Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/El1s_f0rYvs91WZUDZLxAtbaNa4.roa
File: El1s_f0rYvs91WZUDZLxAtbaNa4.roa (raw, json)
Hash identifier: 7V2ZF/++s9HescRgn5WoCDT7+RTcrTQVMmUb9c3pGYA=
Subject key identifier: 12:5D:6C:FD:FD:2B:62:FB:3D:D5:66:54:0D:92:F1:02:D6:DA:35:AE
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 6DA4
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/El1s_f0rYvs91WZUDZLxAtbaNa4.roa
Signing time: Thu 19 Jun 2025 18:52:07 +0000
ROA not before: Thu 19 Jun 2025 18:52:07 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28068 (0x6da4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jun 19 18:52:07 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=125D6CFDFD2B62FB3DD566540D92F102D6DA35AE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:9d:e6:74:05:ad:0e:2a:0e:66:ed:9f:25:e0:
a4:d8:10:01:63:b6:52:9f:22:88:c1:4d:9b:89:46:
52:50:a1:96:c9:8a:2a:58:15:57:9a:41:9c:fa:43:
5a:a7:5e:73:2a:0f:63:18:2f:2b:b2:e1:9b:85:00:
84:3a:7b:61:70:76:f6:26:d2:8a:dc:8f:93:fa:ed:
00:27:48:e9:bf:a3:92:2c:f1:76:b8:f7:46:7f:1c:
aa:19:3a:cc:de:94:a4:88:de:1d:48:83:02:1d:fe:
3e:38:cd:fc:91:b0:70:8c:ce:b3:3a:08:f9:79:05:
e6:67:ba:e2:4e:5c:3c:a9:71:a2:71:4d:1e:bf:9d:
59:b3:c1:41:fc:68:eb:ca:05:91:64:96:a0:c3:5d:
56:f7:55:a7:5b:b1:4a:88:c1:ef:bb:5e:0f:ea:8b:
1e:ec:7d:64:10:4a:0c:f8:c4:68:df:00:54:dc:86:
8d:d3:11:6a:7d:73:86:1b:7f:07:fe:58:43:5a:f3:
59:01:cf:ab:c3:f4:6d:e8:3d:11:8b:33:b9:be:7a:
1d:2d:51:ef:53:a9:bf:c6:cf:0f:da:b9:1a:cd:4b:
a8:ec:b6:d6:af:43:a9:33:13:73:e9:4b:f7:06:b8:
f3:11:38:34:9e:db:aa:59:1d:03:25:db:73:be:66:
b9:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:5D:6C:FD:FD:2B:62:FB:3D:D5:66:54:0D:92:F1:02:D6:DA:35:AE
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/El1s_f0rYvs91WZUDZLxAtbaNa4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
21:5d:71:da:30:1e:cc:21:48:4f:fc:11:e2:43:63:7e:94:a9:
19:a1:bc:6d:55:93:f3:5b:d8:3b:2d:d0:df:3f:7e:ad:24:21:
10:1b:c9:fc:27:33:a7:73:4c:8b:5a:56:f4:4b:26:68:54:56:
99:39:2b:e0:c3:d3:0c:f4:f6:d6:1f:08:57:0f:ab:a5:c0:99:
00:5a:e8:1f:94:2d:09:81:4a:4a:86:63:03:7b:d2:8f:ed:f9:
eb:83:20:db:a9:27:7d:27:8b:95:df:67:c2:7a:c6:b4:92:2f:
7b:b2:bb:1c:62:d7:b0:2e:64:98:5f:84:36:7f:2d:76:88:39:
87:37:b6:0a:8a:e4:cb:60:a4:c6:50:51:ad:98:61:9a:2e:61:
da:06:7e:14:b6:4f:57:8b:3b:47:bf:e5:8f:d4:b1:d3:88:60:
9a:e7:bc:23:61:ee:c3:8a:11:5c:f2:41:be:a9:b8:7f:3d:36:
a3:ab:0f:f9:9a:78:3d:a2:81:29:d2:99:9a:46:13:9c:26:b2:
5c:a1:75:54:02:4d:63:c3:7e:cc:6e:92:cc:44:73:14:ec:cd:
8c:91:52:c2:9c:c4:15:fd:8e:61:27:72:35:e4:29:a5:ef:4d:
d1:4e:13:9a:da:19:dd:c6:69:06:a9:c8:14:e5:6e:06:c7:75:
49:f4:f6:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 16:33:41 2025 by rpki-client