Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/Ls6MH_t5FaPJfgKWJFD_E8G_LDw.roa
File: Ls6MH_t5FaPJfgKWJFD_E8G_LDw.roa (raw, json)
Hash identifier: bjTg3t6uuE9M9cVdEDkyyE1sAqD/83SfX1P/CxDw+ws=
Subject key identifier: 2E:CE:8C:1F:FB:79:15:A3:C9:7E:02:96:24:50:FF:13:C1:BF:2C:3C
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 613A
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/Ls6MH_t5FaPJfgKWJFD_E8G_LDw.roa
Signing time: Sat 17 May 2025 08:40:33 +0000
ROA not before: Sat 17 May 2025 08:40:33 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24890 (0x613a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 17 08:40:33 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=2ECE8C1FFB7915A3C97E02962450FF13C1BF2C3C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:6b:31:a7:11:6e:95:42:1b:76:b9:73:0f:80:
9e:06:1b:85:00:8b:0b:e6:84:e5:f7:b3:66:db:0d:
1f:8c:81:3f:83:bc:17:93:9d:f4:6c:58:b2:35:95:
1f:c4:42:a7:b4:f6:88:06:b1:d2:c1:06:07:b9:66:
2a:c5:95:4c:3a:66:48:d2:75:9d:3a:b4:52:aa:4d:
48:9c:a2:eb:72:fc:4b:86:c9:fc:9a:73:cc:f3:8e:
1c:42:9b:a4:e3:11:9e:c0:bd:8b:77:aa:0e:e3:c4:
5c:58:44:44:f7:e1:8f:d5:5a:dd:71:44:38:ee:5c:
70:68:a0:d5:81:ea:cf:a9:43:92:df:70:3d:1b:41:
cb:b8:1e:19:04:56:e2:4d:91:08:b1:cf:b8:4c:53:
bc:59:68:43:38:b3:ed:51:fe:7e:e5:b1:ed:7a:a4:
03:91:fa:7b:3e:1a:95:4d:f2:c5:65:79:ec:02:05:
5e:dc:9f:5b:f9:42:80:63:6c:63:7f:7d:56:34:ae:
81:9d:8a:78:2a:8f:0a:be:3a:f1:cf:b0:1f:35:b3:
aa:70:2f:f7:c2:c5:71:a5:6f:8c:2f:de:dd:38:13:
82:94:2e:fe:4e:41:5b:e4:43:1c:a3:57:f5:8a:6e:
26:df:07:bb:7a:e6:71:fb:83:b5:7a:62:d4:ce:ed:
e4:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:CE:8C:1F:FB:79:15:A3:C9:7E:02:96:24:50:FF:13:C1:BF:2C:3C
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/Ls6MH_t5FaPJfgKWJFD_E8G_LDw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
75:61:9c:4a:61:ae:33:6b:e1:07:ba:63:a3:da:7d:67:f5:0d:
4f:c0:0a:65:e8:b7:70:46:f0:e1:39:6f:63:55:0a:bc:04:de:
66:04:6a:e7:f0:41:42:1f:8d:e5:82:23:5c:2e:60:ce:f9:e8:
3a:ac:b4:51:23:eb:97:df:97:65:3e:cc:10:14:a4:ef:30:1f:
d6:97:f4:0f:24:be:e1:cd:be:1a:af:64:39:4b:a6:1d:6b:79:
47:c1:d5:10:50:4d:b6:54:8a:5c:69:4f:e3:dc:a5:f4:f2:b3:
9f:bd:e7:25:c7:49:11:e6:67:ec:ad:28:8f:22:17:aa:44:04:
c9:32:e5:26:61:10:7b:8e:7a:63:88:75:29:62:7e:1e:b1:4d:
fe:59:6b:2c:0e:c2:90:51:b8:e0:5b:a5:ad:8e:96:42:f9:13:
e2:ac:e2:8b:56:31:40:7e:fe:f1:20:9e:4a:49:68:09:29:10:
24:7e:29:69:b3:ef:5d:13:8a:d1:02:66:97:e5:4e:07:b9:78:
54:60:52:f0:45:b3:5f:67:e7:3e:d2:52:83:f3:13:da:59:ca:
3c:04:aa:da:7f:6e:1b:81:06:17:34:35:12:f1:da:b8:4c:70:
64:cc:1d:59:16:48:85:ee:74:bc:81:24:bb:80:5f:b4:9c:f5:
65:cd:98:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 19:16:31 2025 by rpki-client