Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/lsGLVgQP6IzJooJ4Ph2xksUozPY.roa
File: lsGLVgQP6IzJooJ4Ph2xksUozPY.roa (raw, json)
Hash identifier: FnLfQX0qwRhWPlaWkb733BBSl+Mu4MHDERCLt7ugas0=
Subject key identifier: 96:C1:8B:56:04:0F:E8:8C:C9:A2:82:78:3E:1D:B1:92:C5:28:CC:F6
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 7418
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/lsGLVgQP6IzJooJ4Ph2xksUozPY.roa
Signing time: Sun 06 Jul 2025 21:45:12 +0000
ROA not before: Sun 06 Jul 2025 21:45:12 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29720 (0x7418)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jul 6 21:45:12 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=96C18B56040FE88CC9A282783E1DB192C528CCF6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ea:13:64:98:5b:36:f3:b7:4b:ee:bb:9a:43:
f9:cf:68:bf:6d:b6:18:7d:c4:f6:ea:58:88:41:64:
78:d9:01:92:5d:20:09:6e:99:9f:01:35:f5:ed:bc:
d1:52:1f:4c:97:0c:51:ad:74:64:05:c5:82:7c:87:
4a:57:7b:b0:2c:ff:91:28:27:a4:98:91:a4:12:e5:
04:19:48:ec:76:2f:75:dc:9c:a2:27:ba:d9:7e:79:
e3:86:52:e9:41:10:c2:b4:f5:10:c5:18:23:15:2f:
98:f7:a3:b6:aa:cb:f8:36:b0:81:51:7a:6a:67:7f:
cd:27:7c:9a:6f:e4:76:b1:01:2d:4c:f6:11:46:f5:
74:ef:b6:fc:09:ff:d4:97:3f:d5:0e:e9:ad:fb:1e:
74:b5:b6:ba:d5:12:0a:98:ea:eb:30:52:3b:cd:b8:
0a:79:c5:fd:11:74:6f:23:cf:42:ea:a3:04:9e:01:
a9:77:8d:b0:0e:fd:a0:a8:cd:24:4b:83:fc:bd:21:
a5:e3:76:20:b5:f1:ff:b4:fa:cb:a9:7d:9d:7f:81:
a5:13:8a:5c:a3:c1:cf:db:f4:4a:a3:b5:f8:b8:1a:
a3:bc:76:ae:8e:41:71:41:34:50:09:e7:6c:f2:6e:
74:67:01:d9:e3:1c:f7:e9:c1:ae:30:ed:81:8d:58:
96:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:C1:8B:56:04:0F:E8:8C:C9:A2:82:78:3E:1D:B1:92:C5:28:CC:F6
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/lsGLVgQP6IzJooJ4Ph2xksUozPY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
00:12:98:70:ff:65:11:fc:1a:eb:7a:e8:2b:94:da:20:95:2c:
e5:2a:a9:43:df:12:52:8d:4c:c3:cb:7a:35:08:57:72:c9:5a:
03:df:31:7f:38:42:f5:d7:81:8b:b0:19:36:bc:c4:3f:6a:58:
72:2c:a9:38:b3:7e:31:a1:7f:51:33:ec:05:df:6c:be:4b:8f:
75:50:0e:0c:b1:4c:d5:3d:3f:b2:81:f8:8b:07:4d:d6:53:5a:
5f:ba:f3:13:5c:7f:7a:ce:3c:3e:ce:3d:ea:8f:c1:04:24:aa:
5f:1c:4c:2f:11:83:b6:83:f8:ba:c6:70:6f:58:fa:16:38:88:
0f:c6:37:81:d3:f1:f7:34:ba:d8:e9:da:8e:54:7d:c8:40:f2:
44:01:07:43:81:ca:f5:67:81:c1:d6:0b:c2:66:c8:2b:e8:2e:
b0:41:52:7d:b7:27:67:45:6b:ca:05:17:a8:0a:d3:93:5d:d7:
e0:ed:b8:ce:f8:bc:87:1e:9c:b7:ff:33:4f:a8:d9:85:91:e9:
ad:bd:5d:6b:e6:dd:81:3e:bf:4f:b5:de:42:1e:85:9e:18:8a:
bc:4f:54:59:ae:a5:41:a8:10:0e:04:77:12:00:8e:01:5a:c6:
ee:fd:0b:72:77:98:2e:a8:d9:03:94:b3:c7:92:48:11:21:0e:
1c:8b:b5:4a
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgICdBgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNTA3MDYy
MTQ1MTJaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDk2QzE4QjU2MDQwRkU4
OENDOUEyODI3ODNFMURCMTkyQzUyOENDRjYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCs6hNkmFs287dL7ruaQ/nPaL9tthh9xPbqWIhBZHjZAZJdIAlu
mZ8BNfXtvNFSH0yXDFGtdGQFxYJ8h0pXe7As/5EoJ6SYkaQS5QQZSOx2L3XcnKIn
utl+eeOGUulBEMK09RDFGCMVL5j3o7aqy/g2sIFRempnf80nfJpv5HaxAS1M9hFG
9XTvtvwJ/9SXP9UO6a37HnS1trrVEgqY6uswUjvNuAp5xf0RdG8jz0LqowSeAal3
jbAO/aCozSRLg/y9IaXjdiC18f+0+supfZ1/gaUTilyjwc/b9Eqjtfi4GqO8dq6O
QXFBNFAJ52zybnRnAdnjHPfpwa4w7YGNWJanAgMBAAGjggI0MIICMDAdBgNVHQ4E
FgQUlsGLVgQP6IzJooJ4Ph2xksUozPYwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L2xzR0xWZ1FQNkl6Sm9v
SjRQaDJ4a3NVb3pQWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwYgYIKwYBBQUHAQcBAf8EUzBRME8EAgABMEkD
BAIr7zADBAMr9gAwDAMEAiv2DAMEBCv2IDAMAwQCK/Y0AwQCK/ZgAwQCZyMwMAsD
AwJn7AMEA2fsEDAMAwQCZ+wcAwQCZ+xgMA0GCSqGSIb3DQEBCwUAA4IBAQAAEphw
/2UR/BrreugrlNoglSzlKqlD3xJSjUzDy3o1CFdyyVoD3zF/OEL114GLsBk2vMQ/
alhyLKk4s34xoX9RM+wF32y+S491UA4MsUzVPT+ygfiLB03WU1pfuvMTXH96zjw+
zj3qj8EEJKpfHEwvEYO2g/i6xnBvWPoWOIgPxjeB0/H3NLrY6dqOVH3IQPJEAQdD
gcr1Z4HB1gvCZsgr6C6wQVJ9tydnRWvKBReoCtOTXdfg7bjO+LyHHpy3/zNPqNmF
kemtvV1r5t2BPr9Ptd5CHoWeGIq8T1RZrqVBqBAOBHcSAI4BWsbu/Qtyd5guqNkD
lLPHkkgRIQ4ci7VK
-----END CERTIFICATE-----
Generated at Sun Jul 20 12:38:39 2025 by rpki-client