Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/Lli8g-RopHth89T2rltozaALIGU.roa
File: Lli8g-RopHth89T2rltozaALIGU.roa (raw, json)
Hash identifier: BO7pOfZ5J2mnFyLZYqc3Ddp9zmRQToilZXI1/y61PCI=
Subject key identifier: 2E:58:BC:83:E4:68:A4:7B:61:F3:D4:F6:AE:5B:68:CD:A0:0B:20:65
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 71CC
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/Lli8g-RopHth89T2rltozaALIGU.roa
Signing time: Mon 30 Jun 2025 18:44:41 +0000
ROA not before: Mon 30 Jun 2025 18:44:41 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29132 (0x71cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jun 30 18:44:41 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=2E58BC83E468A47B61F3D4F6AE5B68CDA00B2065
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:be:8a:a2:ef:e0:7f:e0:4d:6a:c3:27:b5:8d:
b8:34:d5:42:63:5e:81:96:e3:fc:d8:75:12:c2:06:
bc:ab:2f:3d:64:37:c9:9b:e3:47:4d:8c:98:92:69:
cc:30:7b:72:37:11:2b:b1:40:2b:33:96:df:ea:c8:
48:42:9c:16:df:9d:72:5a:51:45:0d:f3:e2:e4:36:
97:aa:92:51:47:42:10:3d:f1:44:ff:20:0b:ea:cd:
e7:74:f2:45:54:51:97:00:91:da:21:21:0c:72:a0:
60:b2:d2:bd:f9:44:27:dd:16:56:1e:62:c1:06:8c:
bc:2b:c8:c5:10:2b:fc:ea:37:a6:b3:63:69:1b:e2:
5e:4e:15:d6:be:fd:75:03:5d:02:2e:78:de:d6:2a:
d3:ee:bc:23:7d:2f:e3:8d:d1:20:68:0c:fc:34:bd:
9e:cf:b5:19:96:15:7c:d5:cf:51:88:52:f5:ef:54:
57:7c:8b:b5:3f:6e:60:01:59:c1:43:79:55:7f:ab:
91:48:9f:dc:2b:92:2a:53:c7:74:10:e8:84:89:8f:
53:aa:a3:64:15:a1:bd:a3:74:51:cc:68:04:b3:17:
b5:8f:2c:86:52:85:1b:e2:22:95:62:5d:0b:42:49:
56:10:1e:5a:9c:44:51:7a:65:52:61:76:ac:76:7d:
87:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:58:BC:83:E4:68:A4:7B:61:F3:D4:F6:AE:5B:68:CD:A0:0B:20:65
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/Lli8g-RopHth89T2rltozaALIGU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
47:27:9d:86:19:62:44:13:1b:02:c1:22:93:39:7a:af:9a:5d:
af:bd:38:7d:49:cd:c6:c3:92:9c:b5:a1:b2:f3:10:81:94:46:
2b:a8:88:ef:08:2e:72:71:e9:56:72:97:ee:36:61:31:f2:94:
75:6e:fb:27:81:40:71:0f:3d:3b:a1:37:8a:42:03:9e:bb:1f:
dd:30:83:09:af:f4:75:8e:b2:bf:ea:e2:54:6d:c3:69:28:7d:
49:7c:50:70:4d:6d:5b:66:01:2a:66:52:1f:e0:e5:5f:30:f5:
6d:77:b0:c6:96:17:68:2e:d3:17:59:f8:6b:31:4e:c9:2a:f1:
a4:b6:69:a7:06:30:35:1d:94:ef:39:d7:d2:00:5a:bc:68:86:
64:98:f9:a8:da:e7:29:c1:42:f9:f8:b3:b0:5f:b6:16:12:e0:
6b:f9:aa:f6:6a:2f:5c:16:c3:a8:53:dc:be:79:13:6a:db:36:
49:66:57:ea:a2:aa:bb:e2:3f:3b:29:cf:7e:83:34:ab:c5:c3:
e6:55:59:29:be:70:d5:78:b5:3e:51:5d:88:fb:b0:b8:71:d1:
a5:1f:06:a6:f0:39:b4:a2:0b:1b:cc:32:95:cf:1d:48:91:3e:
ce:58:fb:10:f3:3d:82:36:1f:a8:94:7e:06:38:f3:61:98:c1:
b9:e7:34:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:50:37 2025 by rpki-client