Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/Ly0_WuI4KE5rbuqPOogxLK2Fw-I.roa
File: Ly0_WuI4KE5rbuqPOogxLK2Fw-I.roa (raw, json)
Hash identifier: zdjzQ7ySf675L9j+mKjFW+h6tjje0AlTMipoES5DjF0=
Subject key identifier: 2F:2D:3F:5A:E2:38:28:4E:6B:6E:EA:8F:3A:88:31:2C:AD:85:C3:E2
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 76E8
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/Ly0_WuI4KE5rbuqPOogxLK2Fw-I.roa
Signing time: Mon 14 Jul 2025 10:11:41 +0000
ROA not before: Mon 14 Jul 2025 10:11:41 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30440 (0x76e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jul 14 10:11:41 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=2F2D3F5AE238284E6B6EEA8F3A88312CAD85C3E2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:f1:b1:45:a6:f9:8a:f4:51:14:1c:ac:67:31:
33:43:24:cc:32:80:74:33:40:c7:18:2c:16:37:95:
4e:38:4a:45:0f:20:16:0a:1d:91:81:7c:01:b0:37:
1a:8b:4c:b8:d7:cb:0f:bb:e9:89:23:70:cf:4a:7a:
86:70:0d:15:5e:b8:12:c1:fe:87:22:8d:f8:2d:d6:
42:81:b1:85:42:e7:94:0d:fe:89:33:5d:05:f5:c9:
63:64:51:18:52:48:dd:2d:31:fe:cc:c1:fb:b0:fa:
0d:f3:ab:19:81:f3:86:d3:d3:74:f5:60:fe:58:20:
dc:80:ee:0e:ed:06:a4:b5:85:0e:17:37:19:7b:a1:
16:0c:4d:7a:d2:bc:d1:60:f0:46:71:d4:51:f6:55:
69:6e:35:0b:47:ed:98:52:82:86:77:84:56:7b:17:
77:72:31:d2:6c:80:fc:6e:4e:71:fe:fb:e8:5f:7f:
a3:65:77:e0:83:5d:7b:b4:41:00:b9:a6:84:9d:6d:
5a:9e:6c:eb:57:07:4d:a3:6d:ae:ac:b3:61:05:95:
85:f4:4f:18:85:ec:e5:5f:38:79:49:79:3b:e0:2c:
c7:7b:18:0c:50:1c:d4:dd:ec:ea:59:16:c1:39:a7:
09:5e:b9:32:0c:8c:bd:0b:cc:1a:56:24:b4:c3:5c:
92:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:2D:3F:5A:E2:38:28:4E:6B:6E:EA:8F:3A:88:31:2C:AD:85:C3:E2
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/Ly0_WuI4KE5rbuqPOogxLK2Fw-I.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
6b:60:db:c2:d0:12:c7:29:35:0c:8c:9d:9d:eb:85:e0:74:3e:
f9:d3:1f:da:12:a7:f7:5c:94:5d:65:2f:8f:6d:5d:49:3b:d1:
5b:a0:68:44:38:d0:3f:07:07:d2:2e:eb:de:35:b1:29:e9:74:
9f:28:cd:8a:76:4d:77:d9:cf:af:5d:d0:ee:fd:78:91:d2:47:
b6:8e:2a:86:af:75:0f:20:44:0f:cf:95:fb:90:fa:de:de:d1:
14:c5:70:42:94:3d:eb:1d:f4:e0:9c:21:e2:2a:a2:84:0c:28:
ea:c5:ec:18:f9:c1:84:2b:e6:69:9a:d5:f5:fe:38:24:91:bc:
8e:3b:63:6b:6a:22:0b:4f:e6:34:ad:c5:e3:6f:d7:5b:b9:eb:
c2:f6:44:b9:d2:66:38:50:82:55:0d:50:b9:52:6e:13:7a:0d:
fc:69:d5:34:e7:37:86:04:61:67:e8:c8:4b:c7:87:82:f7:f3:
72:4a:3b:a5:ed:7e:3e:3a:ec:ab:cb:57:3c:2c:3e:ee:2b:7e:
e3:9c:9f:d7:b0:e2:9a:60:72:88:e7:8e:f9:2a:78:82:45:00:
d2:57:b4:db:85:86:85:c0:80:60:1b:ac:f9:ce:65:4f:83:06:
f6:4b:8d:58:66:c9:e7:25:f5:b5:75:75:38:c4:29:a2:37:9b:
bd:8a:04:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:45:41 2025 by rpki-client