Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/aWylKGROTMtWiqZdGuOSSvMNUV4.roa
File: aWylKGROTMtWiqZdGuOSSvMNUV4.roa (raw, json)
Hash identifier: bP5Q6ZObTUPntdZuXPs6Rx0hcEfVB4OSvkXVXSlfaJU=
Subject key identifier: 69:6C:A5:28:64:4E:4C:CB:56:8A:A6:5D:1A:E3:92:4A:F3:0D:51:5E
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 6AF2
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/aWylKGROTMtWiqZdGuOSSvMNUV4.roa
Signing time: Thu 12 Jun 2025 06:42:16 +0000
ROA not before: Thu 12 Jun 2025 06:42:16 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27378 (0x6af2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jun 12 06:42:16 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=696CA528644E4CCB568AA65D1AE3924AF30D515E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:0e:40:8e:f5:16:98:02:42:24:0e:32:ff:48:
6a:f7:05:c9:86:69:0f:d1:ad:a6:b9:e1:b3:15:7d:
07:fa:cb:5b:e1:18:a8:17:84:e4:d4:45:c8:e9:a9:
96:00:f2:c0:19:ae:a8:fb:4e:42:ec:57:65:61:e1:
98:d0:1a:bf:c2:f7:49:4c:ca:c2:46:7e:6f:77:0d:
9b:a0:46:31:e8:26:dd:89:21:d2:10:b6:a2:49:11:
4f:59:09:b7:93:f3:f9:71:21:7d:53:55:67:5d:5a:
4b:d5:ef:c3:6d:53:56:74:18:39:95:65:05:7d:99:
3c:2f:00:1c:bd:e6:7c:fb:32:b2:0d:ee:0f:65:f5:
a5:2d:07:00:de:14:4c:78:5b:64:fa:8a:97:03:f9:
77:2d:23:50:9f:63:bc:b7:83:62:ac:d0:41:43:87:
ce:fd:9d:34:1a:b7:c5:1b:0e:2a:e0:3d:3d:02:58:
49:20:e4:83:2f:14:e0:d3:b3:27:17:c9:98:35:50:
21:c4:d0:c6:04:41:6b:96:a4:e9:39:c6:ff:88:c4:
36:b4:36:84:7d:3e:44:97:fc:f1:80:90:21:b6:2e:
0c:24:21:65:1d:1a:c2:6c:5f:90:e7:e7:a5:83:e0:
0d:79:87:ac:bb:65:b6:2b:8a:45:f9:43:2a:0f:75:
aa:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:6C:A5:28:64:4E:4C:CB:56:8A:A6:5D:1A:E3:92:4A:F3:0D:51:5E
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/aWylKGROTMtWiqZdGuOSSvMNUV4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
9c:a8:e2:bf:7f:9a:d1:c0:43:c8:c7:30:6b:4e:de:aa:58:7c:
10:f0:73:2c:4a:dc:2a:fd:b7:81:c4:71:24:6b:a1:a8:e2:04:
1f:f6:87:b3:f5:8d:24:89:4e:bb:a2:e2:a3:36:78:df:28:5d:
77:04:98:40:aa:63:41:42:cf:8f:23:fd:e3:9b:90:a6:b4:bc:
f6:13:4b:1c:40:6b:81:06:6c:3e:9c:ff:f2:fb:ae:9e:45:64:
a5:f7:cc:cb:05:94:aa:08:90:c0:e5:03:f6:60:98:14:31:10:
4e:29:50:45:2a:d8:b0:af:a7:ee:56:d6:1d:1e:80:48:84:ee:
fe:8a:15:65:06:82:0b:6c:9d:44:0b:bd:e0:fa:66:03:97:bb:
2f:4d:44:06:de:70:99:9c:4c:3d:0c:03:a6:b5:30:ac:b9:d6:
14:09:3b:6c:a7:67:73:e2:66:90:3b:db:1e:f7:bf:ce:7b:3d:
c9:5d:76:4f:2a:4f:a8:4d:1c:71:d2:e1:ef:de:26:50:94:bc:
f7:35:ba:32:26:87:63:4a:d7:71:f9:bb:d5:91:1e:d3:54:df:
6d:bc:bf:81:d9:41:e6:12:61:14:36:ff:80:4a:cc:55:9f:60:
26:20:ff:31:8a:58:d8:00:55:be:64:6b:ec:3a:7f:44:3f:0d:
fb:9b:43:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 00:57:32 2025 by rpki-client