Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/ky6YhmF53nRUQen4D4QNw1eF_7o.roa
File: ky6YhmF53nRUQen4D4QNw1eF_7o.roa (raw, json)
Hash identifier: mFV79+uqTcaoWWRQTlwZ9FRXQ6YYwc9kN5ER1QP4WIw=
Subject key identifier: 93:2E:98:86:61:79:DE:74:54:41:E9:F8:0F:84:0D:C3:57:85:FF:BA
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 6A2A
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/ky6YhmF53nRUQen4D4QNw1eF_7o.roa
Signing time: Tue 10 Jun 2025 04:42:05 +0000
ROA not before: Tue 10 Jun 2025 04:42:05 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27178 (0x6a2a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jun 10 04:42:05 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=932E98866179DE745441E9F80F840DC35785FFBA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a0:52:0a:da:f3:68:83:49:87:30:29:68:77:
29:d4:13:5c:23:c9:84:c8:87:65:27:97:da:0a:d4:
31:cf:56:0c:38:6e:7b:f3:02:a7:3b:c3:d0:36:99:
4f:2c:78:04:0c:3a:fd:c4:3f:52:bd:cf:18:e7:69:
e4:09:64:5c:96:4c:ae:c0:7f:b8:13:c6:10:28:65:
62:00:52:88:0f:e3:76:0c:ae:9e:e3:a7:40:e4:7b:
6f:63:13:53:1c:b4:cd:32:69:97:e8:54:9e:a3:eb:
f3:a8:13:29:0b:2f:49:79:7a:d9:41:9b:dc:18:e9:
fb:3a:64:f7:6e:eb:6d:b0:5f:c6:dd:37:80:35:d7:
52:5e:f3:fc:3b:3d:61:f1:1f:58:f9:3c:91:54:6b:
3a:ab:38:87:4d:0e:30:41:de:44:7b:d7:1c:ac:49:
19:8a:01:d7:0b:20:72:3f:7f:01:4d:b1:0c:95:9e:
9d:a6:35:ee:13:4f:04:ac:bd:2a:dc:b5:7f:1c:8e:
d0:cf:52:76:01:8a:bb:6f:c5:de:64:88:5c:60:6c:
d8:65:44:45:64:b0:55:bc:9f:b6:80:32:55:cd:fc:
1e:b8:8f:d8:9f:7b:61:ac:e2:e9:76:c2:d5:74:51:
99:43:f6:1c:18:9e:23:05:78:a2:d1:05:31:00:0f:
38:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:2E:98:86:61:79:DE:74:54:41:E9:F8:0F:84:0D:C3:57:85:FF:BA
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/ky6YhmF53nRUQen4D4QNw1eF_7o.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
28:d8:ce:23:4f:55:df:3c:97:9d:97:9a:56:a9:be:fa:f3:b6:
d8:d0:ba:4c:93:5a:e1:bf:0b:47:1e:66:f7:13:2d:11:9f:30:
db:a7:f6:47:3c:d7:07:5d:1c:51:4d:8e:56:48:af:46:07:a4:
74:d7:60:f5:08:c6:78:bf:30:58:a7:fe:3a:57:81:44:75:89:
28:c0:8e:a1:bb:a4:bc:ab:40:0d:b2:95:0f:f9:3f:29:d7:ef:
13:1c:80:5f:0f:95:aa:f2:58:bc:59:eb:7f:7d:17:95:ba:2b:
2e:e5:9e:63:1a:0c:5f:4a:52:89:62:87:26:0c:fe:50:eb:e5:
9c:86:31:78:8e:58:db:c5:b0:f7:5d:80:1c:15:1a:2d:ad:79:
15:b5:69:3e:65:e7:89:5e:81:52:17:ea:99:24:72:d7:bf:ed:
04:b4:e5:bc:49:c0:bb:4e:c6:a2:40:57:53:ad:c5:08:fe:0e:
24:dc:1b:57:22:ed:d3:b2:4e:e8:8c:6b:5b:db:97:74:4f:57:
d0:19:06:46:3c:1e:f9:ce:a3:c3:23:86:98:a6:66:73:3a:8c:
44:6a:cb:fb:f8:cb:b2:0a:54:7e:f6:ce:ac:4c:02:5f:72:50:
78:cd:07:b1:08:e9:00:3b:be:48:d0:88:ae:ea:02:d0:95:b7:
5b:50:2b:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 23:06:12 2025 by rpki-client