Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/Lgxoj0jcjV5oG5cWKn-6a7hlGN8.roa
File: Lgxoj0jcjV5oG5cWKn-6a7hlGN8.roa (raw, json)
Hash identifier: Y/U5ENdFoYp1FcBwBen1sTO4tSiLt6TGRslR6cYvmrY=
Subject key identifier: 2E:0C:68:8F:48:DC:8D:5E:68:1B:97:16:2A:7F:BA:6B:B8:65:18:DF
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 7720
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/Lgxoj0jcjV5oG5cWKn-6a7hlGN8.roa
Signing time: Tue 15 Jul 2025 00:14:29 +0000
ROA not before: Tue 15 Jul 2025 00:14:29 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30496 (0x7720)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jul 15 00:14:29 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=2E0C688F48DC8D5E681B97162A7FBA6BB86518DF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:43:47:a4:ef:fd:48:d1:7c:96:ee:f3:cc:51:
75:33:f5:ea:25:82:a4:ce:ee:6f:c3:4f:c6:8d:73:
5e:7f:f2:e9:da:0c:bd:6e:e2:5c:c0:19:51:ed:43:
d2:ae:fd:ea:07:d0:78:57:95:5a:29:1a:28:98:83:
71:c2:a4:7d:51:59:25:fc:1a:57:75:b7:8b:2e:76:
f3:6f:dc:bc:d2:38:55:66:de:7c:2d:94:2f:9a:12:
ba:ea:7d:68:f7:b5:f3:16:44:50:05:40:64:62:62:
e9:a4:59:a7:4a:7b:1d:fe:fe:94:01:f1:45:ff:86:
e5:52:cf:1f:6b:45:88:94:d4:83:b5:34:43:7d:22:
2e:12:30:52:b9:de:76:6d:6a:31:cc:5b:ed:95:0e:
04:9a:08:49:dc:67:64:31:0d:bd:de:40:51:af:fd:
d5:77:0d:58:24:0c:1d:61:7a:90:ca:98:be:ca:8c:
69:e1:06:69:bd:0b:b8:91:e3:86:62:eb:7d:a8:7e:
90:a1:8e:11:6a:f0:95:34:4a:cc:16:53:51:9a:e1:
8f:86:e4:bf:41:27:fe:e5:2d:8b:92:be:99:a2:18:
9d:8a:32:12:3c:8c:1d:1c:96:48:cf:38:c0:2d:63:
05:70:cc:3c:3e:4d:91:4d:60:4b:88:4d:c3:75:f2:
49:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:0C:68:8F:48:DC:8D:5E:68:1B:97:16:2A:7F:BA:6B:B8:65:18:DF
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/Lgxoj0jcjV5oG5cWKn-6a7hlGN8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
6e:d5:ed:13:3f:cc:4a:5b:ec:38:9b:33:0f:6a:fa:cd:2a:54:
2e:7d:e1:9d:2b:79:1d:32:0c:64:c1:fc:c3:79:ab:56:1d:56:
96:ff:7e:08:67:d6:b4:6a:0e:e6:f6:bb:1d:71:53:9e:71:53:
2d:82:d4:29:23:c7:25:d8:5b:86:98:b0:8f:da:80:d6:e6:ba:
7e:76:7f:7b:e9:ec:8d:ee:69:db:97:e2:d3:6e:2d:6e:bc:9d:
ab:86:bd:d5:d8:fc:25:1b:e6:d7:1b:0c:ba:00:13:2a:76:d1:
8f:7e:28:d0:6e:8e:d1:71:46:9e:bf:88:d3:19:72:72:33:d4:
7f:39:87:9e:8e:5f:41:9c:fe:b1:91:2b:9c:cc:b8:04:61:54:
19:59:78:90:95:c6:e8:f6:ad:9b:65:b6:42:d0:a3:17:8e:55:
c6:df:fc:b8:57:3e:b4:f2:dc:16:d7:ef:f9:f5:7b:f8:e6:d9:
32:fb:c3:f1:5a:c0:51:06:ac:2b:44:44:a9:c3:b4:3a:19:02:
42:75:ab:80:02:ab:5e:fe:7c:00:26:d6:db:04:23:35:1c:85:
34:8c:e2:66:02:d0:ea:04:27:01:7e:82:9b:24:7b:d1:46:52:
39:cb:88:a3:ae:2d:6c:6f:ed:40:8e:7d:59:ff:c3:05:74:d9:
94:92:24:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:35:56 2025 by rpki-client