cd:55:73:5f:87:a9:
45:a2:5b:38:b1:98:7d:24:fc:8e:a0:9a:99:7c:33:bb:ab:78:
48:53:70:70:32:62:50:47:de:cd:cc:77:2b:11:04:04:8f:e4:
93:b2:46:4a:b1:41:b2:97:54:bd:08:8a:43:14:e1:29:da:77:
80:8c:63:f7:e3:ec:ee:c3:20:e9:a3:f1:2d:ea:0d:58:e1:a8:
cd:72:af:98:60:fe:e4:e1:d9:27:a2:08:8f:ac:96:84:34:ba:
61:8c:9a:3a:d4:a7:02:4a:6f:31:11:ad:f9:7b:e0:6c:48:aa:
65:7b:36:a7:ec:da:fb:af:b5:9e:75:08:a4:1b:ad:ad:bc:92:
73:5a:a4:61:74:cf:84:45:6c:62:d8:a1:bd:79:20:4a:70:6f:
e3:d3:39:16:a0:6c:aa:bd:55:0c:f8:27:fc:a8:b8:20:ed:8b:
81:38:55:d4:1f:71:21:2e:2c:ef:dd:5d:36:36:e3:78:da:d1:
2b:10:cd:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 18:37:11 2025 by rpki-client