Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/rLH6bv0ey0y_OlpP-lIY6m0Kvb0.roa
File: rLH6bv0ey0y_OlpP-lIY6m0Kvb0.roa (raw, json)
Hash identifier: dRZS0j6VF0HiHYbPda/dBRfaKtWBoXh08xTGLJDKhQ8=
Subject key identifier: AC:B1:FA:6E:FD:1E:CB:4C:BF:3A:5A:4F:FA:52:18:EA:6D:0A:BD:BD
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 64AA
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/rLH6bv0ey0y_OlpP-lIY6m0Kvb0.roa
Signing time: Mon 26 May 2025 12:41:03 +0000
ROA not before: Mon 26 May 2025 12:41:03 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25770 (0x64aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 26 12:41:03 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=ACB1FA6EFD1ECB4CBF3A5A4FFA5218EA6D0ABDBD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f3:14:2a:31:1f:af:29:b7:33:3e:f0:c5:ff:
ad:4f:48:72:17:81:fc:96:b0:15:f7:ba:d8:37:e2:
35:09:79:88:39:81:ee:cc:76:bf:09:da:31:86:9f:
66:c9:e3:9d:fc:d7:77:a3:d6:85:0d:5e:2f:48:79:
11:59:e0:0d:26:7d:c7:07:ea:44:72:c1:53:d0:93:
19:ad:0f:c2:f2:3f:be:b7:05:de:5b:00:cf:3d:ff:
6c:47:72:dc:29:e1:7d:d5:c9:03:74:86:35:39:ad:
18:92:47:ec:62:e6:e1:a2:a1:35:89:83:98:50:25:
31:3d:e4:d6:1c:4e:6f:3c:57:cd:23:3f:85:a4:f2:
38:86:b0:45:46:64:73:77:e2:2f:bf:fd:dd:78:f9:
54:00:03:0b:fd:1f:12:32:87:25:26:50:d7:e7:4f:
d4:18:65:1e:71:9d:45:0c:02:f8:41:a3:f3:f6:a8:
6a:83:25:e1:e8:95:e3:53:f8:7e:11:69:71:f8:4b:
92:5c:60:c6:ea:63:74:c8:a5:80:76:ce:b2:97:39:
1a:ea:9d:a9:33:ae:f9:b4:27:9f:b8:ce:da:9e:bd:
bd:71:92:ff:71:7f:71:3a:62:39:27:8c:34:2d:4c:
d8:08:c6:5f:11:2d:fe:5e:2f:c5:57:eb:ab:fe:a9:
c2:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:B1:FA:6E:FD:1E:CB:4C:BF:3A:5A:4F:FA:52:18:EA:6D:0A:BD:BD
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/rLH6bv0ey0y_OlpP-lIY6m0Kvb0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
4e:98:91:2d:1b:6f:96:2f:b1:7f:d1:a6:bc:52:38:95:45:7f:
44:93:be:85:73:b9:03:83:84:f0:2b:d6:b1:6d:f4:30:f1:7f:
30:da:5c:91:c6:19:95:29:16:3c:74:b5:96:e7:32:1b:57:5b:
9f:59:a9:f4:64:ad:53:cf:77:1f:31:8c:71:57:5a:7a:0e:f2:
de:3d:6c:63:5c:a6:07:04:e7:70:8c:04:f5:6e:09:e6:e5:ba:
31:c9:68:f6:db:00:a4:d4:bf:d7:57:d6:54:01:a5:14:88:b8:
aa:9a:86:71:58:cc:e8:f5:a7:18:79:33:7c:66:1c:4c:b2:54:
f3:e3:12:c9:23:2e:f8:b3:0f:53:b0:43:e8:ad:ae:b9:37:ab:
f9:55:4a:37:13:ea:30:7f:35:c2:64:fb:e4:cf:78:19:14:f0:
d5:8e:c1:f4:f1:c6:dd:24:14:21:d4:eb:6f:33:e8:19:5b:d2:
88:f1:10:db:65:d8:57:2b:a5:1a:7f:85:b7:86:b7:c1:a5:93:
18:7d:fd:1b:41:31:d7:e8:f8:ee:63:86:25:ff:f1:60:5b:9f:
78:bd:be:71:66:00:dc:46:8c:fe:0d:7f:32:02:23:6e:17:68:
30:af:97:42:cd:f4:dd:d2:0c:95:7f:6e:94:36:a9:13:e8:30:
dd:6b:77:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 00:39:58 2025 by rpki-client